$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9843197b-232e-3cd5-80eb-f2cf8bd7d4af.roa File: 9843197b-232e-3cd5-80eb-f2cf8bd7d4af.roa (raw, json) Hash identifier: MqpSjGcsLRt1cTjliO8c+O1Ied+ZN2/FzWlE0+scB9A= Subject key identifier: DE:0B:08:58:1F:FE:A1:AD:7F:A0:68:F6:44:30:19:29:34:D0:DF:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE9B0BB1652CA7A97BCB99B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9843197b-232e-3cd5-80eb-f2cf8bd7d4af.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.203.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:bb:16:52:ca:7a:97:bc:b9:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=c3b59ce5-4101-42ab-91bf-6fe65bd3d93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:45:0c:a9:50:f0:7e:a1:80:24:b9:04:58: 0c:75:65:d6:be:c8:ee:f5:f6:2d:b0:06:17:08:33: eb:43:2b:ed:37:94:34:34:d6:5e:0c:20:48:9a:4b: 5b:f6:aa:5a:4e:0c:f2:e5:98:bc:e7:22:02:c5:84: a5:8f:4a:a2:92:b1:4a:ce:7c:2c:f0:e9:2a:57:0c: 08:04:d0:dc:5c:35:fd:d9:08:af:fc:dd:c4:91:66: b2:5a:24:38:a0:14:66:d2:ed:47:77:85:61:35:b8: 01:4c:1a:0f:25:4b:5f:94:13:aa:c2:51:24:56:ac: fc:68:e9:cb:73:fc:f6:5e:68:f9:e9:e3:9e:c6:a7: a9:01:86:af:33:38:a1:9f:aa:04:09:c1:cd:38:a0: 90:00:7f:db:00:ab:a9:8c:ed:2f:74:93:b6:4c:a3: d3:93:00:76:29:80:d6:59:40:cf:46:39:f4:92:e6: 25:91:cc:53:65:83:30:a6:c3:6a:75:e0:1b:59:97: 5d:b3:08:af:f8:70:e3:36:d0:08:e5:7c:b5:20:f8: 5d:ec:99:a3:05:20:4c:6f:59:93:96:6a:08:82:f3: 68:7a:8f:9e:1e:c5:10:cb:e6:bd:97:31:0e:f8:2c: 53:b4:bc:5c:61:23:50:d3:62:4b:00:05:56:c1:a1: ea:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0B:08:58:1F:FE:A1:AD:7F:A0:68:F6:44:30:19:29:34:D0:DF:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9843197b-232e-3cd5-80eb-f2cf8bd7d4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:94:c0:3d:c0:51:7c:be:12:6f:f8:09:d8:61:1b:af:ed:a1: 28:fa:f3:f6:64:fa:bb:59:f5:ce:af:db:a4:c8:4e:4d:55:93: bb:df:ab:f8:e5:7c:5f:01:3e:32:26:4a:3c:10:3c:97:59:6b: 77:a8:92:d8:92:83:84:ff:0a:b1:4a:75:80:16:00:09:98:0b: a2:12:13:e6:96:4c:bd:78:10:47:49:fb:6d:9c:dc:ad:55:c2: 4c:df:7d:45:aa:66:92:d2:53:76:fd:24:ca:1b:fe:55:1a:c5: 00:e1:34:fd:ab:00:8d:fd:63:33:33:25:76:7a:ef:63:8c:68: c1:3b:4f:53:87:4d:0b:e2:a3:78:0a:e8:33:b2:17:97:d6:9d: 69:51:d0:a9:24:a2:f5:e3:d0:95:9f:30:2d:00:2b:2e:b8:8d: 7a:4c:5e:ac:cc:93:8b:9c:0d:67:77:30:7a:74:7d:1a:40:f7: 1a:dd:49:58:2d:2f:79:81:f7:4e:41:96:9a:0b:a5:ba:78:dc: e3:30:4c:63:d5:63:8f:57:d2:4c:80:e8:bf:26:e5:50:2c:9c: 5c:d6:2b:d1:50:fa:d7:51:c9:05:36:77:89:55:db:81:35:33: 00:17:c1:21:d3:5c:66:3e:46:d9:8b:11:75:d4:cb:18:2f:43: a6:1c:6c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psLsWUsp6l7y5mwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk YzNiNTljZTUtNDEwMS00MmFiLTkxYmYtNmZlNjViZDNkOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVdFDKlQ8H6hgCS5BFgMdWXWvsju9fYtsAYX CDPrQyvtN5Q0NNZeDCBImktb9qpaTgzy5Zi85yICxYSlj0qikrFKznws8OkqVwwI BNDcXDX92Qiv/N3EkWayWiQ4oBRm0u1Hd4VhNbgBTBoPJUtflBOqwlEkVqz8aOnL c/z2Xmj56eOexqepAYavMzihn6oECcHNOKCQAH/bAKupjO0vdJO2TKPTkwB2KYDW WUDPRjn0kuYlkcxTZYMwpsNqdeAbWZddswiv+HDjNtAI5Xy1IPhd7JmjBSBMb1mT lmoIgvNoeo+eHsUQy+a9lzEO+CxTtLxcYSNQ02JLAAVWwaHq4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4LCFgf/qGtf6Bo9kQwGSk00N+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTg0MzE5N2ItMjMyZS0z Y2Q1LTgwZWItZjJjZjhiZDdkNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGUwD3AUXy+Em/4CdhhG6/toSj68/Zk+rtZ9c6v26TITk1Vk7vfq/jl fF8BPjImSjwQPJdZa3eoktiSg4T/CrFKdYAWAAmYC6ISE+aWTL14EEdJ+22c3K1V wkzffUWqZpLSU3b9JMob/lUaxQDhNP2rAI39YzMzJXZ672OMaME7T1OHTQvio3gK 6DOyF5fWnWlR0KkkovXj0JWfMC0AKy64jXpMXqzMk4ucDWd3MHp0fRpA9xrdSVgt L3mB905BlpoLpbp43OMwTGPVY49X0kyA6L8m5VAsnFzWK9FQ+tdRyQU2d4lV24E1 MwAXwSHTXGY+RtmLEXXUyxgvQ6YcbI0= -----END CERTIFICATE-----Generated at Sat Jun 13 18:01:07 2026 by rpki-client