$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa File: 1f4fa054-5b55-3502-aeef-38673b6dda28.roa (raw, json) Hash identifier: nPwbFYT8DZB4+inRQR0Z1gwxZU1MFgEIKgTBa3pZEPM= Subject key identifier: D0:48:8B:21:4C:E8:F4:31:D9:36:D3:FF:9F:26:EE:61:43:B3:A2:37 Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Certificate serial: 010D0C9F4328584D5E1A595055DD790531545200 Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 19905 IP address blocks: 23.128.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:59:50:55:dd:79:05:31:54:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=9515b963-5422-497f-b0a8-1205e8d70c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:b8:73:f8:cd:51:c4:94:6b:27:dd:33:eb: 41:3b:30:fc:86:0f:9b:c8:20:07:37:f9:cc:00:cd: 7b:b0:a5:a3:04:66:e4:a0:f5:52:71:8b:56:bf:57: db:57:6e:8e:82:32:32:9e:fb:87:a1:67:b7:20:c5: 77:ed:06:42:b1:5f:c0:fa:d6:cd:de:d9:ef:e4:82: 9e:95:a9:09:d4:13:d4:78:aa:75:1d:c4:36:4a:86: 55:0a:77:77:a9:74:e9:18:50:5b:bb:2f:58:1d:de: 26:02:f5:d4:e2:65:42:ec:49:c1:87:0f:53:dd:2f: d2:c3:f7:9a:51:30:ab:f9:c9:e6:f0:c2:b8:51:c1: df:67:b9:1b:77:8a:6c:7f:33:4e:db:1f:81:5b:cf: 3a:8d:46:5e:19:ec:fc:43:e1:4e:99:da:47:ed:01: 39:7f:76:bb:ec:56:a6:05:04:3b:9c:75:50:dc:f7: 6e:c6:77:9e:5d:f0:93:f5:cc:bf:69:04:b2:f7:13: 9b:7f:03:71:c9:2c:99:74:e6:bd:57:ac:eb:14:84: 8f:8d:49:0f:54:42:19:7d:08:1b:80:ce:6d:da:ff: b9:0c:47:05:b5:96:a9:2d:85:fa:18:0f:3e:d7:d5: cb:86:a3:3c:40:9d:eb:5f:36:e3:62:ef:92:ed:04: f6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:48:8B:21:4C:E8:F4:31:D9:36:D3:FF:9F:26:EE:61:43:B3:A2:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl X509v3 Authority Key Identifier: keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer sbgp-ipAddrBlock: critical IPv4: 23.128.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:06:2e:88:90:77:df:c6:da:82:41:4a:81:a2:1d:cb:3b:d2: 28:a4:2d:62:9b:92:42:20:96:b8:6a:1a:75:a2:69:c1:c4:79: 4e:11:bc:39:74:ae:85:d4:8f:4a:ad:7c:ca:06:53:79:e5:3b: df:87:23:f5:5e:05:2e:b9:cf:51:f5:75:bc:c5:2a:a9:49:65: 8a:d5:09:9d:76:f5:af:d5:9d:04:6f:5e:f2:cd:ca:10:8e:b2: ce:f9:49:78:31:d6:c3:e5:ee:a8:d1:e9:b4:0d:23:0d:c3:51: a2:d9:d1:54:3f:76:16:85:75:76:c1:e0:76:e8:f3:2e:44:c8: e0:58:2a:09:22:16:1a:6b:5c:40:f3:04:09:91:e9:61:84:08: 2e:06:81:52:2b:41:33:2a:87:a2:06:95:98:23:8b:f3:48:67: ee:ab:a0:46:2f:d3:5a:cf:78:71:35:ab:cf:97:c2:44:3b:2a: 35:9f:6c:4d:2d:19:64:ad:05:c0:a7:0a:b1:90:0d:84:42:57: c8:f6:12:ae:56:b2:cc:63:11:73:f1:1a:2e:2c:dd:f6:ab:7a: 3c:1f:6e:5d:5f:29:30:b8:14:80:04:c9:9b:04:5c:1d:02:aa: 93:6b:c1:79:4b:58:54:ed:a8:01:4a:48:0e:49:2d:67:04:60: 8f:00:8c:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGllQVd15BTFUUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3 ZjU0MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OTUxNWI5NjMtNTQyMi00OTdmLWIwYTgtMTIwNWU4ZDcwYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaC4c/jNUcSUayfdM+tBOzD8hg+byCAHN/nM AM17sKWjBGbkoPVScYtWv1fbV26OgjIynvuHoWe3IMV37QZCsV/A+tbN3tnv5IKe lakJ1BPUeKp1HcQ2SoZVCnd3qXTpGFBbuy9YHd4mAvXU4mVC7EnBhw9T3S/Sw/ea UTCr+cnm8MK4UcHfZ7kbd4psfzNO2x+BW886jUZeGez8Q+FOmdpH7QE5f3a77Fam BQQ7nHVQ3PduxneeXfCT9cy/aQSy9xObfwNxySyZdOa9V6zrFISPjUkPVEIZfQgb gM5t2v+5DEcFtZapLYX6GA8+19XLhqM8QJ3rXzbjYu+S7QT2WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBIiyFM6PQx2TbT/58m7mFDs6I3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2 ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMWY0ZmEwNTQtNWI1NS0z NTAyLWFlZWYtMzg2NzNiNmRkYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3 N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4B4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUGLoiQd9/G2oJBSoGiHcs70iikLWKbkkIglrhqGnWiacHEeU4RvDl0 roXUj0qtfMoGU3nlO9+HI/VeBS65z1H1dbzFKqlJZYrVCZ129a/VnQRvXvLNyhCO ss75SXgx1sPl7qjR6bQNIw3DUaLZ0VQ/dhaFdXbB4Hbo8y5EyOBYKgkiFhprXEDz BAmR6WGECC4GgVIrQTMqh6IGlZgji/NIZ+6roEYv01rPeHE1q8+XwkQ7KjWfbE0t GWStBcCnCrGQDYRCV8j2Eq5WssxjEXPxGi4s3farejwfbl1fKTC4FIAEyZsEXB0C qpNrwXlLWFTtqAFKSA5JLWcEYI8AjJo= -----END CERTIFICATE-----Generated at Fri Apr 17 17:56:40 2026 by rpki-client