$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be44621-9135-31a4-801e-906f3069ed5a.roa File: 1be44621-9135-31a4-801e-906f3069ed5a.roa (raw, json) Hash identifier: 0UP22kriF8WMzxDmA8rMHaGRcIxlnwRLZTkThPkRQd4= Subject key identifier: A6:68:33:3F:DF:2D:04:E6:BA:9D:FA:E3:66:8C:0C:4A:A8:D6:6B:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D71A5114C3AEE948BC3543260 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be44621-9135-31a4-801e-906f3069ed5a.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 20940 IP address blocks: 173.223.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:11:4c:3a:ee:94:8b:c3:54:32:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=feb2a635-26bc-4182-9297-c8c3c1256963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:8a:af:6e:65:f5:df:44:13:3a:ca:5f:f2: be:bf:87:28:49:4c:8c:45:0e:83:b8:a4:c7:66:b6: 85:f0:5b:a8:26:d2:0d:93:96:0e:b7:51:c0:7c:2a: 4b:e8:78:55:68:12:8b:cf:f0:53:c1:1f:46:8f:8a: d6:28:14:d6:95:fa:78:63:d5:8f:65:16:1e:d0:f8: 8c:67:84:ab:22:c2:e6:a0:28:52:16:90:ad:72:98: 08:21:76:c7:ac:14:f5:3a:e3:f5:a2:dd:49:6b:ab: b1:37:ce:e7:10:3c:5b:3b:8f:aa:1c:2a:be:16:5c: b0:6c:1c:36:b0:35:55:65:5b:2a:85:ef:a5:4d:e7: 7a:da:b7:fd:0f:5c:66:69:dd:a7:85:ed:b8:be:17: 27:8e:5f:66:aa:74:9e:05:5b:3b:fa:a0:81:59:40: cf:3d:8e:b7:c0:78:0f:ad:f2:8b:29:7e:33:e3:5b: 97:3c:b0:27:33:e9:6d:3c:90:98:01:97:b6:2d:da: 27:e6:df:47:6b:4b:a0:2a:e2:b5:60:00:69:f7:84: a5:38:37:2e:6e:36:f5:7d:85:fd:9f:a8:b1:d1:f1: 0a:7b:4c:d2:8d:06:6a:2d:b2:8c:61:49:2e:b9:7d: 31:e8:cb:76:57:dd:e8:54:b9:f9:21:d6:c7:24:df: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:33:3F:DF:2D:04:E6:BA:9D:FA:E3:66:8C:0C:4A:A8:D6:6B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be44621-9135-31a4-801e-906f3069ed5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ab:94:61:f8:fc:cd:be:17:13:72:c9:4d:2d:15:d4:35:cb: ed:4a:0a:1d:2f:0e:ef:4b:d4:f4:16:62:2c:5b:fe:7c:f4:95: 85:da:ae:f7:89:9a:d3:5b:4a:4a:c4:84:38:7d:0f:b7:a8:03: 25:87:8a:c4:74:ba:17:39:f6:d5:f7:eb:01:1c:91:91:03:7e: 93:df:48:b5:6e:f2:9b:af:95:65:2d:09:d9:5a:39:25:b6:3d: e1:67:0c:e1:aa:ef:61:8d:5a:0e:90:70:19:4d:06:89:7a:8b: 06:79:16:97:b8:d9:c2:ab:4d:e6:20:ce:ef:d5:c5:5f:d7:7d: de:a2:5c:bb:3d:f8:45:5a:22:c3:4c:6c:3b:ca:8a:49:9c:3f: 88:24:5d:43:ae:80:2d:17:d6:c4:0d:ea:3d:48:d3:b8:23:49: 79:80:0d:ad:71:7c:ed:70:bb:d8:ae:e0:da:2a:29:af:6b:1b: 94:aa:96:c3:ed:45:c5:ee:33:c6:75:ac:9f:84:ea:b7:34:a4: a8:65:06:1a:8c:31:c9:b4:9c:5b:39:0f:27:cf:cb:67:3a:0f: 85:0f:9d:f9:bb:d9:ee:f0:a7:24:63:2d:d6:ee:e5:6c:a0:6e: 9d:03:85:b2:6b:51:96:16:7a:77:dd:e4:89:84:e8:2e:61:ff: 82:18:42:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRFMOu6Ui8NUMmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ZmViMmE2MzUtMjZiYy00MTgyLTkyOTctYzhjM2MxMjU2OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3CKr25l9d9EEzrKX/K+v4coSUyMRQ6DuKTH ZraF8FuoJtINk5YOt1HAfCpL6HhVaBKLz/BTwR9Gj4rWKBTWlfp4Y9WPZRYe0PiM Z4SrIsLmoChSFpCtcpgIIXbHrBT1OuP1ot1Ja6uxN87nEDxbO4+qHCq+FlywbBw2 sDVVZVsqhe+lTed62rf9D1xmad2nhe24vhcnjl9mqnSeBVs7+qCBWUDPPY63wHgP rfKLKX4z41uXPLAnM+ltPJCYAZe2Ldon5t9Ha0ugKuK1YABp94SlODcubjb1fYX9 n6ix0fEKe0zSjQZqLbKMYUkuuX0x6Mt2V93oVLn5IdbHJN9SbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZoMz/fLQTmup3642aMDEqo1mtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWJlNDQ2MjEtOTEzNS0z MWE0LTgwMWUtOTA2ZjMwNjllZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd/rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOrlGH4/M2+FxNyyU0tFdQ1y+1KCh0vDu9L1PQWYixb/nz0lYXarveJ mtNbSkrEhDh9D7eoAyWHisR0uhc59tX36wEckZEDfpPfSLVu8puvlWUtCdlaOSW2 PeFnDOGq72GNWg6QcBlNBol6iwZ5Fpe42cKrTeYgzu/VxV/Xfd6iXLs9+EVaIsNM bDvKikmcP4gkXUOugC0X1sQN6j1I07gjSXmADa1xfO1wu9iu4NoqKa9rG5SqlsPt RcXuM8Z1rJ+E6rc0pKhlBhqMMcm0nFs5DyfPy2c6D4UPnfm72e7wpyRjLdbu5Wyg bp0DhbJrUZYWenfd5ImE6C5h/4IYQvA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:26:18 2026 by rpki-client