$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2b1697-d2b6-3d03-8292-78ca6df47474.roa File: 4a2b1697-d2b6-3d03-8292-78ca6df47474.roa (raw, json) Hash identifier: j0li/x5g4aQjNBhnTZ9mjM1c4esWAToYcUpipYnACDY= Subject key identifier: 4E:D9:2C:7B:F4:03:B2:A5:AB:67:85:BF:F6:EF:BB:8E:35:DC:AF:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8695701CA2EC66AD8F73B4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2b1697-d2b6-3d03-8292-78ca6df47474.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 20940 IP address blocks: 23.3.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:70:1c:a2:ec:66:ad:8f:73:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=b097e62d-06ec-45dc-822c-aed2652023cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:ba:53:25:d9:64:de:83:3a:41:11:df:61: 32:6b:c8:d8:09:b3:f9:77:39:b8:b9:ee:14:21:8d: b9:7f:0f:57:53:12:c0:c6:3d:63:6b:e0:8b:28:2b: 9f:c0:e8:b1:6c:97:9a:f4:14:cd:34:8b:cc:99:ee: dd:2d:d3:91:95:c6:a5:b0:66:32:a4:0b:ed:01:93: 30:a1:40:8c:d7:96:b7:4f:8f:f3:21:2d:ad:df:a0: ed:30:12:13:db:47:77:06:e0:80:8e:0b:38:69:42: 08:cf:dc:a1:8e:73:e2:bb:fb:6a:f6:84:df:21:15: 31:2e:af:9d:fa:1c:e4:c2:b5:67:00:dc:43:d0:83: a8:6a:29:b0:92:53:01:b7:f2:01:a0:b4:3c:39:9f: d6:02:4f:ca:01:06:34:53:64:ba:6d:cd:5b:f0:e9: e6:e9:ad:98:90:3b:98:38:4b:1b:70:4b:62:9d:d2: d1:81:df:0c:93:4e:f2:8b:7d:4d:a3:6a:3a:63:ea: 82:a9:04:26:00:f9:6e:4c:ce:a1:9b:0d:39:d9:09: c6:75:68:77:7d:90:b4:2d:7b:b6:6f:6e:cf:82:7e: d5:ef:43:7e:8f:a6:87:73:5f:60:f2:28:93:ac:55: 4c:df:4b:56:e9:fc:0a:2f:23:83:a8:0c:05:04:5b: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D9:2C:7B:F4:03:B2:A5:AB:67:85:BF:F6:EF:BB:8E:35:DC:AF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2b1697-d2b6-3d03-8292-78ca6df47474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8c:c1:ea:f6:8a:d8:a1:1b:c2:be:c3:9c:4d:7f:4e:0a:69: 1d:da:c2:20:1e:9e:1f:36:a2:40:67:ae:d5:bc:34:70:13:bd: a9:02:d3:06:07:19:e6:16:49:01:7f:4e:3d:aa:73:3f:20:5b: c3:1e:f3:7c:21:44:9c:a1:df:d9:fa:24:35:46:cd:85:fc:9e: da:6c:d8:d1:f8:79:2c:77:02:92:e1:41:f1:ff:0f:b9:9d:e3: 2d:eb:22:e8:dd:69:4d:a5:03:7a:b7:12:e9:a8:69:54:a1:cb: 67:e6:98:cb:6c:7b:23:34:17:43:b1:76:e9:8b:f0:d5:a8:07: cf:74:84:d0:90:76:b9:c2:a0:bd:d9:a3:45:d6:37:bf:4e:f8: c4:fc:ec:11:42:e0:cd:02:ec:62:fc:b8:a1:18:b8:0b:04:21: ed:03:8a:28:1c:7e:11:9e:e6:ae:72:8c:b2:23:cc:c8:03:ce: 3b:3f:a7:bb:0b:df:30:bf:63:0a:1b:59:5f:f5:03:c9:53:7b: 28:4e:c2:27:ee:fa:83:fd:08:36:f9:db:59:4d:4f:38:d0:e9: ed:f8:7b:96:7b:59:4d:2d:6e:b0:fd:d8:0d:10:0d:97:81:1d: c7:9e:ca:f1:a8:72:15:b4:58:63:1e:0a:af:ec:49:ba:da:eb: 18:bd:2c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXAcouxmrY9ztMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YjA5N2U2MmQtMDZlYy00NWRjLTgyMmMtYWVkMjY1MjAyM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWC6UyXZZN6DOkER32Eya8jYCbP5dzm4ue4U IY25fw9XUxLAxj1ja+CLKCufwOixbJea9BTNNIvMme7dLdORlcalsGYypAvtAZMw oUCM15a3T4/zIS2t36DtMBIT20d3BuCAjgs4aUIIz9yhjnPiu/tq9oTfIRUxLq+d +hzkwrVnANxD0IOoaimwklMBt/IBoLQ8OZ/WAk/KAQY0U2S6bc1b8Onm6a2YkDuY OEsbcEtindLRgd8Mk07yi31No2o6Y+qCqQQmAPluTM6hmw052QnGdWh3fZC0LXu2 b27Pgn7V70N+j6aHc19g8iiTrFVM30tW6fwKLyODqAwFBFuSSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7ZLHv0A7Klq2eFv/bvu4413K8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGEyYjE2OTctZDJiNi0z ZDAzLTgyOTItNzhjYTZkZjQ3NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCMwer2itihG8K+w5xNf04KaR3awiAenh82okBnrtW8NHATvakC0wYH GeYWSQF/Tj2qcz8gW8Me83whRJyh39n6JDVGzYX8ntps2NH4eSx3ApLhQfH/D7md 4y3rIujdaU2lA3q3EumoaVShy2fmmMtseyM0F0OxdumL8NWoB890hNCQdrnCoL3Z o0XWN79O+MT87BFC4M0C7GL8uKEYuAsEIe0DiigcfhGe5q5yjLIjzMgDzjs/p7sL 3zC/YwobWV/1A8lTeyhOwifu+oP9CDb521lNTzjQ6e34e5Z7WU0tbrD92A0QDZeB HceeyvGochW0WGMeCq/sSbra6xi9LKw= -----END CERTIFICATE-----Generated at Fri Apr 17 19:37:03 2026 by rpki-client