$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36794a0d-1574-39b6-a3fd-cc4467a90982.roa File: 36794a0d-1574-39b6-a3fd-cc4467a90982.roa (raw, json) Hash identifier: Jr4sgIkwpVPdu7cDdOsUoff4j6hmW35kNFnQMdMDM9o= Subject key identifier: A1:91:5D:62:3D:6E:B8:B3:BC:2D:37:F8:A4:EE:BD:67:E6:55:58:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A92C7584FF2B1DBE5FE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36794a0d-1574-39b6-a3fd-cc4467a90982.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.43.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:92:c7:58:4f:f2:b1:db:e5:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=333d8f32-387f-4882-a1ba-baf4104f38a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:be:22:0e:94:3a:da:4c:ac:ea:a1:dc:c7: dc:ac:f3:49:58:d9:fc:21:41:c0:98:af:4f:c6:41: 4e:63:6d:db:46:a8:32:45:95:90:75:bd:8e:5a:c1: 28:9d:aa:c9:96:2b:d0:85:f2:56:15:38:30:99:9c: cf:2d:40:0d:08:0a:21:1f:5c:35:90:df:ca:3f:9e: fa:70:f5:63:1e:c1:8d:6d:fc:6f:57:02:78:cf:ee: 58:39:e9:89:fe:aa:df:08:5a:ba:a6:2b:60:38:56: 20:d3:94:5a:57:6e:ca:79:0f:78:d8:96:df:54:cd: 06:3b:e9:eb:50:16:ba:ce:95:10:ed:a2:8a:55:7b: bb:19:10:dc:7d:41:d2:fc:6f:2d:75:43:92:ac:d4: 2d:d6:a4:96:61:11:fa:3b:cf:03:ce:0f:f9:3b:95: e1:55:c8:1c:fd:33:c9:1d:28:55:a8:61:3d:f3:dc: 21:04:25:60:34:3f:3f:00:24:22:43:88:99:46:c8: a8:05:b6:56:49:75:21:04:3b:15:f9:fd:94:b0:34: 01:b0:c2:2d:0d:2e:2b:85:71:6d:7b:86:89:93:04: 00:1d:d0:b6:49:86:d3:2d:f5:0d:90:37:f8:44:39: 3f:2f:21:86:7d:d6:53:df:4a:c1:6b:a6:d1:20:ab: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:91:5D:62:3D:6E:B8:B3:BC:2D:37:F8:A4:EE:BD:67:E6:55:58:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36794a0d-1574-39b6-a3fd-cc4467a90982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f8:7a:82:6f:ab:5e:50:0b:4d:8f:c3:de:ea:5b:08:d8:dc: fe:86:34:0a:b1:a2:79:62:17:84:35:dc:98:9b:41:04:24:64: 88:4c:d8:15:1b:8e:e3:eb:88:7d:b2:41:bd:73:cb:b9:87:45: 75:a7:a6:23:cf:bf:44:39:52:c0:f7:42:e4:5f:1d:6b:ea:a5: 79:c4:a8:11:af:c5:2e:9d:40:5c:da:18:0c:82:6e:05:6a:2b: 27:62:5b:af:c5:cc:09:67:de:dd:99:f4:09:12:b5:59:fb:29: 0f:be:b7:30:1a:bd:5b:f1:9d:59:08:83:ae:25:fc:65:44:e3: f9:0b:fe:c4:35:ff:3f:7f:c0:ab:2f:f1:0b:de:14:06:81:ca: 27:7c:b4:d7:91:1f:ee:8c:03:3f:ea:79:9a:15:a8:86:c8:22: b0:f9:5a:92:d2:06:f6:94:7a:55:d0:2a:99:44:f0:42:e0:fb: bb:09:1d:ff:fd:a8:d8:d6:d2:a5:91:5e:a2:80:a5:d8:49:c9: 8b:ae:95:22:1e:71:6f:2a:da:87:d1:ab:32:de:d2:83:2a:cc: 9d:e6:11:06:07:66:87:22:77:d4:03:42:7a:44:3f:20:0c:9b: e6:2a:89:28:ab:57:58:b3:70:b4:98:20:37:ef:b5:30:73:8f: 39:89:30:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpLHWE/ysdvl/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MzMzZDhmMzItMzg3Zi00ODgyLWExYmEtYmFmNDEwNGYzOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxy+Ig6UOtpMrOqh3MfcrPNJWNn8IUHAmK9P xkFOY23bRqgyRZWQdb2OWsEonarJlivQhfJWFTgwmZzPLUANCAohH1w1kN/KP576 cPVjHsGNbfxvVwJ4z+5YOemJ/qrfCFq6pitgOFYg05RaV27KeQ942JbfVM0GO+nr UBa6zpUQ7aKKVXu7GRDcfUHS/G8tdUOSrNQt1qSWYRH6O88Dzg/5O5XhVcgc/TPJ HShVqGE989whBCVgND8/ACQiQ4iZRsioBbZWSXUhBDsV+f2UsDQBsMItDS4rhXFt e4aJkwQAHdC2SYbTLfUNkDf4RDk/LyGGfdZT30rBa6bRIKvLJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGRXWI9brizvC03+KTuvWfmVVjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY3OTRhMGQtMTU3NC0z OWI2LWEzZmQtY2M0NDY3YTkwOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFysEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH4eoJvq15QC02Pw97qWwjY3P6GNAqxonliF4Q13JibQQQkZIhM2BUb juPriH2yQb1zy7mHRXWnpiPPv0Q5UsD3QuRfHWvqpXnEqBGvxS6dQFzaGAyCbgVq KydiW6/FzAln3t2Z9AkStVn7KQ++tzAavVvxnVkIg64l/GVE4/kL/sQ1/z9/wKsv 8QveFAaByid8tNeRH+6MAz/qeZoVqIbIIrD5WpLSBvaUelXQKplE8ELg+7sJHf/9 qNjW0qWRXqKApdhJyYuulSIecW8q2ofRqzLe0oMqzJ3mEQYHZocid9QDQnpEPyAM m+YqiSirV1izcLSYIDfvtTBzjzmJMKA= -----END CERTIFICATE-----Generated at Fri Apr 17 20:54:04 2026 by rpki-client