$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28a622b2-dba1-32d2-94e9-2c48834e2b27.roa File: 28a622b2-dba1-32d2-94e9-2c48834e2b27.roa (raw, json) Hash identifier: 80WJbR3TPYX5U2XibDzFiMHvUo+mLiqNH6gu+bYyp50= Subject key identifier: DD:5D:4B:4E:5D:90:5E:3E:15:55:32:D1:2F:F1:94:82:07:46:BF:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D75D547C9199B7B73039E7B90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28a622b2-dba1-32d2-94e9-2c48834e2b27.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 20940 IP address blocks: 23.64.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:47:c9:19:9b:7b:73:03:9e:7b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=f21c37bd-48b9-47da-ac88-643228270417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:e6:3e:34:fa:bf:38:94:7a:11:af:97:c3: b5:47:e5:90:b2:2a:95:b6:61:19:e9:d5:c4:64:36: 5b:d0:6d:13:d9:1a:a2:a5:c0:25:4b:6f:95:65:16: 5a:54:c4:59:03:1c:21:bc:ef:d3:c2:0f:8d:2f:bd: 89:55:93:6c:e9:09:1b:44:9a:8a:81:80:a2:a2:9f: f8:27:6b:c6:17:ab:09:35:cb:49:98:f6:71:c8:96: 69:3f:2c:24:ed:d4:3a:37:19:68:2b:a8:7e:02:80: 41:18:46:b0:33:81:36:cb:ae:cf:e1:97:87:87:2d: ac:ab:23:35:c9:44:b2:58:77:c7:3a:b6:db:6c:b8: 57:30:ec:1b:a5:67:48:03:c2:5a:22:c2:ed:8f:9d: 18:af:83:98:8f:0d:b5:fa:45:9b:44:b1:06:0a:bb: 04:0a:98:f1:45:2b:c2:c8:6f:98:4d:b2:65:fc:45: ca:e4:dc:b4:15:c5:99:fd:a0:51:3a:c9:75:d1:a7: 4d:6d:c3:c5:b6:d6:3c:19:dc:49:08:82:4b:de:88: 53:df:c5:5f:05:1f:11:ed:ef:5f:b0:16:f7:83:35: b7:63:69:0b:7e:6e:4d:61:55:50:c1:38:87:32:e2: fe:ad:ef:f8:3b:cb:97:23:94:a8:34:4d:03:f8:88: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5D:4B:4E:5D:90:5E:3E:15:55:32:D1:2F:F1:94:82:07:46:BF:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28a622b2-dba1-32d2-94e9-2c48834e2b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:23:86:0f:8a:ed:23:ea:2f:2a:10:f6:0c:85:7b:3d:9e:92: 06:18:3c:a1:be:23:e5:e0:e8:48:02:fd:d0:de:f9:d2:9a:c7: 8e:39:94:82:4f:23:41:f5:b7:04:5d:20:26:70:ab:dc:0d:8c: 09:33:a5:fe:83:c3:be:ae:7b:95:e1:26:02:03:38:bf:95:28: 56:48:95:74:de:85:9e:ac:76:7b:20:a9:4d:74:17:94:c0:ba: 1a:03:b8:2d:f2:9b:84:9f:f0:82:37:b1:ac:8a:26:fe:7f:c8: 6a:48:c3:8b:38:1f:04:29:e6:c9:a3:15:c8:d7:1b:ba:ae:0f: 76:de:ad:66:fc:3f:03:5a:78:1b:eb:da:b4:81:d6:21:6d:7a: 8d:e4:6e:22:2a:9a:82:62:a1:3c:03:79:27:9c:a8:bb:39:3f: 50:68:b6:7c:4b:f1:9e:86:57:a4:fe:7a:c4:40:b0:57:f8:3e: 67:47:59:96:87:41:b9:7c:84:c0:7c:99:35:57:76:37:46:f9: 58:34:12:75:ac:96:cc:2a:7e:5c:71:5b:95:61:28:11:1e:f7: 82:8b:be:13:ba:de:db:6b:90:37:aa:80:8c:27:4b:53:17:3e: 47:3c:72:48:e6:de:e7:d7:c1:dc:29:87:3f:23:66:52:b5:6b: 4d:c1:4c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111UfJGZt7cwOee5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZjIxYzM3YmQtNDhiOS00N2RhLWFjODgtNjQzMjI4MjcwNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eXmPjT6vziUehGvl8O1R+WQsiqVtmEZ6dXE ZDZb0G0T2RqipcAlS2+VZRZaVMRZAxwhvO/Twg+NL72JVZNs6QkbRJqKgYCiop/4 J2vGF6sJNctJmPZxyJZpPywk7dQ6NxloK6h+AoBBGEawM4E2y67P4ZeHhy2sqyM1 yUSyWHfHOrbbbLhXMOwbpWdIA8JaIsLtj50Yr4OYjw21+kWbRLEGCrsECpjxRSvC yG+YTbJl/EXK5Ny0FcWZ/aBROsl10adNbcPFttY8GdxJCIJL3ohT38VfBR8R7e9f sBb3gzW3Y2kLfm5NYVVQwTiHMuL+re/4O8uXI5SoNE0D+IgbawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1dS05dkF4+FVUy0S/xlIIHRr92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhhNjIyYjItZGJhMS0z MmQyLTk0ZTktMmM0ODgzNGUyYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0A6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgjhg+K7SPqLyoQ9gyFez2ekgYYPKG+I+Xg6EgC/dDe+dKax445lIJP I0H1twRdICZwq9wNjAkzpf6Dw76ue5XhJgIDOL+VKFZIlXTehZ6sdnsgqU10F5TA uhoDuC3ym4Sf8II3sayKJv5/yGpIw4s4HwQp5smjFcjXG7quD3berWb8PwNaeBvr 2rSB1iFteo3kbiIqmoJioTwDeSecqLs5P1BotnxL8Z6GV6T+esRAsFf4PmdHWZaH Qbl8hMB8mTVXdjdG+Vg0EnWslswqflxxW5VhKBEe94KLvhO63ttrkDeqgIwnS1MX Pkc8ckjm3ufXwdwphz8jZlK1a03BTBA= -----END CERTIFICATE-----Generated at Fri Apr 17 10:21:08 2026 by rpki-client