$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce6cb894-f3d0-3ca6-9820-83f366587a4e.roa File: ce6cb894-f3d0-3ca6-9820-83f366587a4e.roa (raw, json) Hash identifier: ssbg3mmd5hg+sy+Z37GZ28v65KJ7Iu5Rl9mWtW7NNws= Subject key identifier: 45:3A:E5:1E:61:CC:C6:F6:CF:A3:63:54:B4:03:ED:6E:FA:0F:93:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE41B4808AF4FFB0F0C86AA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce6cb894-f3d0-3ca6-9820-83f366587a4e.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 16625 IP address blocks: 23.196.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:48:08:af:4f:fb:0f:0c:86:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=fa2b2d59-68d4-4dd8-8a8b-28ed85bd5419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:ab:77:81:45:8f:25:d6:bf:91:d7:63:4a: 16:99:42:39:fd:6c:db:27:f5:3c:5d:90:26:f7:da: 96:6a:9d:11:a9:99:ff:b0:59:ba:a8:f4:10:4d:f2: 6c:69:28:e5:75:01:75:66:9a:24:22:b6:98:ba:2d: d5:69:f9:d4:81:30:cd:8c:ca:4c:fc:9c:fd:7e:14: fb:6d:2a:fe:f8:74:7a:4a:53:e9:c7:d8:41:10:ad: 90:2c:e5:7c:00:a3:b5:9e:ec:6b:d4:75:ab:05:58: bf:12:8a:ca:1d:44:f1:fe:7f:7b:3b:df:4c:95:82: 5a:7c:ee:0c:4c:bb:b4:29:a1:44:fe:e4:6b:5a:d8: 64:ba:e6:65:9f:01:12:f5:a2:c2:c5:bb:ec:4a:b1: 72:db:31:c0:36:d2:63:bb:dc:01:e9:20:86:7d:a3: 87:4e:da:3d:bf:cb:19:7b:0e:14:1b:bb:63:08:1d: 6d:e5:dc:e9:cd:75:c6:8a:58:c6:14:10:64:67:0f: 0a:35:78:79:b3:6c:bb:80:cc:52:48:b7:db:b8:96: 45:54:b7:f5:74:fa:da:90:d2:5f:3d:22:14:e5:51: 39:9e:ab:af:7c:b6:14:ee:89:02:61:f8:0f:2f:22: 61:4b:04:28:a8:ff:05:d6:fa:f1:f1:0c:43:6e:9c: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3A:E5:1E:61:CC:C6:F6:CF:A3:63:54:B4:03:ED:6E:FA:0F:93:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ce6cb894-f3d0-3ca6-9820-83f366587a4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:4f:17:19:65:1d:7f:1d:55:c9:c1:a2:af:09:01:e5:17:1f: 55:77:d8:67:a0:79:1b:08:fa:01:6c:2f:9e:ff:83:83:e8:d5: 4d:3c:c4:0b:a5:64:e8:ac:39:88:5a:d0:c1:56:d1:2f:0e:2d: 20:77:d7:ed:c3:27:1d:c5:da:ba:11:fd:11:4e:5a:ff:ef:eb: ed:aa:a7:6c:db:d9:a2:e9:b6:15:27:de:06:49:3d:fb:06:af: 06:c8:4b:87:20:63:36:4a:37:c2:2c:2c:37:3e:2c:16:c3:4e: 4c:4d:37:92:e5:07:c3:8c:57:89:24:8c:39:02:50:75:27:f0: a2:ff:2d:b7:b4:cc:cf:07:e1:b3:92:a8:5b:bf:f6:49:1f:80: 99:9f:7c:05:9a:d4:1f:ac:97:a5:ce:0b:af:af:17:54:32:7b: 1b:8a:bb:5e:54:71:93:93:b0:45:48:7a:bb:1a:ef:d0:e3:fc: a3:2b:fa:1b:36:8b:ab:ca:67:fe:3c:3c:2d:e4:2f:c0:a7:97: 9b:82:04:6d:ee:d7:a9:c3:1d:c4:14:c9:ec:74:11:72:7a:d2: 2e:07:d5:c1:ff:e1:8b:0f:0a:7a:cd:7f:e6:2a:a8:77:eb:bf: 13:54:fd:40:04:66:bf:cf:01:b7:55:5e:9c:4a:ef:f7:1a:d5: ce:a9:78:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kG0gIr0/7DwyGqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk ZmEyYjJkNTktNjhkNC00ZGQ4LThhOGItMjhlZDg1YmQ1NDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIyrd4FFjyXWv5HXY0oWmUI5/WzbJ/U8XZAm 99qWap0RqZn/sFm6qPQQTfJsaSjldQF1ZpokIraYui3VafnUgTDNjMpM/Jz9fhT7 bSr++HR6SlPpx9hBEK2QLOV8AKO1nuxr1HWrBVi/EorKHUTx/n97O99MlYJafO4M TLu0KaFE/uRrWthkuuZlnwES9aLCxbvsSrFy2zHANtJju9wB6SCGfaOHTto9v8sZ ew4UG7tjCB1t5dzpzXXGiljGFBBkZw8KNXh5s2y7gMxSSLfbuJZFVLf1dPrakNJf PSIU5VE5nquvfLYU7okCYfgPLyJhSwQoqP8F1vrx8QxDbpyvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEU65R5hzMb2z6NjVLQD7W76D5MxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2U2Y2I4OTQtZjNkMC0z Y2E2LTk4MjAtODNmMzY2NTg3YTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8TuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxPFxllHX8dVcnBoq8JAeUXH1V32GegeRsI+gFsL57/g4Po1U08xAul ZOisOYha0MFW0S8OLSB31+3DJx3F2roR/RFOWv/v6+2qp2zb2aLpthUn3gZJPfsG rwbIS4cgYzZKN8IsLDc+LBbDTkxNN5LlB8OMV4kkjDkCUHUn8KL/Lbe0zM8H4bOS qFu/9kkfgJmffAWa1B+sl6XOC6+vF1QyexuKu15UcZOTsEVIersa79Dj/KMr+hs2 i6vKZ/48PC3kL8Cnl5uCBG3u16nDHcQUyex0EXJ60i4H1cH/4YsPCnrNf+YqqHfr vxNU/UAEZr/PAbdVXpxK7/ca1c6peBQ= -----END CERTIFICATE-----Generated at Sat Jun 13 17:32:26 2026 by rpki-client