$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aea3dde5-1d02-31a5-958c-e96e57fa5ded.roa File: aea3dde5-1d02-31a5-958c-e96e57fa5ded.roa (raw, json) Hash identifier: fD2CDjuuG4WNjjjQ1zZrv+SQcBsm6NQ2/yOfnziqXwk= Subject key identifier: C0:84:87:23:7F:3A:5A:A6:B2:73:3A:DE:79:C0:C9:72:1E:BA:CD:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE41B37DFE6E6D6A8F2FA1280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aea3dde5-1d02-31a5-958c-e96e57fa5ded.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16625 IP address blocks: 23.196.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:37:df:e6:e6:d6:a8:f2:fa:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=26c7c803-1c8d-4d5f-8e3b-9a3a0473afd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:2a:70:d8:d7:6b:5c:1d:24:6d:0f:25:85: f9:45:40:3d:56:71:07:4c:2f:00:9e:09:06:b0:7a: cb:96:5c:88:22:c9:3d:25:33:a4:a6:21:75:d2:7f: 47:7f:89:ce:df:d8:76:cc:15:24:52:1d:e9:91:c0: cb:85:b2:f5:18:91:c2:e3:97:29:34:d0:5f:80:fa: 06:e3:59:ca:b7:ed:88:79:88:ff:d4:11:3b:12:b5: 36:de:c9:c3:64:d8:2b:f7:94:10:8d:17:27:fc:a7: 72:b2:08:b8:6a:ef:af:fc:f4:68:34:77:b3:09:1e: e5:99:c4:4f:21:dc:61:34:35:34:ac:f5:d9:cc:a3: 12:18:78:9b:7f:76:5c:ba:a5:99:15:50:7f:e3:65: 86:9a:e4:5c:fc:c6:61:99:3f:2a:bf:73:4d:21:51: 92:94:16:72:bb:d0:2c:b6:5d:eb:99:36:62:d9:ae: 00:8a:5f:ae:5d:b9:0d:50:d7:a3:5a:6f:50:63:5f: ac:b0:1b:5e:8c:f5:9f:24:6f:2a:dd:5e:b7:60:0a: 6b:4d:48:79:13:cd:a1:26:27:f6:e4:3c:13:98:e0: e8:af:ba:86:e3:cc:d9:4a:dd:22:26:73:0e:ba:83: 96:7b:3e:21:07:3e:17:e6:4c:50:d5:b1:26:34:8d: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:84:87:23:7F:3A:5A:A6:B2:73:3A:DE:79:C0:C9:72:1E:BA:CD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aea3dde5-1d02-31a5-958c-e96e57fa5ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:01:b4:7c:72:a7:fc:f4:46:a8:62:d8:11:c4:12:59:67:c6: 0a:d8:5d:99:29:fb:fa:61:e0:27:c3:18:1d:1d:12:cd:93:98: ee:61:fe:b6:71:00:d3:37:93:14:7d:1d:da:3a:55:64:0b:63: 58:5d:da:2d:3a:1c:e0:85:2b:4c:b9:63:47:8f:4c:19:ef:e9: b2:b3:94:40:57:f3:a5:b1:75:ba:c4:7e:8e:8d:b9:25:9f:4f: f2:18:fc:47:d2:00:8f:89:16:79:af:8e:36:36:97:9c:1e:f9: 1d:c5:14:81:e0:e7:35:bc:32:32:c1:59:8c:3e:24:7e:64:d0: 9a:2b:12:f0:9d:95:08:d2:9b:56:7d:5e:cc:6f:61:12:09:45: cb:16:9b:13:b2:f0:66:f0:6f:1d:e5:cd:47:62:74:c7:fc:0e: 60:c3:c3:d8:a9:e0:a4:95:23:f2:65:b8:1b:72:04:39:aa:eb: 0f:7d:1e:1b:fd:cb:43:ae:bb:45:26:ab:0f:67:60:b9:91:3e: ba:18:33:b7:2f:46:91:54:cb:92:e6:cd:e2:16:41:d5:59:70: 7b:60:fb:86:30:04:5f:00:21:0e:42:89:1d:35:b2:d4:58:7b: db:ed:cc:52:89:c8:0c:46:ff:3e:88:be:20:fd:2a:d2:d5:bb: 3f:9a:2c:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGzff5ubWqPL6EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk MjZjN2M4MDMtMWM4ZC00ZDVmLThlM2ItOWEzYTA0NzNhZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu8qcNjXa1wdJG0PJYX5RUA9VnEHTC8AngkG sHrLllyIIsk9JTOkpiF10n9Hf4nO39h2zBUkUh3pkcDLhbL1GJHC45cpNNBfgPoG 41nKt+2IeYj/1BE7ErU23snDZNgr95QQjRcn/Kdysgi4au+v/PRoNHezCR7lmcRP IdxhNDU0rPXZzKMSGHibf3ZcuqWZFVB/42WGmuRc/MZhmT8qv3NNIVGSlBZyu9As tl3rmTZi2a4Ail+uXbkNUNejWm9QY1+ssBtejPWfJG8q3V63YAprTUh5E82hJif2 5DwTmODor7qG48zZSt0iJnMOuoOWez4hBz4X5kxQ1bEmNI20OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCEhyN/OlqmsnM63nnAyXIeus0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVhM2RkZTUtMWQwMi0z MWE1LTk1OGMtZTk2ZTU3ZmE1ZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8S4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsBtHxyp/z0Rqhi2BHEEllnxgrYXZkp+/ph4CfDGB0dEs2TmO5h/rZx ANM3kxR9Hdo6VWQLY1hd2i06HOCFK0y5Y0ePTBnv6bKzlEBX86WxdbrEfo6NuSWf T/IY/EfSAI+JFnmvjjY2l5we+R3FFIHg5zW8MjLBWYw+JH5k0JorEvCdlQjSm1Z9 XsxvYRIJRcsWmxOy8Gbwbx3lzUdidMf8DmDDw9ip4KSVI/JluBtyBDmq6w99Hhv9 y0Ouu0Umqw9nYLmRProYM7cvRpFUy5LmzeIWQdVZcHtg+4YwBF8AIQ5CiR01stRY e9vtzFKJyAxG/z6IviD9KtLVuz+aLDo= -----END CERTIFICATE-----Generated at Sat Jun 13 13:28:36 2026 by rpki-client