$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5491c72a-2af9-3953-bb10-5fe66052634a.roa File: 5491c72a-2af9-3953-bb10-5fe66052634a.roa (raw, json) Hash identifier: CIqJjnpRVwmhUOkaLiryrVflugfEM9m936Z4xzKprvE= Subject key identifier: B3:64:BA:40:36:C3:C8:75:3A:06:5E:90:C8:D7:C1:21:5A:DC:96:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D869561EDA1D98ACC9AB858BC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5491c72a-2af9-3953-bb10-5fe66052634a.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.1.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:61:ed:a1:d9:8a:cc:9a:b8:58:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=81ac0b0c-2246-4e03-8502-13c13f62ce91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3a:b3:f9:d1:70:af:f3:8d:b1:fa:d5:b3:53: 4c:29:db:3c:4d:69:64:e0:66:54:00:78:d4:be:e8: e0:f1:2b:f3:6f:b5:cb:dd:d8:dc:e1:64:6f:5e:4e: 61:49:0b:4d:c8:93:b5:85:9e:54:fb:97:89:b8:81: bf:87:59:38:20:de:eb:8e:fd:28:c4:ac:e4:41:cf: b6:b7:29:d7:e9:91:a1:98:bd:2c:e0:53:9b:52:8e: 02:91:bb:26:a2:6c:a9:64:d1:cc:23:7f:70:82:b8: e3:60:a3:d8:08:d0:33:22:17:71:6f:70:a4:c1:59: 01:b3:de:c4:6a:4c:fe:aa:e3:ea:d6:0e:39:dc:d9: ee:62:22:8e:81:2e:98:dc:9f:70:bf:f6:c0:21:d9: 7d:e2:73:27:4e:31:f1:82:58:3e:9f:63:33:e9:27: 7e:81:f7:32:aa:99:12:65:43:16:6c:b8:6f:de:2a: e2:6d:da:8e:17:47:7f:e7:c8:dc:4a:18:8e:d9:46: 44:96:26:fc:be:46:5d:fe:3e:12:5e:22:86:7e:24: 40:82:61:e5:fd:23:ba:f9:8b:38:c8:b1:72:bc:8f: f8:af:95:df:e4:f2:d6:3f:52:b5:b5:21:26:34:c9: 5e:ea:9d:f3:a8:06:e0:55:52:cb:da:0a:f7:7a:2b: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:64:BA:40:36:C3:C8:75:3A:06:5E:90:C8:D7:C1:21:5A:DC:96:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5491c72a-2af9-3953-bb10-5fe66052634a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:87:f8:84:44:21:c7:25:3b:f0:fb:58:5c:97:58:71:fd:09: 70:47:0b:36:af:5b:98:98:56:e1:05:7c:b0:74:51:e5:bd:e3: e9:b8:42:a8:97:bb:09:dd:22:91:22:2a:2d:20:a9:9c:f0:72: 6a:8f:5f:e4:69:63:c6:94:b7:55:88:e1:97:88:d8:91:b3:db: 1a:ff:eb:22:8a:a3:7b:85:8c:11:d1:75:f5:7f:1c:fa:2b:05: 0e:9e:5d:3c:71:e0:0f:3d:a2:f2:a6:e4:e5:bc:81:c3:c0:e5: 68:61:f0:41:23:94:6f:aa:10:ae:f4:19:bd:50:c4:e2:54:7b: b5:22:13:31:8c:3b:6c:d5:7a:13:0f:b6:dc:63:e8:ef:51:8c: ba:76:e7:b7:9f:54:80:6a:fb:c7:16:f1:fc:f1:62:2d:f6:a5: 76:fb:50:73:54:34:29:a4:6e:f1:5c:38:b9:67:5f:8b:81:05: 32:97:10:82:a0:34:a5:b5:0e:8e:03:24:4e:00:fc:7f:48:4b: b1:19:69:0d:eb:65:6b:e8:ac:cb:b5:14:09:24:1e:7b:aa:b7: 4c:cb:6d:4a:3c:8b:e6:36:c1:11:45:b0:ab:06:85:1a:33:44: 1b:53:bd:93:a0:65:89:e3:34:47:ce:76:8c:eb:af:09:2a:fe: ad:4f:73:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlWHtodmKzJq4WLwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ODFhYzBiMGMtMjI0Ni00ZTAzLTg1MDItMTNjMTNmNjJjZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDqz+dFwr/ONsfrVs1NMKds8TWlk4GZUAHjU vujg8Svzb7XL3djc4WRvXk5hSQtNyJO1hZ5U+5eJuIG/h1k4IN7rjv0oxKzkQc+2 tynX6ZGhmL0s4FObUo4CkbsmomypZNHMI39wgrjjYKPYCNAzIhdxb3CkwVkBs97E akz+quPq1g453NnuYiKOgS6Y3J9wv/bAIdl94nMnTjHxglg+n2Mz6Sd+gfcyqpkS ZUMWbLhv3iribdqOF0d/58jcShiO2UZElib8vkZd/j4SXiKGfiRAgmHl/SO6+Ys4 yLFyvI/4r5Xf5PLWP1K1tSEmNMle6p3zqAbgVVLL2gr3eitj+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNkukA2w8h1OgZekMjXwSFa3JbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQ5MWM3MmEtMmFmOS0z OTUzLWJiMTAtNWZlNjYwNTI2MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqH+IREIcclO/D7WFyXWHH9CXBHCzavW5iYVuEFfLB0UeW94+m4QqiX uwndIpEiKi0gqZzwcmqPX+RpY8aUt1WI4ZeI2JGz2xr/6yKKo3uFjBHRdfV/HPor BQ6eXTxx4A89ovKm5OW8gcPA5Whh8EEjlG+qEK70Gb1QxOJUe7UiEzGMO2zVehMP ttxj6O9RjLp257efVIBq+8cW8fzxYi32pXb7UHNUNCmkbvFcOLlnX4uBBTKXEIKg NKW1Do4DJE4A/H9IS7EZaQ3rZWvorMu1FAkkHnuqt0zLbUo8i+Y2wRFFsKsGhRoz RBtTvZOgZYnjNEfOdozrrwkq/q1Pc1A= -----END CERTIFICATE-----Generated at Fri Apr 17 16:51:29 2026 by rpki-client