$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a11bce-cfd5-3fbb-b11d-2056a55c2eae.roa File: 21a11bce-cfd5-3fbb-b11d-2056a55c2eae.roa (raw, json) Hash identifier: XQJoVB9WhJzViFl6ACsdhU1rnQl3I25y8DKZuWCq/7s= Subject key identifier: AF:2E:88:24:AF:7D:1E:29:19:8C:39:1E:E5:28:32:C7:84:2F:34:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D86957092D088E39407F3FD40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a11bce-cfd5-3fbb-b11d-2056a55c2eae.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.4.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:70:92:d0:88:e3:94:07:f3:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=c4192c4b-e68a-456f-9ded-d70380dfd83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:74:23:71:ee:58:c4:77:e4:0d:b1:28:9f:cd: 00:c3:1c:d2:37:58:ce:ea:61:29:d3:42:e6:b0:68: 16:ad:48:af:13:6b:77:4f:a9:86:94:02:f3:67:0f: 9c:44:b4:fc:2e:0b:a0:d2:d5:ac:a2:d5:76:91:f4: 24:2e:28:b2:d4:e4:c8:cf:4b:19:cb:8f:9b:f6:93: 75:97:5d:0e:0f:f1:09:e7:2c:1b:1e:03:e1:1a:28: cc:fc:71:0d:d9:01:81:e3:94:30:78:65:fa:f2:85: b7:94:8a:45:61:03:47:4e:a3:c1:64:9b:7a:29:90: c5:07:5b:7e:36:53:25:2f:bf:1d:19:ad:a9:81:af: 72:6a:c2:9e:9e:75:c1:c6:f3:9f:eb:22:97:b9:9f: f4:26:93:db:e8:8f:2a:64:36:17:4a:83:a9:14:a3: 26:1b:75:e4:c7:62:b0:f5:cc:a4:bf:e0:ba:d8:ef: 42:18:52:f5:6a:53:92:11:d6:b7:bf:16:fa:fb:a4: d4:ee:7c:34:30:3e:aa:79:ca:e9:41:91:60:70:7f: fc:ec:71:a7:89:b5:78:6d:70:87:10:06:72:34:b4: a4:f3:17:db:83:9f:4e:24:05:7e:7c:88:c7:ac:12: 17:b9:8d:75:dd:d8:b1:f1:1d:a8:85:db:5e:9b:df: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2E:88:24:AF:7D:1E:29:19:8C:39:1E:E5:28:32:C7:84:2F:34:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a11bce-cfd5-3fbb-b11d-2056a55c2eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:24:33:a6:1b:d4:6e:87:06:75:87:b1:cc:10:43:45:3b:bc: 44:8d:56:f1:9c:9d:cc:0b:75:19:73:f1:e9:bb:60:94:5e:d5: ba:75:d4:3e:86:e5:af:50:db:40:45:e6:db:43:aa:bd:fe:23: 56:ad:8c:e2:5e:1c:fb:62:75:ab:83:28:32:cc:bc:c2:f5:93: 4b:c8:14:3b:bc:ac:b2:54:ab:3b:b7:ba:cb:72:5f:d2:3a:e9: 7d:bd:6a:0e:7e:84:6d:28:51:8c:2b:d5:63:59:fc:2d:b9:28: 3c:bd:8a:a0:f6:de:7a:80:94:26:5e:3b:1f:da:c7:4b:27:50: 8e:cc:ea:4b:00:cc:e6:aa:13:26:1b:f2:3d:3d:59:fa:5d:df: 68:b6:5e:b1:31:d4:78:83:41:fa:d7:09:02:22:7c:2c:3a:0e: 83:c9:6e:58:8e:05:cd:4f:69:aa:e3:e1:fd:85:fa:15:3c:e3: 4f:82:a4:98:6c:c4:26:ae:bf:f8:89:37:09:d1:3f:36:d1:7f: db:5b:63:c5:d2:48:84:84:ac:39:c5:a1:15:f2:f2:45:38:d7: 0b:d0:6b:41:ce:de:2c:ca:29:71:d0:ee:03:9e:d6:3e:46:ef: 96:e3:2b:46:d4:f7:85:2c:ad:9b:12:a2:19:b5:8c:66:50:cb: 04:36:18:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXCS0IjjlAfz/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YzQxOTJjNGItZTY4YS00NTZmLTlkZWQtZDcwMzgwZGZkODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nQjce5YxHfkDbEon80AwxzSN1jO6mEp00Lm sGgWrUivE2t3T6mGlALzZw+cRLT8Lgug0tWsotV2kfQkLiiy1OTIz0sZy4+b9pN1 l10OD/EJ5ywbHgPhGijM/HEN2QGB45QweGX68oW3lIpFYQNHTqPBZJt6KZDFB1t+ NlMlL78dGa2pga9yasKennXBxvOf6yKXuZ/0JpPb6I8qZDYXSoOpFKMmG3Xkx2Kw 9cykv+C62O9CGFL1alOSEda3vxb6+6TU7nw0MD6qecrpQZFgcH/87HGnibV4bXCH EAZyNLSk8xfbg59OJAV+fIjHrBIXuY113dix8R2ohdtem98epwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8uiCSvfR4pGYw5HuUoMseELzSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFhMTFiY2UtY2ZkNS0z ZmJiLWIxMWQtMjA1NmE1NWMyZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYkM6Yb1G6HBnWHscwQQ0U7vESNVvGcncwLdRlz8em7YJRe1bp11D6G 5a9Q20BF5ttDqr3+I1atjOJeHPtidauDKDLMvML1k0vIFDu8rLJUqzu3ustyX9I6 6X29ag5+hG0oUYwr1WNZ/C25KDy9iqD23nqAlCZeOx/ax0snUI7M6ksAzOaqEyYb 8j09Wfpd32i2XrEx1HiDQfrXCQIifCw6DoPJbliOBc1Paarj4f2F+hU840+CpJhs xCauv/iJNwnRPzbRf9tbY8XSSISErDnFoRXy8kU41wvQa0HO3izKKXHQ7gOe1j5G 75bjK0bU94UsrZsSohm1jGZQywQ2GA8= -----END CERTIFICATE-----Generated at Fri Apr 17 01:24:27 2026 by rpki-client