$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa File: 5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa (raw, json) Hash identifier: 3uUWb1r6qMvhNELFRCwZl9UMKIPe2HIfzr5Ugzq2C0o= Subject key identifier: 51:7B:8E:19:4D:F5:25:0D:9E:78:14:04:CE:5F:6B:88:FF:E2:2B:01 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584D4D5A539E51C502BCDF382680 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 7782 IP address blocks: 23.235.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:53:9e:51:c5:02:bc:df:38:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=54ae2290-f22f-499c-8dff-41d1f8e0f650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:77:84:0e:12:77:fc:c3:5d:26:5f:c6:cf:87: cb:c7:15:9c:29:87:e2:a6:b8:1a:97:fb:c3:7e:58: db:d6:de:c2:bc:38:92:23:0f:03:22:4e:b5:c8:a6: 3e:b4:24:a2:cb:38:cb:01:bc:fa:10:4b:fd:76:a4: 82:63:f4:23:2d:66:0b:9d:5f:fc:b9:65:7c:d0:25: 41:85:9f:66:19:d4:0f:de:93:9e:27:08:ed:e7:25: fc:30:d0:f8:f6:76:9c:82:af:4d:9f:22:39:2c:67: 8a:66:8f:c9:46:7d:48:ba:d1:61:d2:57:c8:7d:58: f9:21:e3:aa:cd:31:ef:34:05:9f:df:70:01:e3:c3: 26:1e:45:43:06:40:c3:3c:1e:ef:d3:1b:be:ea:62: aa:e5:cc:53:6f:28:17:cb:38:8f:ad:ef:2b:16:13: 31:1d:67:13:5e:0d:e2:b3:9b:c8:f7:e8:31:1a:63: df:22:0c:a0:4a:f7:2d:7b:d7:7e:d1:55:3d:b4:7d: be:7c:4a:5c:1f:47:27:08:43:3a:9a:e2:d5:f7:26: ec:3d:4a:e4:80:9b:93:49:1e:09:cc:98:19:b4:b3: 1c:05:5f:0b:af:ea:03:5a:0d:fa:7a:da:69:44:5f: 65:14:17:40:63:1e:1c:3e:8c:b9:31:7e:68:07:3c: 71:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7B:8E:19:4D:F5:25:0D:9E:78:14:04:CE:5F:6B:88:FF:E2:2B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 23.235.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f0:f7:a6:ae:a2:b4:52:a6:44:1e:2e:d1:c8:ea:82:d3:5b: af:2c:73:f2:75:85:a4:5d:8a:f4:51:23:0d:02:c0:c4:e9:f6: 42:fc:54:96:8f:2b:62:54:86:dc:4b:60:d9:db:65:87:d3:4f: 63:ed:8f:ff:82:41:28:f8:2a:35:89:90:73:70:e4:c2:f9:e7: ea:00:15:6e:ae:a3:b5:6b:97:24:db:e7:bd:39:85:8d:49:dd: 83:c7:4e:17:b2:e4:2d:08:86:da:0b:19:72:ec:f6:b4:04:e3: fd:9e:d7:37:d4:35:9c:6f:84:0f:d4:61:3e:02:0c:55:95:fb: 2c:5e:3e:4b:3f:ec:15:fb:93:41:29:b7:be:f0:f3:18:cd:10: db:a8:bf:9a:52:1b:dc:81:33:79:c2:18:63:7f:45:0a:1d:f3: 6b:3e:42:e9:17:64:55:b3:73:4e:3a:aa:19:4d:af:e0:07:1c: da:b4:22:0e:03:a3:b1:d0:d5:1b:e9:89:ea:d7:be:60:4c:28: ae:02:d8:43:0c:fc:5c:b8:f3:d3:e8:e7:6b:2b:e1:a4:ed:50: da:60:c4:7a:76:c0:e6:0f:fc:e4:f1:bb:b7:63:15:5d:65:cb: 77:18:f2:19:19:03:62:8f:bc:31:34:b9:b3:6b:3d:3c:9f:68: b9:2a:62:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlOeUcUCvN84JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NTRhZTIyOTAtZjIyZi00OTljLThkZmYtNDFkMWY4ZTBmNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgneEDhJ3/MNdJl/Gz4fLxxWcKYfiprgal/vD fljb1t7CvDiSIw8DIk61yKY+tCSiyzjLAbz6EEv9dqSCY/QjLWYLnV/8uWV80CVB hZ9mGdQP3pOeJwjt5yX8MND49nacgq9NnyI5LGeKZo/JRn1IutFh0lfIfVj5IeOq zTHvNAWf33AB48MmHkVDBkDDPB7v0xu+6mKq5cxTbygXyziPre8rFhMxHWcTXg3i s5vI9+gxGmPfIgygSvcte9d+0VU9tH2+fEpcH0cnCEM6muLV9ybsPUrkgJuTSR4J zJgZtLMcBV8Lr+oDWg36etppRF9lFBdAYx4cPoy5MX5oBzxxEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF7jhlN9SUNnngUBM5fa4j/4isBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNWE2YmE2ZjMtNDg5Ny0z MzJiLThjNmItNzZiYTlkYzA0OGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzw96auorRSpkQeLtHI6oLTW68sc/J1haRdivRRIw0CwMTp9kL8VJaP K2JUhtxLYNnbZYfTT2Ptj/+CQSj4KjWJkHNw5ML55+oAFW6uo7VrlyTb5705hY1J 3YPHThey5C0IhtoLGXLs9rQE4/2e1zfUNZxvhA/UYT4CDFWV+yxePks/7BX7k0Ep t77w8xjNENuov5pSG9yBM3nCGGN/RQod82s+QukXZFWzc046qhlNr+AHHNq0Ig4D o7HQ1RvpierXvmBMKK4C2EMM/Fy489Po52sr4aTtUNpgxHp2wOYP/OTxu7djFV1l y3cY8hkZA2KPvDE0ubNrPTyfaLkqYtE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:23:47 2026 by rpki-client