$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06650fcf-560e-38ec-a1fd-79e474d084d2.roa File: 06650fcf-560e-38ec-a1fd-79e474d084d2.roa (raw, json) Hash identifier: +lXAF1o6k9lf3VYbWuX1Ww580m6Eo6VqpNgyV7TschE= Subject key identifier: 42:1C:C5:3A:CF:E7:A8:E2:16:E6:86:26:3E:54:4B:A3:15:19:DF:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D83CACFCDB403B0BAD228B300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06650fcf-560e-38ec-a1fd-79e474d084d2.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 16625 IP address blocks: 23.1.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:cf:cd:b4:03:b0:ba:d2:28:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=eef7bf6d-f252-44e7-8255-279c0740c7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:d3:5e:a8:6c:17:60:ef:13:a8:c4:87:11: 8d:ac:f8:87:3a:39:aa:79:e1:dc:46:84:26:39:e1: af:18:9e:1d:fe:77:cc:5d:4f:ae:cc:41:be:a6:e9: ba:71:1d:2a:15:6f:c2:29:ff:9a:39:d6:a3:75:b3: 22:20:80:98:1c:59:c4:e8:f4:b3:91:94:95:6c:3c: 84:3d:20:69:55:39:dc:c4:e9:23:1a:61:09:1a:98: b4:e1:4f:17:4f:fe:be:46:1a:cf:a5:6c:5f:81:29: bd:d0:a5:ef:8d:b7:20:f1:6c:25:4e:45:60:9c:9a: 89:c6:d3:d7:86:9b:85:6c:12:3d:aa:1e:fa:99:0c: 41:d1:ca:f5:75:c6:6d:2a:45:1e:e0:27:79:b1:7f: e6:ba:44:26:8e:4e:61:44:a1:e1:5f:d1:78:5b:d2: cf:1d:82:e2:79:00:25:63:dd:51:50:85:c6:98:5e: f9:31:5b:cb:37:31:99:57:51:92:77:bd:77:2e:28: f7:3f:1e:18:0e:8e:2d:7a:0d:15:4f:29:63:90:76: e3:28:55:5e:20:47:75:5b:52:8a:1d:46:5f:cc:60: 4f:67:21:a0:84:2b:5e:2a:1e:4e:a4:e8:52:62:ed: c8:ec:86:1d:c8:16:8e:4e:b2:ea:9f:10:a8:94:b0: 6f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1C:C5:3A:CF:E7:A8:E2:16:E6:86:26:3E:54:4B:A3:15:19:DF:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06650fcf-560e-38ec-a1fd-79e474d084d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c5:63:f8:76:97:a2:e6:6b:4d:1e:79:78:38:24:2c:ea:fa: 3b:b1:92:b7:b6:93:0a:18:91:d8:1d:9e:e0:47:89:bb:5f:7e: 13:08:df:a7:ac:57:50:84:0c:f4:e8:04:dd:13:22:48:e3:7b: d0:05:ef:47:ec:97:3f:21:ed:7b:9f:2a:1f:fd:45:95:38:9a: e8:74:f6:b0:4e:9e:7a:31:4a:c1:44:81:07:61:b4:18:12:1e: 41:28:95:30:7b:2c:e5:cc:d9:f8:70:4d:13:50:c9:37:29:bc: 1c:84:d6:6a:6a:26:cb:61:04:67:bc:6a:2a:d3:3d:89:11:05: 12:88:17:64:4a:ef:5c:a0:fc:dc:97:b0:c7:5d:61:54:ea:c2: 5a:7a:a7:47:63:91:45:ac:b8:43:f7:84:33:d9:6d:e1:ce:a2: ea:61:23:39:c3:fa:12:27:5a:d0:8e:b2:e9:60:d0:58:82:87: 1e:f8:af:c3:7c:da:e7:f8:24:46:5b:8e:46:37:30:5c:f1:da: b1:a2:68:03:04:a2:f0:1c:8c:f8:f8:66:04:f3:41:00:b2:6f: 01:af:54:2b:34:81:4a:13:99:d0:de:96:ed:0b:3b:db:b8:1f: de:a9:47:42:a2:c6:90:64:71:11:8f:8d:8b:f4:78:0f:fe:27: c0:83:60:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dys/NtAOwutIoswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk ZWVmN2JmNmQtZjI1Mi00NGU3LTgyNTUtMjc5YzA3NDBjN2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzHTXqhsF2DvE6jEhxGNrPiHOjmqeeHcRoQm OeGvGJ4d/nfMXU+uzEG+pum6cR0qFW/CKf+aOdajdbMiIICYHFnE6PSzkZSVbDyE PSBpVTncxOkjGmEJGpi04U8XT/6+RhrPpWxfgSm90KXvjbcg8WwlTkVgnJqJxtPX hpuFbBI9qh76mQxB0cr1dcZtKkUe4Cd5sX/mukQmjk5hRKHhX9F4W9LPHYLieQAl Y91RUIXGmF75MVvLNzGZV1GSd713Lij3Px4YDo4teg0VTyljkHbjKFVeIEd1W1KK HUZfzGBPZyGghCteKh5OpOhSYu3I7IYdyBaOTrLqnxColLBvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIcxTrP56jiFuaGJj5US6MVGd83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY2NTBmY2YtNTYwZS0z OGVjLWExZmQtNzllNDc0ZDA4NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTFY/h2l6Lma00eeXg4JCzq+juxkre2kwoYkdgdnuBHibtffhMI36es V1CEDPToBN0TIkjje9AF70fslz8h7XufKh/9RZU4muh09rBOnnoxSsFEgQdhtBgS HkEolTB7LOXM2fhwTRNQyTcpvByE1mpqJsthBGe8airTPYkRBRKIF2RK71yg/NyX sMddYVTqwlp6p0djkUWsuEP3hDPZbeHOouphIznD+hInWtCOsulg0FiChx74r8N8 2uf4JEZbjkY3MFzx2rGiaAMEovAcjPj4ZgTzQQCybwGvVCs0gUoTmdDelu0LO9u4 H96pR0KixpBkcRGPjYv0eA/+J8CDYP4= -----END CERTIFICATE-----Generated at Fri Apr 17 12:51:00 2026 by rpki-client