$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa File: 5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa (raw, json) Hash identifier: CaIypFYLbqx9EtefEjc5gRR98tCgvM8y1l888HhdB7E= Subject key identifier: DD:E0:B4:E5:2C:60:3E:2D:6D:2F:ED:CF:B0:00:82:62:95:7E:B2:1D Certificate issuer: /CN=5b2bf8b3-cffe-422e-a79e-1c1abbe251b2 Certificate serial: 010D0C9F4328584D773A8005446E49CAB4E9BD50 Authority key identifier: 29:D8:D7:83:17:A1:72:24:E1:67:59:C0:C8:D7:77:C7:AF:F9:D6:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 23.143.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:80:05:44:6e:49:ca:b4:e9:bd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2bf8b3-cffe-422e-a79e-1c1abbe251b2 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=10f2878b-c955-440a-951d-fdd8b11bdda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1a:5b:c6:7f:dd:85:20:2b:7e:44:dd:f4:fc: c0:9c:ee:bd:69:38:5b:a7:9d:1a:2e:c2:5c:00:be: 85:ee:68:7d:bb:f3:65:15:e1:12:45:0f:d5:68:49: 60:0c:90:3b:22:7e:f8:cb:2d:64:9d:3b:0a:21:b6: e0:d6:af:fe:8d:1e:aa:8d:41:cd:8f:39:c0:87:30: 41:f5:96:e5:e1:a1:48:bb:93:ba:ed:29:73:71:6f: 19:9d:25:92:71:9d:40:a4:30:7d:06:40:3d:31:63: 59:b2:f4:82:a7:42:b7:ea:aa:f3:4b:b2:62:63:46: 52:d6:2f:cb:8b:80:96:1b:cc:15:83:02:1f:be:c8: 52:54:80:6a:78:e9:53:af:84:13:a7:ea:f3:68:08: 76:51:46:1a:3a:38:6c:d4:ab:d3:34:39:e6:a8:27: 8b:59:62:53:ae:cd:48:25:c3:6e:8a:2d:b7:ef:3e: 40:59:22:d8:8f:63:77:d7:65:2d:5d:a4:13:64:5c: f8:ea:58:27:ea:01:cd:aa:9b:52:77:a8:8a:26:bd: 98:bf:c1:34:dd:2b:8d:86:9d:62:7a:47:e3:1f:86: 1d:1e:d6:52:f4:85:8f:f9:18:d6:5c:37:f1:92:d6: 7c:24:04:a6:c3:f1:56:c4:2c:5c:42:a1:2b:88:f6: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E0:B4:E5:2C:60:3E:2D:6D:2F:ED:CF:B0:00:82:62:95:7E:B2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5a04cc78-6df4-3b61-bca5-fb81b3a839af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.crl X509v3 Authority Key Identifier: keyid:29:D8:D7:83:17:A1:72:24:E1:67:59:C0:C8:D7:77:C7:AF:F9:D6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b2bf8b3-cffe-422e-a79e-1c1abbe251b2.cer sbgp-ipAddrBlock: critical IPv4: 23.143.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4e:0f:7f:a6:f5:58:c0:f4:c0:7b:08:b3:18:81:ce:eb:0a: e6:70:51:5a:56:1d:87:fa:87:27:10:be:c9:05:5e:71:d1:53: a1:20:13:24:07:61:20:97:f6:59:c1:1b:9a:6c:10:32:e9:bb: 66:86:70:ae:a0:c1:a7:0f:f0:04:01:07:3f:32:35:82:3c:54: e0:59:8e:34:63:f5:ec:1a:56:26:8a:c3:4a:39:10:46:1c:6d: 34:48:d2:2a:83:4b:22:03:04:e6:32:51:65:9a:13:47:d2:6f: 7d:82:cf:b7:77:a9:a5:ab:15:35:8c:cf:e9:99:8e:1b:dc:5f: 99:71:e6:a0:f0:c6:48:9f:4b:47:eb:64:08:fa:c6:e7:a4:e7: 79:6b:a3:41:65:9c:9c:34:a8:8d:d7:47:bc:62:23:4d:73:2c: 13:92:79:3e:11:ad:99:43:c7:c7:be:9c:7f:1b:bf:99:7a:44: c5:b2:95:5a:ea:f1:fb:0b:b9:62:71:b6:f2:64:90:59:0c:ce: 4b:77:cc:89:d3:8d:66:89:6c:a8:ad:8c:c4:d0:a6:20:36:69: 87:3c:55:69:af:49:6f:68:e9:e1:6e:79:4e:ed:6e:e7:40:bb: 52:db:5c:e0:49:f9:57:c0:c0:37:73:8f:29:80:06:4d:b9:f6: 45:16:0c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoAFRG5JyrTpvVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWIyYmY4YjMtY2ZmZS00MjJlLWE3OWUtMWMxYWJiZTI1 MWIyMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MTBmMjg3OGItYzk1NS00NDBhLTk1MWQtZmRkOGIxMWJkZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhpbxn/dhSArfkTd9PzAnO69aThbp50aLsJc AL6F7mh9u/NlFeESRQ/VaElgDJA7In74yy1knTsKIbbg1q/+jR6qjUHNjznAhzBB 9Zbl4aFIu5O67SlzcW8ZnSWScZ1ApDB9BkA9MWNZsvSCp0K36qrzS7JiY0ZS1i/L i4CWG8wVgwIfvshSVIBqeOlTr4QTp+rzaAh2UUYaOjhs1KvTNDnmqCeLWWJTrs1I JcNuii237z5AWSLYj2N312UtXaQTZFz46lgn6gHNqptSd6iKJr2Yv8E03SuNhp1i ekfjH4YdHtZS9IWP+RjWXDfxktZ8JASmw/FWxCxcQqEriPYUbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3gtOUsYD4tbS/tz7AAgmKVfrIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjJi ZjhiMy1jZmZlLTQyMmUtYTc5ZS0xYzFhYmJlMjUxYjIvNWEwNGNjNzgtNmRmNC0z YjYxLWJjYTUtZmI4MWIzYTgzOWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWIyYmY4YjMtY2ZmZS00MjJlLWE3 OWUtMWMxYWJiZTI1MWIyLzViMmJmOGIzLWNmZmUtNDIyZS1hNzllLTFjMWFiYmUy NTFiMi5jcmwwHwYDVR0jBBgwFoAUKdjXgxehciThZ1nAyNd3x6/51nMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YjJiZjhiMy1jZmZlLTQyMmUtYTc5ZS0xYzFh YmJlMjUxYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhOD3+m9VjA9MB7CLMYgc7rCuZwUVpWHYf6hycQvskFXnHRU6EgEyQH YSCX9lnBG5psEDLpu2aGcK6gwacP8AQBBz8yNYI8VOBZjjRj9ewaViaKw0o5EEYc bTRI0iqDSyIDBOYyUWWaE0fSb32Cz7d3qaWrFTWMz+mZjhvcX5lx5qDwxkifS0fr ZAj6xuek53lro0FlnJw0qI3XR7xiI01zLBOSeT4RrZlDx8e+nH8bv5l6RMWylVrq 8fsLuWJxtvJkkFkMzkt3zInTjWaJbKitjMTQpiA2aYc8VWmvSW9o6eFueU7tbudA u1LbXOBJ+VfAwDdzjymABk259kUWDLs= -----END CERTIFICATE-----Generated at Fri Apr 17 11:53:39 2026 by rpki-client