$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc38961-8a26-3e33-843e-f94ab4d130a5.roa File: 3fc38961-8a26-3e33-843e-f94ab4d130a5.roa (raw, json) Hash identifier: zsCd0aM+8dNSirk3KvExLbXiJWOoyUFqN4JZc2uSYSU= Subject key identifier: 41:7A:EB:66:03:9F:40:87:FD:D3:8F:33:8E:4B:53:6F:B4:CA:D5:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D869562B7D71EC8B471DB6E60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc38961-8a26-3e33-843e-f94ab4d130a5.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 20940 IP address blocks: 23.2.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:62:b7:d7:1e:c8:b4:71:db:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=fce47d9b-8759-4392-ad5e-cafccbe5dd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:77:8a:a5:a0:f4:e5:52:e2:2d:83:03:5e: 46:8f:6d:b7:ba:99:fb:18:31:75:a1:67:cf:c0:f9: 40:17:2c:6a:4b:02:a4:9b:08:cd:93:d9:e0:6f:4c: a8:05:7f:a1:52:15:f4:84:30:4c:13:19:16:56:b9: 02:45:e7:75:3b:d0:5f:f6:34:6a:42:ee:40:b9:56: 3a:4c:1a:90:2c:b7:ee:1b:e6:5b:2c:b3:0b:fc:56: 21:35:d6:68:51:b0:41:85:0c:4c:b4:d0:57:9f:92: 3f:64:bc:b3:10:0e:2d:2f:ab:98:30:d8:17:d7:7b: 00:75:3c:2f:89:42:3b:bc:a5:cb:7b:78:f4:63:db: 95:5a:4e:d1:16:fd:dc:e3:06:9d:3b:77:36:cf:07: bf:d1:27:4b:fd:11:6d:f2:b0:ff:ee:81:c7:08:60: d5:0f:a2:da:a3:f8:aa:1a:a8:6a:6d:58:c3:7c:b0: 3b:c2:16:ed:8d:7f:79:46:0d:4c:31:4b:4a:27:1d: b3:1d:01:94:20:0c:5b:70:b0:33:cf:b4:79:63:6b: 0c:ef:dd:74:c8:f2:a4:64:db:1a:e6:f2:89:27:aa: 36:8e:76:4b:ba:aa:82:07:25:ca:a3:47:4d:62:85: 66:40:4e:9a:07:5e:36:e1:47:f3:30:e2:47:0f:f9: 5f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7A:EB:66:03:9F:40:87:FD:D3:8F:33:8E:4B:53:6F:B4:CA:D5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc38961-8a26-3e33-843e-f94ab4d130a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8d:ec:51:5b:0d:3a:c9:51:8c:0f:8c:71:c5:96:ed:a2:e2: 23:25:25:02:2a:0c:51:d5:2c:6d:a0:4c:7d:d4:d6:1f:dc:55: 4d:67:68:4c:ae:d0:fc:f3:f6:03:68:b1:70:db:9c:a0:fc:38: 3e:db:8b:ac:b3:a0:3b:62:78:64:56:c6:a0:2a:2e:29:64:9e: fb:ab:94:0f:cb:25:1d:4a:24:b4:d7:99:4f:31:da:57:00:e8: bf:d6:95:b0:c8:39:34:32:72:28:06:b5:17:63:a1:9c:79:de: 2a:ac:1d:3a:55:8b:57:4a:83:14:10:aa:fe:76:64:d0:e0:60: 9f:fe:aa:58:5a:ac:3f:a2:79:b0:7f:4e:dd:c4:cf:77:45:f8: d5:40:29:1b:77:33:e6:b9:ee:93:8b:6a:45:4f:6b:1a:24:08: 57:15:34:cc:8b:bc:6e:09:6b:e1:cf:01:02:53:bd:1c:1f:db: 74:52:34:bb:1e:54:2b:5b:f8:9d:8a:f2:ab:cb:f0:8a:8d:fc: 98:80:43:ae:e9:c0:68:ac:b5:ee:91:96:e4:50:5c:fa:5d:ae: 81:f5:cc:9d:11:c9:f8:11:c5:ff:90:f7:17:92:c3:95:ba:ff: 97:dc:e7:19:67:c7:62:86:49:2d:5f:cb:59:0f:a8:1a:64:16: ec:c4:ef:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlWK31x7ItHHbbmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZmNlNDdkOWItODc1OS00MzkyLWFkNWUtY2FmY2NiZTVkZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnch3iqWg9OVS4i2DA15Gj223upn7GDF1oWfP wPlAFyxqSwKkmwjNk9ngb0yoBX+hUhX0hDBMExkWVrkCRed1O9Bf9jRqQu5AuVY6 TBqQLLfuG+ZbLLML/FYhNdZoUbBBhQxMtNBXn5I/ZLyzEA4tL6uYMNgX13sAdTwv iUI7vKXLe3j0Y9uVWk7RFv3c4wadO3c2zwe/0SdL/RFt8rD/7oHHCGDVD6Lao/iq GqhqbVjDfLA7whbtjX95Rg1MMUtKJx2zHQGUIAxbcLAzz7R5Y2sM7910yPKkZNsa 5vKJJ6o2jnZLuqqCByXKo0dNYoVmQE6aB1424UfzMOJHD/lfYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF662YDn0CH/dOPM45LU2+0ytVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZjMzg5NjEtOGEyNi0z ZTMzLTg0M2UtZjk0YWI0ZDEzMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEON7FFbDTrJUYwPjHHFlu2i4iMlJQIqDFHVLG2gTH3U1h/cVU1naEyu 0Pzz9gNosXDbnKD8OD7bi6yzoDtieGRWxqAqLilknvurlA/LJR1KJLTXmU8x2lcA 6L/WlbDIOTQycigGtRdjoZx53iqsHTpVi1dKgxQQqv52ZNDgYJ/+qlharD+iebB/ Tt3Ez3dF+NVAKRt3M+a57pOLakVPaxokCFcVNMyLvG4Ja+HPAQJTvRwf23RSNLse VCtb+J2K8qvL8IqN/JiAQ67pwGiste6RluRQXPpdroH1zJ0RyfgRxf+Q9xeSw5W6 /5fc5xlnx2KGSS1fy1kPqBpkFuzE75Q= -----END CERTIFICATE-----Generated at Fri Apr 17 22:17:44 2026 by rpki-client