$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb5afd8-7d9a-3a4d-baa4-2fd060adbbd1.roa File: bdb5afd8-7d9a-3a4d-baa4-2fd060adbbd1.roa (raw, json) Hash identifier: 8zngAphvucOvz0ZcOVFHUQqi2jXuoATlsgCdKy+35FA= Subject key identifier: 86:7C:A8:EE:DD:22:03:D2:E8:2D:90:C2:4D:A2:31:42:CA:5B:59:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DFA7091F81A88A40886569680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb5afd8-7d9a-3a4d-baa4-2fd060adbbd1.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 16625 IP address blocks: 23.204.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:91:f8:1a:88:a4:08:86:56:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=28b228df-68fb-4dca-8a10-3a16a0ba7faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:d9:5b:b0:6e:50:6d:a8:6f:fa:06:9e:a6: 98:d7:cf:e3:3e:42:e5:49:08:80:26:42:ef:5b:30: b1:eb:62:b9:2d:5d:16:8d:ea:9f:4b:f1:de:66:92: 93:cf:4a:36:1b:4a:ca:6c:f3:e2:22:5b:b0:3b:36: e7:41:60:46:11:15:13:88:d1:6e:1e:5f:da:5e:ea: d3:0b:61:9e:38:c1:a7:01:e1:f7:c0:33:1d:e0:3f: 52:74:fd:78:35:48:83:b9:df:1a:e5:28:f2:ed:0c: 62:1f:56:9b:cd:42:db:72:ca:56:bb:98:0d:ff:42: 39:1c:48:89:f8:0e:fa:b1:7c:81:d5:34:f2:4f:88: 0e:68:dc:14:57:26:10:a7:8b:d2:a6:e4:6f:b2:31: 48:d5:bc:75:28:73:48:73:3c:d4:7b:f4:51:6f:63: d4:77:8b:35:3d:66:66:0d:02:56:f4:04:b4:b2:32: 0e:cf:13:d2:3b:aa:f6:04:87:9a:aa:41:0b:1f:46: f2:5e:73:b8:04:66:27:a3:7b:24:25:2a:bb:eb:2c: 14:77:3f:ac:4a:e8:91:bb:a6:50:ed:1c:bc:31:a4: ff:45:0c:91:02:bc:38:20:a3:7f:27:71:bc:0f:b8: 9a:cb:7b:5f:dd:25:89:76:4c:75:cb:71:66:c7:5b: 73:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7C:A8:EE:DD:22:03:D2:E8:2D:90:C2:4D:A2:31:42:CA:5B:59:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bdb5afd8-7d9a-3a4d-baa4-2fd060adbbd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:42:ad:47:59:b3:95:b3:b4:c6:20:33:15:1c:ac:a3:3d:72: c8:7e:81:62:5f:c6:95:e5:ea:97:a2:2a:ac:48:0f:94:25:d0: ec:de:5e:6c:f6:34:a0:7c:bf:f4:39:b6:af:57:58:81:18:a8: 39:b5:82:84:b4:b8:cb:e3:85:1a:33:81:2e:f9:19:5d:bb:a6: 7b:bf:8f:b8:74:72:61:1b:f5:a7:f8:cd:cb:53:20:0f:45:11: 6b:c2:36:c1:76:2e:31:98:b6:4f:ae:dd:df:9f:7b:ba:a8:39: e5:ef:e8:2a:ba:f1:5b:4e:8e:19:24:8e:2b:2a:df:12:c3:6c: 9a:7b:de:20:81:32:f8:1d:ec:5c:8f:93:78:8a:06:18:bf:c1: a8:34:16:76:a5:d1:39:af:48:69:cd:28:c4:89:e1:cd:06:4a: 8b:31:14:11:42:21:b3:91:c4:27:a5:4e:dd:eb:87:76:66:03: 79:80:28:f2:1f:e1:49:37:39:96:c9:e6:fc:7b:3f:70:94:06: c8:b6:51:20:00:a1:85:a2:b1:c8:36:57:48:5f:39:c6:2e:92: 2d:0d:db:0d:32:11:14:e2:e7:30:8e:ba:07:f3:39:71:2c:5c: 33:1a:bb:e7:63:85:c0:d4:9e:89:91:76:e6:1f:b6:46:76:0d: 8c:2b:3b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cJH4GoikCIZWloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MjhiMjI4ZGYtNjhmYi00ZGNhLThhMTAtM2ExNmEwYmE3ZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGDZW7BuUG2ob/oGnqaY18/jPkLlSQiAJkLv WzCx62K5LV0WjeqfS/HeZpKTz0o2G0rKbPPiIluwOzbnQWBGERUTiNFuHl/aXurT C2GeOMGnAeH3wDMd4D9SdP14NUiDud8a5Sjy7QxiH1abzULbcspWu5gN/0I5HEiJ +A76sXyB1TTyT4gOaNwUVyYQp4vSpuRvsjFI1bx1KHNIczzUe/RRb2PUd4s1PWZm DQJW9AS0sjIOzxPSO6r2BIeaqkELH0byXnO4BGYno3skJSq76ywUdz+sSuiRu6ZQ 7Ry8MaT/RQyRArw4IKN/J3G8D7iay3tf3SWJdkx1y3Fmx1tzKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ8qO7dIgPS6C2Qwk2iMULKW1m+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmRiNWFmZDgtN2Q5YS0z YTRkLWJhYTQtMmZkMDYwYWRiYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8xkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9CrUdZs5WztMYgMxUcrKM9csh+gWJfxpXl6peiKqxID5Ql0OzeXmz2 NKB8v/Q5tq9XWIEYqDm1goS0uMvjhRozgS75GV27pnu/j7h0cmEb9af4zctTIA9F EWvCNsF2LjGYtk+u3d+fe7qoOeXv6Cq68VtOjhkkjisq3xLDbJp73iCBMvgd7FyP k3iKBhi/wag0Fnal0TmvSGnNKMSJ4c0GSosxFBFCIbORxCelTt3rh3ZmA3mAKPIf 4Uk3OZbJ5vx7P3CUBsi2USAAoYWiscg2V0hfOcYuki0N2w0yERTi5zCOugfzOXEs XDMau+djhcDUnomRduYftkZ2DYwrO34= -----END CERTIFICATE-----Generated at Sat Jun 13 13:27:44 2026 by rpki-client