$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba160487-d5e6-3e27-991b-3b43da8cd30e.roa File: ba160487-d5e6-3e27-991b-3b43da8cd30e.roa (raw, json) Hash identifier: Rj4rubi6m5c2VL/rdh+rJTmsSJxK+HPrQH/XVQVV3E0= Subject key identifier: 68:02:23:A5:97:1B:EB:58:4E:F3:F5:41:D4:D6:9F:56:D2:85:50:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E0D8438C47B3DE90CE283D700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba160487-d5e6-3e27-991b-3b43da8cd30e.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.217.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:38:c4:7b:3d:e9:0c:e2:83:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=afe23653-8212-41a7-af99-c31e963cd405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:09:e3:50:58:5e:ab:dd:af:22:89:ac:1c:2e: 7d:0f:f3:98:b2:a0:9d:56:85:0d:a7:ee:d8:63:dd: 99:ef:e8:f0:c7:35:28:3a:6e:26:41:78:a0:b9:5b: 67:75:19:f9:ce:29:94:cd:6c:00:e4:30:30:48:98: cd:11:6a:45:d4:b5:0e:2a:a3:ee:27:30:b3:d3:00: 5f:6c:60:1e:e9:2f:a4:b9:49:c0:4a:19:3a:ef:a2: 68:91:04:94:18:34:62:4f:09:ea:1c:90:10:99:7a: 0a:2e:e8:86:82:62:b5:16:6b:c3:97:bf:3d:5b:a2: dc:af:db:cb:8d:d7:71:f7:b6:2c:04:07:35:6b:67: 18:ff:be:9f:24:12:ad:d9:c3:c9:0f:33:4a:bf:b0: 1c:77:08:c7:b6:00:24:6f:cb:94:67:33:cc:2b:63: 7e:7e:7a:9c:ce:d7:34:d6:cb:8f:62:d1:7f:c7:3e: 3a:21:7a:77:ec:10:91:5a:61:94:86:66:b2:71:20: d9:37:83:37:7f:63:79:15:c5:76:a9:c9:d6:f9:f3: f0:d8:85:3f:d5:62:c9:3d:e4:bd:aa:32:a7:44:40: 04:f1:81:7d:1c:86:88:e9:55:ef:42:ad:f9:48:0a: 5f:b2:63:d8:d3:7b:18:f3:5f:64:02:66:97:c1:1f: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:02:23:A5:97:1B:EB:58:4E:F3:F5:41:D4:D6:9F:56:D2:85:50:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba160487-d5e6-3e27-991b-3b43da8cd30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:92:27:c6:2c:a0:e3:d0:d4:cb:fa:86:44:26:bb:8b:8e:81: 31:5f:8d:1e:ea:3e:31:45:1f:9f:20:9c:f1:6a:f2:c9:72:01: b5:e3:ce:54:04:aa:5c:97:04:a2:2c:05:05:82:11:0f:39:36: e5:3f:dc:62:2e:0f:a4:40:2f:f9:52:4c:5b:d8:5c:b1:58:b7: e8:2c:3a:c8:a4:24:c2:76:1d:15:a4:79:ee:84:d8:94:27:61: e5:9d:e4:74:27:dd:f9:04:38:4c:b6:99:ed:79:d4:36:ec:ee: 8c:ac:11:91:98:cf:9b:6f:b2:ae:5c:c3:1a:66:34:c8:62:ac: 8b:74:f4:ed:e5:bf:f0:cf:86:33:ef:a7:41:a9:b0:ee:09:83: 1c:91:e6:fe:c4:50:b1:6c:b3:83:a5:27:d2:71:de:7f:36:5a: 91:2d:25:f8:42:84:09:f9:f6:c6:6e:f5:74:bc:e0:18:78:db: f9:70:74:91:66:16:90:6f:93:46:d7:0d:b5:1d:2a:af:cb:3f: 19:c7:48:be:f7:58:bb:4d:65:68:75:d2:58:f4:e8:d0:46:9e: 0c:a3:17:03:b5:f6:59:e4:5d:c8:da:57:99:18:d5:ea:be:21: f2:6c:1b:65:81:09:83:b7:5f:a9:f0:5f:c3:1a:55:16:18:6f: 14:f0:8f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhDjEez3pDOKD1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk YWZlMjM2NTMtODIxMi00MWE3LWFmOTktYzMxZTk2M2NkNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggnjUFheq92vIomsHC59D/OYsqCdVoUNp+7Y Y92Z7+jwxzUoOm4mQXiguVtndRn5zimUzWwA5DAwSJjNEWpF1LUOKqPuJzCz0wBf bGAe6S+kuUnAShk676JokQSUGDRiTwnqHJAQmXoKLuiGgmK1FmvDl789W6Lcr9vL jddx97YsBAc1a2cY/76fJBKt2cPJDzNKv7AcdwjHtgAkb8uUZzPMK2N+fnqcztc0 1suPYtF/xz46IXp37BCRWmGUhmaycSDZN4M3f2N5FcV2qcnW+fPw2IU/1WLJPeS9 qjKnREAE8YF9HIaI6VXvQq35SApfsmPY03sY819kAmaXwR+yCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgCI6WXG+tYTvP1QdTWn1bShVCIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmExNjA0ODctZDVlNi0z ZTI3LTk5MWItM2I0M2RhOGNkMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSSJ8YsoOPQ1Mv6hkQmu4uOgTFfjR7qPjFFH58gnPFq8slyAbXjzlQE qlyXBKIsBQWCEQ85NuU/3GIuD6RAL/lSTFvYXLFYt+gsOsikJMJ2HRWkee6E2JQn YeWd5HQn3fkEOEy2me151Dbs7oysEZGYz5tvsq5cwxpmNMhirIt09O3lv/DPhjPv p0GpsO4JgxyR5v7EULFss4OlJ9Jx3n82WpEtJfhChAn59sZu9XS84Bh42/lwdJFm FpBvk0bXDbUdKq/LPxnHSL73WLtNZWh10lj06NBGngyjFwO19lnkXcjaV5kY1eq+ IfJsG2WBCYO3X6nwX8MaVRYYbxTwj9E= -----END CERTIFICATE-----Generated at Sat Jun 13 15:38:24 2026 by rpki-client