$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa File: 24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa (raw, json) Hash identifier: ReCXeZnL2d0bbfgMS29sfU5VTR0jvlM4XAdHmYo1K4Q= Subject key identifier: 3E:59:FB:A3:92:8A:FD:6A:04:01:08:21:63:23:9C:A0:BC:4F:FA:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A94E94A7B65AE0E2ACE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.210.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:94:e9:4a:7b:65:ae:0e:2a:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=a1f7f1ed-137f-40ab-9844-f3bed5bd0689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:19:d5:57:7b:2b:13:a6:2a:62:32:5e:31: bc:5d:df:bb:11:3a:ef:4b:8a:2c:40:eb:f0:7a:6a: c0:5c:40:5f:3f:12:05:27:f3:da:5c:3c:0b:4a:20: 9e:f7:ab:66:23:73:d2:0b:ac:9b:2e:4e:26:d4:c0: d1:e1:f5:f6:3d:1f:1a:00:ae:1a:6e:99:d6:e7:76: 03:94:a8:59:05:02:98:02:ba:48:9e:ac:0d:51:ce: 07:02:63:d6:aa:05:bc:87:16:e7:26:9d:49:cb:3f: 69:3e:8a:73:85:97:24:8c:aa:63:96:0a:2a:c4:8c: e2:92:a8:64:f2:e6:f0:c9:24:1a:80:2e:64:d1:80: 69:9a:cc:f5:f0:06:a2:ee:23:5e:c0:7b:30:70:25: 72:e8:02:26:b8:ce:1d:22:c5:7e:c9:c7:4d:49:47: 1b:15:53:cf:fe:97:bc:14:27:c2:3c:c6:f2:12:ec: 93:73:f4:ff:88:fe:c3:9b:55:8a:ee:93:a0:76:30: 50:47:02:ed:d2:25:d7:5a:e3:85:55:8b:65:43:e2: 3a:46:66:b7:b9:78:6e:26:b7:e5:df:2b:83:45:af: bb:e5:7c:33:a7:f1:8b:c0:89:e5:61:dd:c5:04:20: 38:e2:a0:b0:98:db:df:f2:63:a4:a4:0d:d2:e4:3b: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:59:FB:A3:92:8A:FD:6A:04:01:08:21:63:23:9C:A0:BC:4F:FA:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24d1c625-554d-3c55-aff5-2b8aa9403e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:33:ff:b1:c5:45:cc:70:b9:4c:ab:50:11:7a:8c:a9:05:2f: 63:0d:ec:c3:2f:94:d6:69:74:05:03:2e:28:45:3a:fe:c7:12: 01:de:9d:5c:5b:83:7b:2c:93:a1:7b:65:a2:a9:00:80:14:71: b9:bb:0a:02:06:f7:e6:69:77:d8:58:82:1a:5b:19:86:72:07: ef:0f:d8:28:9b:ff:74:c2:d5:c2:b0:03:d2:49:89:39:49:f1: 87:6c:28:52:47:12:e4:16:4e:e3:c8:6b:af:74:55:34:f6:54: 0c:42:09:10:25:2a:ab:d3:01:ad:ed:08:89:c5:a4:94:c9:94: 60:2c:8d:55:3c:3d:ee:a5:b3:d4:02:41:2f:70:fd:4b:dd:49: da:d2:c0:70:02:b1:58:41:62:94:4f:ac:b7:ce:b8:18:a2:d2: 0b:81:3c:ad:ab:3f:2f:27:11:73:af:29:d8:65:1b:00:5e:08: 26:ff:40:47:39:b3:c8:52:76:3f:b4:07:2d:42:63:fb:01:45: 9c:11:1f:8c:18:57:70:53:cd:57:7c:69:03:22:97:c6:c0:bd: 49:c8:52:98:39:10:e2:17:da:07:77:66:f3:69:ce:a5:2a:cf: a7:ed:aa:10:7e:d6:28:69:2b:ab:a4:d8:89:0f:7f:52:4e:2c: a6:c5:92:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpTpSntlrg4qzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YTFmN2YxZWQtMTM3Zi00MGFiLTk4NDQtZjNiZWQ1YmQwNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB8Z1Vd7KxOmKmIyXjG8Xd+7ETrvS4osQOvw emrAXEBfPxIFJ/PaXDwLSiCe96tmI3PSC6ybLk4m1MDR4fX2PR8aAK4abpnW53YD lKhZBQKYArpInqwNUc4HAmPWqgW8hxbnJp1Jyz9pPopzhZckjKpjlgoqxIzikqhk 8ubwySQagC5k0YBpmsz18Aai7iNewHswcCVy6AImuM4dIsV+ycdNSUcbFVPP/pe8 FCfCPMbyEuyTc/T/iP7Dm1WK7pOgdjBQRwLt0iXXWuOFVYtlQ+I6Rma3uXhuJrfl 3yuDRa+75Xwzp/GLwInlYd3FBCA44qCwmNvf8mOkpA3S5Du36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5Z+6OSiv1qBAEIIWMjnKC8T/qFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRkMWM2MjUtNTU0ZC0z YzU1LWFmZjUtMmI4YWE5NDAzZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9LMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgz/7HFRcxwuUyrUBF6jKkFL2MN7MMvlNZpdAUDLihFOv7HEgHenVxb g3ssk6F7ZaKpAIAUcbm7CgIG9+Zpd9hYghpbGYZyB+8P2Cib/3TC1cKwA9JJiTlJ 8YdsKFJHEuQWTuPIa690VTT2VAxCCRAlKqvTAa3tCInFpJTJlGAsjVU8Pe6ls9QC QS9w/UvdSdrSwHACsVhBYpRPrLfOuBii0guBPK2rPy8nEXOvKdhlGwBeCCb/QEc5 s8hSdj+0By1CY/sBRZwRH4wYV3BTzVd8aQMil8bAvUnIUpg5EOIX2gd3ZvNpzqUq z6ftqhB+1ihpK6uk2IkPf1JOLKbFkrM= -----END CERTIFICATE-----Generated at Fri Apr 17 11:29:46 2026 by rpki-client