$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239fa796-6ebe-383b-8b8f-131c91e9338b.roa File: 239fa796-6ebe-383b-8b8f-131c91e9338b.roa (raw, json) Hash identifier: akm9/QJowQGAcPgNmT9Lj9TdRYSZgdRwA39y99Cg3OU= Subject key identifier: 31:B5:8D:1C:47:14:37:46:6C:2C:50:F5:61:B4:51:D6:25:E8:BE:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A95DB1006E39F8599E800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239fa796-6ebe-383b-8b8f-131c91e9338b.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.219.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:95:db:10:06:e3:9f:85:99:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=114c04ad-e4c5-4438-80b7-95aa0ba9a5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:9c:19:2b:d7:9f:c3:fa:fe:49:c2:fe:df: 07:05:a1:95:72:12:ab:e2:bc:e8:1a:0c:6b:10:3c: 81:9d:dd:a6:fe:5b:cf:c2:99:e8:25:db:39:64:ac: 52:af:7e:55:93:be:e9:c3:7a:f5:2b:d0:e6:25:73: 9a:01:a9:cb:f0:2d:22:68:4d:d6:75:c2:32:20:f1: cc:2b:88:c4:7f:7c:74:1c:a1:04:4b:ef:18:b7:0a: fe:81:86:f0:61:66:8a:a7:4a:96:fc:7e:bb:84:0b: 51:1b:77:fe:eb:67:3b:db:b7:ac:ec:71:92:64:b7: cc:a4:1c:68:7e:9b:a8:03:67:5b:28:be:8e:ce:f6: 9a:d5:c7:27:88:8d:60:52:fe:63:68:44:cb:fa:06: f3:f4:05:40:b6:a0:58:99:ed:f7:c7:85:ae:1a:a8: 28:21:44:5a:ee:5e:16:fb:a4:f6:f8:3d:a0:a2:59: 8b:6e:5c:13:93:06:ba:da:fb:4d:1a:d9:33:ac:6a: de:d9:a1:bb:7b:b6:9b:73:09:27:fc:5d:fa:39:a8: 1c:44:74:21:27:f5:4a:b9:eb:d5:d7:40:b8:76:e2: b7:d3:ac:e3:8e:07:7c:34:48:2b:d1:8d:53:a5:24: 2b:b4:c5:73:21:cd:84:0a:e2:1d:8a:d4:f3:81:09: 25:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B5:8D:1C:47:14:37:46:6C:2C:50:F5:61:B4:51:D6:25:E8:BE:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239fa796-6ebe-383b-8b8f-131c91e9338b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:da:59:cf:7e:ac:6f:1f:ce:94:28:77:16:ac:55:74:19:43: 5a:5b:50:5c:e1:f6:24:21:f8:fc:b0:f6:31:c9:0b:41:3e:5f: f3:d6:a5:6d:9c:1a:94:e4:30:8e:31:7e:6f:8d:e5:22:9f:d3: de:e6:3e:97:f9:21:13:93:4d:0a:06:57:4c:1e:92:89:1b:42: a1:72:b7:18:15:a1:a4:b0:fe:88:fd:ae:fe:6f:02:12:8f:7d: 76:f6:6c:e2:19:4e:3a:16:0d:97:52:12:2c:44:d2:89:b9:f8: 9f:0f:9a:46:41:ad:53:eb:43:06:29:18:60:e3:2b:16:13:3f: 32:81:2f:26:56:bf:70:0b:e7:6c:d5:ca:2d:3a:eb:ed:b0:68: b2:c0:3d:bd:68:31:d0:58:91:24:9b:b6:e1:43:33:20:01:fe: 3d:58:86:35:6a:65:3b:11:5e:cd:e8:84:92:21:51:ef:c9:68: 58:30:50:3f:a2:96:46:e5:43:47:87:d8:9a:0b:8e:66:f7:ff: bb:50:ac:ae:b8:53:e3:05:33:de:fb:e9:d0:56:ae:8b:c1:91: f1:f0:b8:a6:83:17:bc:1d:66:59:92:a4:0c:2f:c3:18:db:c3: c3:f3:4e:1f:52:e1:cc:9c:51:bb:1d:28:ab:2d:33:af:6d:bd: 9c:54:6a:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpXbEAbjn4WZ6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MTE0YzA0YWQtZTRjNS00NDM4LTgwYjctOTVhYTBiYTlhNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYucGSvXn8P6/knC/t8HBaGVchKr4rzoGgxr EDyBnd2m/lvPwpnoJds5ZKxSr35Vk77pw3r1K9DmJXOaAanL8C0iaE3WdcIyIPHM K4jEf3x0HKEES+8Ytwr+gYbwYWaKp0qW/H67hAtRG3f+62c727es7HGSZLfMpBxo fpuoA2dbKL6Ozvaa1ccniI1gUv5jaETL+gbz9AVAtqBYme33x4WuGqgoIURa7l4W +6T2+D2golmLblwTkwa62vtNGtkzrGre2aG7e7abcwkn/F36OagcRHQhJ/VKuevV 10C4duK306zjjgd8NEgr0Y1TpSQrtMVzIc2ECuIditTzgQklcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG1jRxHFDdGbCxQ9WG0UdYl6L4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjM5ZmE3OTYtNmViZS0z ODNiLThiOGYtMTMxYzkxZTkzMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9twMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDaWc9+rG8fzpQodxasVXQZQ1pbUFzh9iQh+Pyw9jHJC0E+X/PWpW2c GpTkMI4xfm+N5SKf097mPpf5IROTTQoGV0wekokbQqFytxgVoaSw/oj9rv5vAhKP fXb2bOIZTjoWDZdSEixE0om5+J8PmkZBrVPrQwYpGGDjKxYTPzKBLyZWv3AL52zV yi066+2waLLAPb1oMdBYkSSbtuFDMyAB/j1YhjVqZTsRXs3ohJIhUe/JaFgwUD+i lkblQ0eH2JoLjmb3/7tQrK64U+MFM9776dBWrovBkfHwuKaDF7wdZlmSpAwvwxjb w8PzTh9S4cycUbsdKKstM69tvZxUano= -----END CERTIFICATE-----Generated at Fri Apr 17 14:17:38 2026 by rpki-client