$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f59dde1-f3e4-34a5-a66b-ba942fd9b45e.roa File: 8f59dde1-f3e4-34a5-a66b-ba942fd9b45e.roa (raw, json) Hash identifier: aq7NPHkb1ULofQpwckDCpqv4S5q+HbfyNqLDx2BLRRg= Subject key identifier: 52:67:EB:35:5F:94:E2:33:07:F6:04:4B:21:32:8E:34:AC:53:22:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E253EF622809ABA7115E24F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f59dde1-f3e4-34a5-a66b-ba942fd9b45e.roa Signing time: Fri 12 Jun 2026 09:00:11 +0000 ROA not before: Fri 12 Jun 2026 09:00:11 +0000 ROA not after: Thu 10 Sep 2026 09:00:11 +0000 asID: 16625 IP address blocks: 23.207.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:25:3e:f6:22:80:9a:ba:71:15:e2:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 12 09:00:11 2026 GMT Not After : Sep 10 09:00:11 2026 GMT Subject: CN=2a37af70-4695-40ac-a22d-86b515d61120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:56:2a:d1:bd:4d:f0:2a:df:c3:00:cb:0c: 4c:4e:85:68:29:dd:bb:13:5e:d7:16:5e:8c:ea:19: 6b:f0:9d:25:16:38:ec:3f:7d:75:68:cb:2d:3a:7e: 48:37:bb:ca:d3:97:07:51:dd:f0:07:9c:b5:7c:44: 85:ed:da:fb:91:8b:83:e5:e6:4a:cb:2c:2e:c6:17: 27:cc:1a:cf:57:22:d7:93:e5:41:62:e4:48:5b:b8: 2e:d5:43:95:b1:9a:23:36:1a:0e:90:b2:73:e9:e0: 82:77:8a:92:87:1f:ef:d2:ee:e9:0a:bb:5b:96:5c: de:40:59:21:5a:a4:ea:ef:33:b1:04:21:d6:c0:be: ee:cd:9c:61:82:ed:8c:2f:48:d5:f5:b4:21:7a:21: 38:ff:e7:29:d9:1c:52:b2:33:ce:76:49:54:2b:ff: 96:4f:24:14:a7:de:42:c5:fc:21:9b:96:ab:68:db: a8:40:fd:68:eb:ba:39:b4:40:36:79:ee:61:72:54: d1:d0:e6:36:7e:5a:fe:97:12:63:36:fe:ab:60:a7: 90:0b:1c:7d:35:9a:f1:ff:af:54:b1:64:55:a3:b9: d5:18:45:c9:bf:6b:aa:78:cc:29:e6:0b:88:f0:40: 2a:21:7d:02:32:d2:e5:77:04:f4:24:5e:04:1b:18: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:67:EB:35:5F:94:E2:33:07:F6:04:4B:21:32:8E:34:AC:53:22:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f59dde1-f3e4-34a5-a66b-ba942fd9b45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:30:9f:93:6b:02:61:32:46:3e:c1:5c:df:22:38:0a:53:ac: 8f:70:0a:0d:8f:38:6b:da:7e:61:9c:17:c2:40:13:d3:9e:9b: 46:6f:46:6c:27:dd:5f:81:9e:3f:00:a0:da:4f:3b:6e:65:1f: e9:15:d0:f8:93:ea:9e:fc:fb:fa:ea:49:85:cf:b1:c9:20:84: f7:04:f5:2f:26:6b:64:a9:f1:cc:79:ca:39:8b:aa:53:9d:c5: cb:cb:c5:3f:49:fe:d8:86:c5:95:76:91:e8:86:37:8d:3b:1b: 10:1a:b3:3e:0a:e4:3e:e2:6f:94:5b:9e:7a:96:c7:71:61:44: e3:d0:2e:a5:92:f5:c7:68:4c:b0:b3:a2:74:2b:c3:e7:28:ba: a3:64:52:3d:4f:9e:4e:d5:1a:06:c5:44:71:db:fd:a8:7a:7d: a7:25:72:4c:23:e3:b8:69:ba:4c:f4:d5:74:cc:b5:7f:42:bc: dd:8b:5e:55:84:4f:f1:57:56:91:fa:5f:6a:79:31:6b:24:51: 54:c4:b8:6f:2c:5a:ff:e4:30:24:e9:cb:25:d7:76:21:7b:55: 8b:62:4e:7a:9a:31:05:6d:f7:e6:93:03:36:4f:c8:ff:dc:f3: 55:b4:d5:5d:11:14:5b:ee:c0:07:ac:54:75:9d:99:1a:1e:b9: 6e:a6:dd:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPvYigJq6cRXiTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk MmEzN2FmNzAtNDY5NS00MGFjLWEyMmQtODZiNTE1ZDYxMTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzpWKtG9TfAq38MAywxMToVoKd27E17XFl6M 6hlr8J0lFjjsP311aMstOn5IN7vK05cHUd3wB5y1fESF7dr7kYuD5eZKyywuxhcn zBrPVyLXk+VBYuRIW7gu1UOVsZojNhoOkLJz6eCCd4qShx/v0u7pCrtbllzeQFkh WqTq7zOxBCHWwL7uzZxhgu2ML0jV9bQheiE4/+cp2RxSsjPOdklUK/+WTyQUp95C xfwhm5araNuoQP1o67o5tEA2ee5hclTR0OY2flr+lxJjNv6rYKeQCxx9NZrx/69U sWRVo7nVGEXJv2uqeMwp5guI8EAqIX0CMtLldwT0JF4EGxh3JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJn6zVflOIzB/YESyEyjjSsUyJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY1OWRkZTEtZjNlNC0z NGE1LWE2NmItYmE5NDJmZDliNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF89AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAwn5NrAmEyRj7BXN8iOApTrI9wCg2POGvafmGcF8JAE9Oem0ZvRmwn 3V+Bnj8AoNpPO25lH+kV0PiT6p78+/rqSYXPsckghPcE9S8ma2Sp8cx5yjmLqlOd xcvLxT9J/tiGxZV2keiGN407GxAasz4K5D7ib5RbnnqWx3FhROPQLqWS9cdoTLCz onQrw+couqNkUj1Pnk7VGgbFRHHb/ah6faclckwj47hpukz01XTMtX9CvN2LXlWE T/FXVpH6X2p5MWskUVTEuG8sWv/kMCTpyyXXdiF7VYtiTnqaMQVt9+aTAzZPyP/c 81W01V0RFFvuwAesVHWdmRoeuW6m3XU= -----END CERTIFICATE-----Generated at Sat Jun 13 19:15:18 2026 by rpki-client