$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998ee652-37fc-301e-a95b-f45a8f5f6d2c.roa File: 998ee652-37fc-301e-a95b-f45a8f5f6d2c.roa (raw, json) Hash identifier: EWZ/vRH3D/Ddc6pGk2xY+E3fV36PbYKZCWgmP4VivcA= Subject key identifier: 98:D6:DD:98:A0:72:77:BD:D9:1C:D2:20:09:E1:58:5D:31:B2:61:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DD4C077DD7B396CB2F9013C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998ee652-37fc-301e-a95b-f45a8f5f6d2c.roa Signing time: Thu 14 May 2026 13:00:31 +0000 ROA not before: Thu 14 May 2026 13:00:31 +0000 ROA not after: Wed 12 Aug 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.219.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d4:c0:77:dd:7b:39:6c:b2:f9:01:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 13:00:31 2026 GMT Not After : Aug 12 13:00:31 2026 GMT Subject: CN=4d4e55fe-2627-47cf-aee1-662780ded850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:3a:d4:50:7d:af:70:3d:1a:b1:c1:11:48: 30:d1:d5:19:eb:79:02:d7:c2:93:51:b1:5e:04:a6: 95:01:00:ff:ec:c7:c2:7f:8f:0a:5b:98:37:21:d9: 76:fa:d6:25:8d:9f:e3:86:2b:7d:02:99:7b:44:2f: 0c:fe:de:3e:a5:fc:78:39:cf:fa:55:34:8a:cf:90: da:ea:38:ee:80:bc:00:a2:d7:cd:99:91:52:f6:59: 67:72:3a:11:1e:72:cd:f4:26:6c:d7:f2:86:2a:09: 0d:f0:f2:36:e2:7e:79:01:3c:2a:ca:dc:cf:ae:cc: 53:bb:e7:32:69:fe:e5:26:6a:38:55:1e:27:63:f4: 5a:ea:a6:f3:41:f1:ec:c0:7a:1e:a3:9c:8f:c4:35: 66:87:cd:34:b8:50:71:8c:71:e1:8f:69:4b:ab:9e: 9a:c2:86:81:bf:4b:b2:60:7c:b3:bf:3a:f8:a5:2f: 19:27:a6:22:02:09:62:68:3f:23:92:fb:e1:64:8d: 3c:09:66:ad:a3:d5:1a:72:67:55:3a:73:a8:da:f1: 1c:7a:55:d6:f6:36:11:70:71:c0:99:89:69:aa:c1: 57:f5:ae:b1:eb:fc:83:52:69:e2:64:63:32:3d:ca: 6f:6a:73:1f:c8:82:d7:9f:7a:03:71:1d:5a:53:69: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:DD:98:A0:72:77:BD:D9:1C:D2:20:09:E1:58:5D:31:B2:61:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998ee652-37fc-301e-a95b-f45a8f5f6d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b3:79:3f:60:64:64:82:91:9e:cc:b7:95:ca:2f:fe:96:d8: 49:e8:ae:d5:1d:c7:59:55:d7:68:a6:84:8f:64:18:30:c3:4d: dd:f0:e9:ca:ca:a5:12:31:f3:ad:9e:60:0c:64:8e:99:a0:30: d9:5c:c6:0f:5d:eb:1e:16:68:9a:1d:48:e7:a9:48:e5:b3:6a: 9e:7e:d9:02:90:76:47:b7:19:1f:68:10:bb:bf:68:50:2f:48: a9:e6:a5:eb:c6:58:2a:f0:da:4c:fd:fa:a7:82:7c:d4:d7:ff: aa:bf:5b:15:e3:50:c6:4e:3d:16:ef:c6:01:8c:09:94:4a:dd: 9f:4d:ba:ba:8d:fa:92:5c:a0:61:76:c4:29:d3:16:39:f4:b1: e0:25:43:ee:43:e4:9c:bf:ab:0a:57:43:11:07:2a:74:4e:01: 0f:be:00:90:2a:ab:64:9e:4c:82:54:66:e8:87:6c:16:27:2e: e5:dd:3c:ed:32:a9:42:f3:d0:fd:43:35:cc:6d:d1:85:59:0d: e4:de:b4:16:52:b4:97:4a:ca:65:ff:9c:e4:e8:4a:81:72:a2: a5:87:d2:cc:c8:7b:6d:42:1b:db:55:11:e7:e1:4a:d9:29:d0: 6a:df:d6:ff:4f:aa:a9:0c:36:67:9e:28:c2:dc:d1:b0:2c:59: cc:5e:52:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwHfdezlssvkBPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk NGQ0ZTU1ZmUtMjYyNy00N2NmLWFlZTEtNjYyNzgwZGVkODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+k61FB9r3A9GrHBEUgw0dUZ63kC18KTUbFe BKaVAQD/7MfCf48KW5g3Idl2+tYljZ/jhit9Apl7RC8M/t4+pfx4Oc/6VTSKz5Da 6jjugLwAotfNmZFS9llncjoRHnLN9CZs1/KGKgkN8PI24n55ATwqytzPrsxTu+cy af7lJmo4VR4nY/Ra6qbzQfHswHoeo5yPxDVmh800uFBxjHHhj2lLq56awoaBv0uy YHyzvzr4pS8ZJ6YiAgliaD8jkvvhZI08CWato9UacmdVOnOo2vEcelXW9jYRcHHA mYlpqsFX9a6x6/yDUmniZGMyPcpvanMfyILXn3oDcR1aU2kH/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjW3Zigcne92RzSIAnhWF0xsmFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk4ZWU2NTItMzdmYy0z MDFlLWE5NWItZjQ1YThmNWY2ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9uUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuzeT9gZGSCkZ7Mt5XKL/6W2EnortUdx1lV12imhI9kGDDDTd3w6crK pRIx862eYAxkjpmgMNlcxg9d6x4WaJodSOepSOWzap5+2QKQdke3GR9oELu/aFAv SKnmpevGWCrw2kz9+qeCfNTX/6q/WxXjUMZOPRbvxgGMCZRK3Z9NurqN+pJcoGF2 xCnTFjn0seAlQ+5D5Jy/qwpXQxEHKnROAQ++AJAqq2SeTIJUZuiHbBYnLuXdPO0y qULz0P1DNcxt0YVZDeTetBZStJdKymX/nOToSoFyoqWH0szIe21CG9tVEefhStkp 0Grf1v9PqqkMNmeeKMLc0bAsWcxeUnA= -----END CERTIFICATE-----Generated at Sat Jun 13 19:00:43 2026 by rpki-client