$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa File: 493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa (raw, json) Hash identifier: NY5ItWr/IHxMyBsy+peBK7aADjL68EMe/CPGQg1/DeA= Subject key identifier: 42:DE:A2:B8:68:17:E6:83:02:A4:C6:F4:9C:99:F2:38:CB:1C:89:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D80FFFCF9598657B54B0D8180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 20940 IP address blocks: 23.77.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:fc:f9:59:86:57:b5:4b:0d:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=a119065c-f36f-45d3-9618-0115715973c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:e3:05:74:38:db:99:fc:e8:63:5f:4c:6e: fc:f3:aa:cf:45:8b:0a:bc:e1:a8:6f:89:cd:6d:d8: 8e:f8:4d:8c:9d:61:21:9f:e3:84:c0:c8:60:7c:fb: 35:ba:c5:c2:26:08:af:dd:8a:fa:08:78:39:f0:2b: a5:43:94:52:04:cd:bd:66:91:5a:e4:15:8f:3a:da: a2:a7:a0:69:65:c3:32:ba:36:e7:b0:47:b3:e1:aa: fc:50:47:cf:02:be:09:30:94:60:28:ad:60:03:65: 73:1d:0a:84:46:bd:40:d8:9f:3c:c4:54:69:14:f4: 6f:d3:f2:58:53:ae:71:4f:27:fa:a9:8b:58:1e:7b: 85:25:76:42:a5:28:56:e6:b9:2c:1b:07:a0:eb:79: bd:5a:46:b3:f8:73:5b:21:e7:b4:d5:67:23:7b:33: 7a:50:7d:f8:4c:49:17:81:95:bd:2b:a0:8c:85:52: ad:8d:b4:23:89:be:03:80:d9:43:24:a4:f0:ca:5d: 6f:92:d3:c8:97:82:03:97:3a:59:6a:4d:75:3d:fd: a0:e3:fa:f4:5e:05:52:8f:81:2c:bc:ee:47:3f:3b: db:a3:49:78:3a:c7:a5:7f:ec:be:4b:f1:d1:91:2f: 44:c9:bc:e1:0f:db:68:ac:cb:92:e4:d3:cb:89:8c: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DE:A2:B8:68:17:E6:83:02:A4:C6:F4:9C:99:F2:38:CB:1C:89:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493659b6-64ee-3cea-9f82-ffd009d4b4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.77.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7b:9d:40:0f:f2:40:51:7d:59:9c:db:6b:d7:7a:ed:7b:db: 54:af:66:19:de:6f:b7:7d:a5:2e:1d:4f:b1:30:b8:15:37:c4: a3:05:a9:78:21:be:8c:fb:7f:ce:a5:a3:4f:5a:76:4f:66:8c: f2:ce:6a:20:ce:07:30:b8:51:8a:df:de:a5:3c:e4:f8:27:d5: b2:dc:b4:05:0b:ff:43:18:e3:0f:1f:b0:78:06:b6:54:92:9a: 60:ff:9c:03:a5:86:6f:a0:71:f5:45:20:76:66:2a:29:0b:4c: fe:89:e1:e7:76:d3:2d:be:23:d9:1e:c1:b4:87:5b:51:38:c6: 95:07:9f:fa:6f:05:4b:eb:c4:e0:6a:1f:ec:2c:3b:cd:f4:20: 45:8e:cf:da:9b:9a:d1:6d:87:58:e7:da:0f:20:3e:c9:c5:ab: 45:6e:58:2e:5b:1b:e0:87:b9:2d:47:dd:de:2b:4f:cb:8b:8d: 66:4a:d6:9e:67:40:d8:1b:70:f6:2d:3e:e3:af:46:e6:cf:8d: 99:7f:df:13:76:58:e5:f2:5f:63:b6:06:09:b9:00:89:e1:d5: 8b:d5:5d:90:fc:09:7a:de:c5:11:f8:02:ed:85:00:c5:6d:f8: 9c:39:4a:2f:4d:4f:01:c6:07:a0:d6:91:3d:5b:98:69:34:96: 91:47:ac:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//z5WYZXtUsNgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YTExOTA2NWMtZjM2Zi00NWQzLTk2MTgtMDExNTcxNTk3M2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgjjBXQ425n86GNfTG7886rPRYsKvOGob4nN bdiO+E2MnWEhn+OEwMhgfPs1usXCJgiv3Yr6CHg58CulQ5RSBM29ZpFa5BWPOtqi p6BpZcMyujbnsEez4ar8UEfPAr4JMJRgKK1gA2VzHQqERr1A2J88xFRpFPRv0/JY U65xTyf6qYtYHnuFJXZCpShW5rksGweg63m9Wkaz+HNbIee01WcjezN6UH34TEkX gZW9K6CMhVKtjbQjib4DgNlDJKTwyl1vktPIl4IDlzpZak11Pf2g4/r0XgVSj4Es vO5HPzvbo0l4Oself+y+S/HRkS9EybzhD9torMuS5NPLiYyJlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELeorhoF+aDAqTG9JyZ8jjLHIlOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDkzNjU5YjYtNjRlZS0z Y2VhLTlmODItZmZkMDA5ZDRiNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF03FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp7nUAP8kBRfVmc22vXeu1721SvZhneb7d9pS4dT7EwuBU3xKMFqXgh voz7f86lo09adk9mjPLOaiDOBzC4UYrf3qU85Pgn1bLctAUL/0MY4w8fsHgGtlSS mmD/nAOlhm+gcfVFIHZmKikLTP6J4ed20y2+I9kewbSHW1E4xpUHn/pvBUvrxOBq H+wsO830IEWOz9qbmtFth1jn2g8gPsnFq0VuWC5bG+CHuS1H3d4rT8uLjWZK1p5n QNgbcPYtPuOvRubPjZl/3xN2WOXyX2O2Bgm5AInh1YvVXZD8CXrexRH4Au2FAMVt +Jw5Si9NTwHGB6DWkT1bmGk0lpFHrKA= -----END CERTIFICATE-----Generated at Fri Apr 17 13:52:52 2026 by rpki-client