$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa File: e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa (raw, json) Hash identifier: 4Qa4qdMqwRYaBs8U8wg8TkD+L+DmZ4B5KUQmbFK+8uc= Subject key identifier: 0D:93:2C:2A:21:FC:38:D1:22:F9:B9:BC:3F:39:29:DF:04:6C:70:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E210FD9D68C24B8A0F8ECD700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 20940 IP address blocks: 23.40.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0f:d9:d6:8c:24:b8:a0:f8:ec:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=243cf652-0695-415e-9f62-52546598257d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d8:1f:c4:d1:e8:f9:8a:c3:5d:7d:bf:03:ca: 2e:b6:1a:f2:35:72:de:ab:4d:8c:dd:e4:f0:76:71: fb:a6:0e:64:00:af:c2:a6:cc:d7:0e:5a:86:26:3b: 93:ac:c2:d9:52:ab:df:5f:24:86:8c:94:b7:ba:83: 4f:a1:93:ce:81:41:d0:8e:71:cd:be:f6:23:69:36: 29:99:4e:14:57:d3:85:ac:4e:b3:a5:10:60:55:75: 55:ab:f7:75:95:b2:8a:4a:9d:fa:1f:24:7c:7c:11: 78:94:de:6a:57:49:59:78:a3:57:d6:2c:65:e6:48: c9:8f:ac:07:92:7a:e3:9a:a6:f1:7c:9f:06:20:4e: 42:b7:f7:35:55:fe:6d:7b:7c:8e:b4:b0:dc:dc:26: a8:e8:d1:79:7d:18:f3:cb:91:3f:09:bf:6a:1e:1d: 07:a3:18:73:35:28:07:73:a1:fc:b6:ff:39:41:6b: 4f:05:7e:a4:c8:6c:15:53:dc:16:7c:66:16:22:d4: 37:90:28:73:9a:82:5f:d5:a8:a1:4e:23:f6:21:c1: b8:75:ac:e0:cf:99:5b:55:66:b1:35:7a:f3:d9:a8: f0:d0:74:d2:a6:88:76:ae:cf:d0:b3:26:1a:c7:6c: 9f:af:46:22:78:3f:5f:da:47:51:ed:c6:1f:f5:55: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:2C:2A:21:FC:38:D1:22:F9:B9:BC:3F:39:29:DF:04:6C:70:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e434eb24-83ee-3770-b86b-f3a61fb5cdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d1:3d:b1:ce:30:c2:11:72:53:70:23:93:b1:79:c4:90:24: 31:6b:25:c0:0d:e0:79:09:a7:11:f2:68:d0:e2:60:f2:c2:9c: a9:cc:68:7f:8e:2f:50:60:6d:f3:d4:80:b7:d0:67:b0:8a:bc: bb:ae:41:1a:7b:22:6b:bc:2c:78:21:e3:8b:b5:18:55:3b:db: 5a:97:c2:23:e5:9d:4c:9d:9d:3a:fa:40:35:80:fd:34:4f:32: 24:37:13:91:c8:e9:7a:6e:84:ef:ab:05:a2:65:a4:d8:b2:dc: 2e:f8:1f:39:08:b3:dd:88:1a:12:92:69:be:44:e5:b3:67:25: 08:0b:72:38:db:46:f4:6f:dc:71:e7:f8:6d:b1:f9:db:9f:86: af:3c:90:14:dd:99:2d:07:6a:5d:ab:14:d3:b7:18:01:ba:c7: b5:8b:6b:8e:e9:7c:fd:f0:e8:b1:b1:57:8e:1b:5a:cb:16:5b: f6:40:c1:22:86:6d:86:36:bd:c3:80:84:03:87:dd:0e:b7:4a: 23:6b:fa:b5:28:b0:aa:7d:25:d1:f6:a7:8f:90:6d:b8:98:03: 8b:7d:c7:22:3f:43:c5:18:4f:50:2d:86:43:b8:78:ca:7b:3e: 94:9d:b7:85:34:13:95:9d:a0:e1:83:31:79:de:94:06:5a:bd: a7:93:35:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD9nWjCS4oPjs1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk MjQzY2Y2NTItMDY5NS00MTVlLTlmNjItNTI1NDY1OTgyNTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotgfxNHo+YrDXX2/A8outhryNXLeq02M3eTw dnH7pg5kAK/CpszXDlqGJjuTrMLZUqvfXySGjJS3uoNPoZPOgUHQjnHNvvYjaTYp mU4UV9OFrE6zpRBgVXVVq/d1lbKKSp36HyR8fBF4lN5qV0lZeKNX1ixl5kjJj6wH knrjmqbxfJ8GIE5Ct/c1Vf5te3yOtLDc3Cao6NF5fRjzy5E/Cb9qHh0HoxhzNSgH c6H8tv85QWtPBX6kyGwVU9wWfGYWItQ3kChzmoJf1aihTiP2IcG4dazgz5lbVWax NXrz2ajw0HTSpoh2rs/QsyYax2yfr0YieD9f2kdR7cYf9VUuwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2TLCoh/DjRIvm5vD85Kd8EbHBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQzNGViMjQtODNlZS0z NzcwLWI4NmItZjNhNjFmYjVjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLRPbHOMMIRclNwI5OxecSQJDFrJcAN4HkJpxHyaNDiYPLCnKnMaH+O L1BgbfPUgLfQZ7CKvLuuQRp7Imu8LHgh44u1GFU721qXwiPlnUydnTr6QDWA/TRP MiQ3E5HI6XpuhO+rBaJlpNiy3C74HzkIs92IGhKSab5E5bNnJQgLcjjbRvRv3HHn +G2x+dufhq88kBTdmS0Hal2rFNO3GAG6x7WLa47pfP3w6LGxV44bWssWW/ZAwSKG bYY2vcOAhAOH3Q63SiNr+rUosKp9JdH2p4+QbbiYA4t9xyI/Q8UYT1AthkO4eMp7 PpSdt4U0E5WdoOGDMXnelAZavaeTNTE= -----END CERTIFICATE-----Generated at Sat Jun 13 21:44:27 2026 by rpki-client