$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa File: a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa (raw, json) Hash identifier: RtizyjMmYAO8vcK79T2fdUH17eeR024pxmfCz1UI9A0= Subject key identifier: E6:33:AC:09:EC:1C:DB:BA:1E:68:21:78:22:9F:7F:70:4F:9E:34:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DD35B199BE9400FF593CB6280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 16625 IP address blocks: 23.212.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:19:9b:e9:40:0f:f5:93:cb:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=989c9baf-a347-492c-9bb2-c798aca36298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:ff:8d:25:4b:22:1c:0a:7d:35:8c:80:95: 95:53:4b:79:99:76:76:d5:56:93:5e:90:db:93:82: 0b:9a:88:c9:37:78:a1:59:39:7d:ec:cc:ae:48:f5: 5a:e3:96:d7:08:02:cd:37:9a:10:dc:c3:17:55:72: 33:85:d2:eb:83:a5:17:c7:28:59:4e:0d:bf:67:d0: 0b:ff:f2:aa:7f:70:3d:cb:7e:b2:de:e2:6b:58:37: 45:a5:d3:11:59:a8:cb:c2:01:dd:5f:83:20:03:ca: 08:6a:fc:f4:ee:17:77:f3:05:c4:bc:26:b5:e6:ec: 1a:38:4c:3a:f4:cd:de:da:d6:39:ad:e2:b3:86:4f: ac:a6:27:8d:3c:ac:50:57:30:2f:75:79:03:70:47: cf:a2:8e:17:66:1a:8e:c3:25:61:8f:45:0d:a7:b5: d7:dd:53:96:88:b8:7f:d7:78:30:20:28:30:18:b7: 67:d9:88:1c:6f:00:86:d0:51:70:8c:74:68:e8:a1: dd:b8:ee:69:0e:68:09:c6:b8:a3:55:de:2e:55:02: 4b:28:e4:f2:dc:4b:76:93:8d:09:0f:fa:22:67:ca: f1:75:84:a1:ed:00:89:14:90:41:b1:00:a1:94:4b: dd:a1:fd:4b:5d:a6:2b:8e:3b:5c:58:46:fd:7d:ce: 87:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:33:AC:09:EC:1C:DB:BA:1E:68:21:78:22:9F:7F:70:4F:9E:34:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a240320b-048b-30ff-b2dd-5b09f5eb27f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:35:58:fb:f8:f4:99:02:a0:d5:8a:b7:f7:19:88:b0:a6:b9: bc:ef:2b:57:46:e9:1c:c3:ca:fb:2b:61:f1:7f:78:44:e2:05: fa:75:9e:68:c6:8b:bb:e0:aa:7c:a6:47:dd:7d:2b:b9:a0:96: b6:9b:fa:96:68:82:81:f1:26:41:94:b8:8e:01:13:1d:92:15: 1c:a3:db:74:f1:0b:d2:73:97:43:47:2c:b9:51:38:9c:72:c3: c8:d4:5e:ea:dd:f4:e2:c0:1d:5d:8a:58:a2:3e:cf:7a:c9:a9: 1b:d4:0d:5b:8a:66:1c:58:00:35:a8:97:08:aa:d9:46:aa:df: c7:d0:ab:b6:ec:c4:38:de:b8:8e:e5:9d:d9:81:2a:a6:b7:0c: ec:04:fc:70:22:d7:54:3d:29:b9:47:d7:48:56:0d:c8:a4:42: ef:ab:9c:70:f5:ba:6b:46:05:ef:f7:05:ca:cc:70:56:22:d7: b0:f0:3e:1c:b2:26:69:15:4a:04:6c:db:8c:cf:68:56:4b:d3: d5:bc:15:a8:c2:9e:a5:7d:e5:54:07:d8:a1:e8:fd:b5:e9:cb: 1d:64:df:8e:51:ef:e2:8b:dd:23:b0:75:27:41:7d:84:98:e8: b1:84:71:43:61:dc:76:b3:82:d0:ae:cd:22:36:a8:a7:7f:9e: 2d:4a:76:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWxmb6UAP9ZPLYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk OTg5YzliYWYtYTM0Ny00OTJjLTliYjItYzc5OGFjYTM2Mjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPr/jSVLIhwKfTWMgJWVU0t5mXZ21VaTXpDb k4ILmojJN3ihWTl97MyuSPVa45bXCALNN5oQ3MMXVXIzhdLrg6UXxyhZTg2/Z9AL //Kqf3A9y36y3uJrWDdFpdMRWajLwgHdX4MgA8oIavz07hd38wXEvCa15uwaOEw6 9M3e2tY5reKzhk+spieNPKxQVzAvdXkDcEfPoo4XZhqOwyVhj0UNp7XX3VOWiLh/ 13gwICgwGLdn2YgcbwCG0FFwjHRo6KHduO5pDmgJxrijVd4uVQJLKOTy3Et2k40J D/oiZ8rxdYSh7QCJFJBBsQChlEvdof1LXaYrjjtcWEb9fc6HkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYzrAnsHNu6HmgheCKff3BPnjTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTI0MDMyMGItMDQ4Yi0z MGZmLWIyZGQtNWIwOWY1ZWIyN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9RsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ1WPv49JkCoNWKt/cZiLCmubzvK1dG6RzDyvsrYfF/eETiBfp1nmjG i7vgqnymR919K7mglrab+pZogoHxJkGUuI4BEx2SFRyj23TxC9Jzl0NHLLlROJxy w8jUXurd9OLAHV2KWKI+z3rJqRvUDVuKZhxYADWolwiq2Uaq38fQq7bsxDjeuI7l ndmBKqa3DOwE/HAi11Q9KblH10hWDcikQu+rnHD1umtGBe/3BcrMcFYi17DwPhyy JmkVSgRs24zPaFZL09W8FajCnqV95VQH2KHo/bXpyx1k345R7+KL3SOwdSdBfYSY 6LGEcUNh3HazgtCuzSI2qKd/ni1Kdpw= -----END CERTIFICATE-----Generated at Sat Jun 13 16:08:48 2026 by rpki-client