$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/208b7436-fa1c-30a0-89fe-1474f763f4af.roa File: 208b7436-fa1c-30a0-89fe-1474f763f4af.roa (raw, json) Hash identifier: bweCw4BWGzYNax6CKtsjN8un+/h2VGanNfgmD9j5gdA= Subject key identifier: 93:11:43:67:5B:17:D6:02:45:41:B4:65:AA:11:88:3B:89:4E:B1:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D71A51DA16D198906A33B1C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/208b7436-fa1c-30a0-89fe-1474f763f4af.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 20940 IP address blocks: 23.220.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1d:a1:6d:19:89:06:a3:3b:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=607f0eb3-9cf1-4468-9828-3edf97255d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:f0:3c:54:39:e3:aa:3c:16:88:e0:ca:30: 43:8d:3e:a0:ed:29:10:4c:54:d7:2b:ee:05:19:00: 8f:4b:f4:bf:1f:e5:05:7f:5c:72:5e:c2:fc:37:74: 89:ce:94:1b:18:8a:39:ea:b5:53:47:72:64:4e:f5: 3b:46:63:e1:62:6c:6c:6e:40:61:96:7d:00:e8:5f: db:6c:d3:77:9b:73:a3:76:85:8b:1b:b1:92:61:75: 19:6c:20:91:82:86:cb:fb:a1:82:38:da:0b:03:5f: e4:dd:50:83:59:17:fa:4f:45:e7:4a:5d:6e:63:b3: 93:23:b3:fb:8d:90:26:12:de:ec:0c:4f:8f:0a:19: e6:fb:e6:85:a9:a7:88:e5:cb:ae:a1:bb:62:43:f3: 15:35:39:bb:34:6c:ef:58:da:a4:1a:6d:70:a7:e8: 18:61:32:be:f8:a0:0e:05:5d:ab:0c:05:0c:d0:de: dd:e6:3d:dd:38:86:1c:c7:be:68:51:cd:cf:fc:54: d8:5e:db:51:c2:f0:e1:6a:b9:23:62:63:a3:92:ea: 47:50:14:d3:96:2a:6a:90:a8:cd:af:39:ed:92:59: 93:0b:61:a8:b9:53:9a:02:1e:1a:1c:e7:80:ed:f0: 2b:73:fb:06:73:fd:37:d9:96:b1:c5:79:1f:f0:29: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:11:43:67:5B:17:D6:02:45:41:B4:65:AA:11:88:3B:89:4E:B1:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/208b7436-fa1c-30a0-89fe-1474f763f4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ab:11:0c:c3:e8:94:03:1a:16:7b:0d:f4:d5:96:eb:70:1d: 76:b9:a9:10:ae:3e:96:3c:94:c3:b0:cb:50:bc:ee:4b:8a:4c: e4:c5:cc:a4:8f:9a:e2:cd:b6:f2:72:3c:18:e6:61:5a:1b:09: 60:bc:5a:3d:d1:e1:5e:d7:42:ab:ca:dc:12:84:fc:e6:4e:18: 20:ed:2c:8b:fe:b1:fa:ab:87:93:83:ee:46:10:99:69:9c:94: 37:b1:ef:51:60:cc:a3:ff:b4:f8:03:4b:ae:98:49:ab:38:10: b3:81:0a:f3:f3:28:fb:a2:a0:4c:5d:b7:3e:9f:ad:35:d9:e0: c5:f4:dc:ad:2c:15:e1:49:1c:86:c2:11:82:83:c8:9e:f7:f6: 3e:62:51:23:dd:4a:ee:74:65:12:16:9b:90:e0:60:ab:2f:1d: 9f:91:43:53:93:87:c4:07:26:09:5f:33:c1:d8:0d:d7:a6:08: 24:78:1f:8f:c9:19:14:8c:f9:71:5b:6a:60:82:5b:f6:be:f7: 9e:0f:60:0e:e7:61:d9:b7:a2:41:93:ea:51:21:89:55:da:9b: 34:a7:b4:d4:fd:3c:43:04:9a:ea:2a:e2:30:d6:d7:1e:31:24: 1a:1a:1d:be:3d:cb:3e:94:ee:81:24:c6:8d:11:e5:fa:65:71: 11:3e:f3:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpR2hbRmJBqM7HEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NjA3ZjBlYjMtOWNmMS00NDY4LTk4MjgtM2VkZjk3MjU1ZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+fwPFQ546o8FojgyjBDjT6g7SkQTFTXK+4F GQCPS/S/H+UFf1xyXsL8N3SJzpQbGIo56rVTR3JkTvU7RmPhYmxsbkBhln0A6F/b bNN3m3OjdoWLG7GSYXUZbCCRgobL+6GCONoLA1/k3VCDWRf6T0XnSl1uY7OTI7P7 jZAmEt7sDE+PChnm++aFqaeI5cuuobtiQ/MVNTm7NGzvWNqkGm1wp+gYYTK++KAO BV2rDAUM0N7d5j3dOIYcx75oUc3P/FTYXttRwvDharkjYmOjkupHUBTTlipqkKjN rzntklmTC2GouVOaAh4aHOeA7fArc/sGc/032ZaxxXkf8CnwmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMRQ2dbF9YCRUG0ZaoRiDuJTrGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA4Yjc0MzYtZmExYy0z MGEwLTg5ZmUtMTQ3NGY3NjNmNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIarEQzD6JQDGhZ7DfTVlutwHXa5qRCuPpY8lMOwy1C87kuKTOTFzKSP muLNtvJyPBjmYVobCWC8Wj3R4V7XQqvK3BKE/OZOGCDtLIv+sfqrh5OD7kYQmWmc lDex71FgzKP/tPgDS66YSas4ELOBCvPzKPuioExdtz6frTXZ4MX03K0sFeFJHIbC EYKDyJ739j5iUSPdSu50ZRIWm5DgYKsvHZ+RQ1OTh8QHJglfM8HYDdemCCR4H4/J GRSM+XFbamCCW/a+954PYA7nYdm3okGT6lEhiVXamzSntNT9PEMEmuoq4jDW1x4x JBoaHb49yz6U7oEkxo0R5fplcRE+824= -----END CERTIFICATE-----Generated at Fri Apr 17 16:01:26 2026 by rpki-client