$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa File: bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa (raw, json) Hash identifier: hXZqGE3FFtIyVcZBWVvOj4hhZQ8HzeOTXDQknEaXfg0= Subject key identifier: 5E:2B:B1:69:C9:CE:4A:47:8B:82:14:AA:38:1C:E6:24:BC:5C:E5:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A9B01F9710E82B86DEAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.206.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9b:01:f9:71:0e:82:b8:6d:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=b608784c-ee67-4ec1-b764-cd337613313e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:9e:28:00:d8:56:11:88:24:62:f7:0e:d5: c2:3a:41:ba:0b:58:24:88:c8:44:b9:0b:bf:9e:61: 83:e6:bf:ac:3e:60:c5:c5:da:9a:89:17:2c:a1:2e: 0b:24:0e:2d:58:17:ff:53:4f:54:d5:62:c6:48:d5: e2:3e:fa:bd:aa:87:b1:70:c5:58:4c:71:83:36:9c: 01:81:95:e8:e2:67:d1:d3:4e:12:e6:6c:be:63:cf: 7e:35:04:45:be:8f:07:11:2f:c3:39:b9:b8:b0:aa: 3f:b6:0b:79:8a:bc:97:09:d2:54:c6:f3:15:25:cf: 1d:ba:5e:2d:6b:2c:b8:8d:72:ad:7f:89:f3:5a:49: b0:8b:24:21:54:16:8c:c4:60:e7:b8:c5:a6:e4:10: 92:5f:7c:ce:76:cd:46:c7:ad:80:e5:79:36:e2:e1: 10:3c:d5:38:5c:a4:ed:5e:98:cf:2c:2c:6a:cd:63: 65:72:71:2e:c0:3c:8e:05:5a:89:32:c0:87:dd:0c: 15:d3:5d:c2:c4:d6:cd:b2:ab:06:49:aa:b1:3b:b7: 81:72:dc:7c:02:bf:bb:1f:e8:e2:3a:be:9f:99:02: 93:10:ce:9d:3b:91:26:fb:fd:ce:10:2e:73:3e:ec: 59:39:cd:c1:a0:4a:32:1c:fd:f5:9a:07:38:b2:de: d5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2B:B1:69:C9:CE:4A:47:8B:82:14:AA:38:1C:E6:24:BC:5C:E5:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d2:47:62:2b:52:8d:93:50:ef:c3:67:8d:49:20:28:09:3b: 8e:38:e2:d1:7b:4a:14:75:51:c4:0b:69:19:a5:40:64:72:df: b4:f3:f4:c0:d9:2a:bb:55:88:fd:4f:e5:ce:c6:e5:cf:da:bc: 48:dc:8c:b9:f4:ec:eb:5e:dd:d0:08:f9:71:c4:d9:6c:b0:0d: f9:d5:c6:92:73:47:fa:b7:0d:f1:36:1d:c9:4d:d3:c5:30:9b: 93:84:ed:7a:f5:43:0c:6c:42:1f:bf:df:51:cf:0f:51:98:4d: 30:c4:90:77:2b:2d:e8:e1:0e:81:cc:72:b1:5d:0c:72:7a:00: 77:0c:7b:eb:17:8c:a6:37:47:6b:49:3b:fd:dd:8c:53:f0:6a: 84:0e:f4:9a:01:36:26:df:7d:44:2b:74:4d:3d:82:13:33:3e: c3:ba:c8:eb:9c:86:3e:28:3f:ca:d2:a2:4a:03:76:64:58:28: e7:86:31:d9:5a:6f:6b:a5:35:db:f8:cc:80:f2:59:61:0f:4e: 03:b1:bc:46:db:b6:db:75:b1:0b:9e:b4:6b:f5:29:0c:13:95: c6:30:2b:3e:ba:94:24:64:e4:2f:3e:80:7c:45:2c:4f:84:1b: 63:96:49:88:a4:bf:3a:2d:26:d8:20:d4:50:71:d0:a7:20:14: 3e:7b:1d:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpsB+XEOgrht6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YjYwODc4NGMtZWU2Ny00ZWMxLWI3NjQtY2QzMzc2MTMzMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5qeKADYVhGIJGL3DtXCOkG6C1gkiMhEuQu/ nmGD5r+sPmDFxdqaiRcsoS4LJA4tWBf/U09U1WLGSNXiPvq9qoexcMVYTHGDNpwB gZXo4mfR004S5my+Y89+NQRFvo8HES/DObm4sKo/tgt5iryXCdJUxvMVJc8dul4t ayy4jXKtf4nzWkmwiyQhVBaMxGDnuMWm5BCSX3zOds1Gx62A5Xk24uEQPNU4XKTt XpjPLCxqzWNlcnEuwDyOBVqJMsCH3QwV013CxNbNsqsGSaqxO7eBctx8Ar+7H+ji Or6fmQKTEM6dO5Em+/3OEC5zPuxZOc3BoEoyHP31mgc4st7VtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4rsWnJzkpHi4IUqjgc5iS8XOUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmYxZjc5YjMtOGI2ZC0z ZTg5LTg4ZTktZDBiZTFmMjA2NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF85YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPSR2IrUo2TUO/DZ41JICgJO4444tF7ShR1UcQLaRmlQGRy37Tz9MDZ KrtViP1P5c7G5c/avEjcjLn07Ote3dAI+XHE2WywDfnVxpJzR/q3DfE2HclN08Uw m5OE7Xr1QwxsQh+/31HPD1GYTTDEkHcrLejhDoHMcrFdDHJ6AHcMe+sXjKY3R2tJ O/3djFPwaoQO9JoBNibffUQrdE09ghMzPsO6yOuchj4oP8rSokoDdmRYKOeGMdla b2ulNdv4zIDyWWEPTgOxvEbbttt1sQuetGv1KQwTlcYwKz66lCRk5C8+gHxFLE+E G2OWSYikvzotJtgg1FBx0KcgFD57Hb8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:15:08 2026 by rpki-client