$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af4ac4e-dd1b-3c21-8847-6e562cb10d88.roa File: 2af4ac4e-dd1b-3c21-8847-6e562cb10d88.roa (raw, json) Hash identifier: 6MJwLCg/zWJP8pVjiFjy5miJILwOTvrb0T8cZlcCBto= Subject key identifier: 61:FD:86:01:B9:06:A3:9F:3C:EA:4E:CE:EE:8E:4D:46:DF:62:5C:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D59EA55D619C1BE5608ECA940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af4ac4e-dd1b-3c21-8847-6e562cb10d88.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 33905 IP address blocks: 23.1.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:55:d6:19:c1:be:56:08:ec:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=589f6b63-7dfd-4efc-bf55-d34639b4bbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:5b:6b:4d:0f:df:55:19:7d:fc:43:3d:6c: 6f:1a:41:85:1c:1b:e2:0a:57:a3:fb:7b:07:38:53: 6a:e7:e5:43:ed:c7:c3:44:b5:c3:5e:dd:9e:30:76: 8b:bc:28:88:97:ee:35:db:2a:49:34:9a:9e:be:80: 80:fc:6a:aa:f7:83:b5:47:f6:b9:57:a8:41:67:62: c5:5e:01:4d:e6:3d:f3:b0:8c:56:24:fe:43:21:c7: 6c:0b:ac:d0:ac:41:e3:14:78:4d:8b:8e:98:41:45: f2:9e:05:23:7b:51:78:8c:27:e3:cc:70:32:ff:b9: 63:e6:32:7f:bf:95:30:d4:57:5e:ee:a8:be:4a:f6: 8b:f5:bd:91:c4:64:c0:d9:fa:fc:40:68:85:22:97: 1a:32:18:61:2f:2d:a2:b7:49:3b:bc:4e:f5:62:c0: 6a:81:00:9e:b4:3f:69:cb:18:65:c0:b6:f0:36:dd: f2:01:d0:62:6b:fe:50:c0:55:8f:0a:bb:61:6e:cc: 09:bb:8a:81:02:09:01:ab:6c:1e:5d:c5:a5:9c:44: 8f:b8:de:e3:df:66:a9:a6:97:1e:6a:03:6d:c1:08: c0:10:c1:f0:a1:f0:5c:2e:6e:3f:10:60:fc:72:9a: 64:57:c9:c6:a6:06:c7:be:df:4c:07:34:45:dd:64: 7b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FD:86:01:B9:06:A3:9F:3C:EA:4E:CE:EE:8E:4D:46:DF:62:5C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af4ac4e-dd1b-3c21-8847-6e562cb10d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:3d:57:64:2b:65:07:50:cd:e4:27:24:82:5a:5a:f7:35:6a: 1c:8e:32:ec:8a:ab:5e:30:06:bc:11:22:d0:77:78:68:54:fd: 31:02:d5:f9:fa:31:81:7d:4d:38:bc:5e:05:f6:44:8e:a3:4d: dd:2f:96:23:05:10:5f:3f:a6:4e:1d:37:c5:ee:8b:22:e1:43: 2b:0a:53:3b:d4:b5:7d:98:44:20:bb:35:84:28:5c:75:37:6d: 4f:b2:1a:34:ab:5b:b1:96:4b:60:00:41:67:12:e4:13:49:35: 88:10:5b:66:07:81:e9:8a:cb:6a:a2:ad:80:3a:68:b3:1b:66: 82:fa:b1:85:7a:1c:01:f5:0e:8d:3d:4f:b1:2d:1b:03:80:dd: 85:ef:98:f1:41:a5:22:c4:b0:a7:d2:0f:35:60:73:bc:12:3f: 04:35:94:1c:93:b2:55:b2:ef:28:7f:81:1d:1a:13:0d:94:eb: 41:9f:ca:32:87:c2:fa:62:62:e6:cb:25:18:cd:76:7d:23:0c: de:9c:9d:32:10:dc:9e:30:bf:6c:f7:ff:c8:46:2b:44:ad:61: 37:8b:79:13:e0:22:f9:d4:3a:2f:6c:63:89:5f:22:0a:1b:a4: 1e:13:ba:13:35:bd:99:80:ba:fb:1a:35:cd:22:f7:9c:3c:be: e8:67:af:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lXWGcG+VgjsqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTg5ZjZiNjMtN2RmZC00ZWZjLWJmNTUtZDM0NjM5YjRiYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqZba00P31UZffxDPWxvGkGFHBviClej+3sH OFNq5+VD7cfDRLXDXt2eMHaLvCiIl+412ypJNJqevoCA/Gqq94O1R/a5V6hBZ2LF XgFN5j3zsIxWJP5DIcdsC6zQrEHjFHhNi46YQUXyngUje1F4jCfjzHAy/7lj5jJ/ v5Uw1Fde7qi+SvaL9b2RxGTA2fr8QGiFIpcaMhhhLy2it0k7vE71YsBqgQCetD9p yxhlwLbwNt3yAdBia/5QwFWPCrthbswJu4qBAgkBq2weXcWlnESPuN7j32apppce agNtwQjAEMHwofBcLm4/EGD8cppkV8nGpgbHvt9MBzRF3WR7SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH9hgG5BqOfPOpOzu6OTUbfYlwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFmNGFjNGUtZGQxYi0z YzIxLTg4NDctNmU1NjJjYjEwZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwFjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw9V2QrZQdQzeQnJIJaWvc1ahyOMuyKq14wBrwRItB3eGhU/TEC1fn6 MYF9TTi8XgX2RI6jTd0vliMFEF8/pk4dN8XuiyLhQysKUzvUtX2YRCC7NYQoXHU3 bU+yGjSrW7GWS2AAQWcS5BNJNYgQW2YHgemKy2qirYA6aLMbZoL6sYV6HAH1Do09 T7EtGwOA3YXvmPFBpSLEsKfSDzVgc7wSPwQ1lByTslWy7yh/gR0aEw2U60GfyjKH wvpiYubLJRjNdn0jDN6cnTIQ3J4wv2z3/8hGK0StYTeLeRPgIvnUOi9sY4lfIgob pB4TuhM1vZmAuvsaNc0i95w8vuhnr+o= -----END CERTIFICATE-----Generated at Fri Apr 17 10:52:10 2026 by rpki-client