$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/563a3c83-085a-3d83-99e9-efd7f1997a48.roa File: 563a3c83-085a-3d83-99e9-efd7f1997a48.roa (raw, json) Hash identifier: WkEW6aRq/xJpZl9F7UbHyf57jieyzg0i8cGgap5Xu2E= Subject key identifier: C4:D0:5B:49:29:79:E3:94:C7:3C:DE:C1:1C:48:28:FF:29:14:C7:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D86956F9B9ACCA3EDA3D182CB Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/563a3c83-085a-3d83-99e9-efd7f1997a48.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.2.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:6f:9b:9a:cc:a3:ed:a3:d1:82:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=c44df769-6260-44f7-a2d6-ce7c61578885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:17:73:2e:be:4c:10:70:28:57:e0:1d:de: fd:d0:eb:f2:c6:9f:e4:ce:39:94:8f:ab:dd:8f:34: c3:a0:21:a9:1e:23:e9:db:f5:ee:c1:b3:d9:74:c8: 5d:40:f9:6c:fd:c1:fe:f3:c1:80:e6:90:e3:8d:07: ae:61:c2:d0:7e:72:76:2f:91:bf:cf:8d:75:a2:44: b9:27:67:59:91:3f:31:41:e7:c6:13:8e:1a:ee:49: 05:55:78:b0:38:fe:6d:e0:68:40:4e:c7:45:95:48: 2b:89:d5:a0:4c:8c:e7:49:23:7b:88:73:69:c4:4f: 28:85:59:0f:13:95:3d:26:16:6f:24:b5:a0:cd:0b: be:42:c5:9e:d0:3f:28:25:bb:22:2f:ec:c8:de:a1: 08:f7:fa:65:71:ab:b1:24:21:65:8b:1a:7f:30:5f: 1c:81:39:64:1a:50:b2:d4:9f:02:c8:e3:ca:70:1b: a2:69:81:c0:93:67:3e:45:0c:c6:9f:9a:11:32:70: 72:7a:82:95:a6:3b:65:e8:67:0b:5b:09:34:4d:7a: ee:b5:04:b0:f1:c4:24:f8:83:20:69:52:2d:32:ae: c3:19:2d:14:56:1f:a3:11:ae:27:f4:cb:c4:34:34: be:2c:91:5f:f9:e1:24:03:13:15:bb:74:5f:05:21: b0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D0:5B:49:29:79:E3:94:C7:3C:DE:C1:1C:48:28:FF:29:14:C7:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/563a3c83-085a-3d83-99e9-efd7f1997a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d6:76:f5:fe:ea:5e:61:15:4e:33:f4:21:67:b3:57:2a:ff: 3a:b8:61:f6:ba:df:73:6c:59:23:50:23:48:91:fd:ad:c5:00: 17:4a:6a:5e:29:07:ab:52:8a:13:ae:96:7b:32:5c:86:f6:fc: d4:18:6c:cb:7a:17:7c:f1:6c:95:c0:9b:7c:6b:45:80:63:ab: bb:09:f4:d9:49:11:af:6c:60:9c:16:e7:36:f9:82:c8:cd:46: 6c:fd:c5:8c:4d:fa:0d:19:be:3e:eb:d1:b2:e9:c5:30:e9:d6: c0:23:72:47:e1:b9:08:bd:88:7f:28:9e:6b:ae:ad:f2:ec:5f: 88:98:3c:10:ff:2e:54:37:31:87:30:a4:8e:b7:13:a3:af:43: c2:3e:cd:8b:44:f9:d0:fd:14:46:30:24:cf:bf:f5:4c:3f:54: aa:d3:81:5d:79:d8:3d:79:16:bd:ca:33:a5:a8:f5:44:a4:5b: 7b:bf:ca:a4:da:7f:b8:1b:f0:3d:33:fa:d5:d7:84:80:72:81: c5:2c:f3:b6:29:5e:d0:c2:ea:9e:33:e6:a6:fb:70:fc:db:28: 9e:01:fc:50:a4:3f:e8:1e:b9:3c:fb:2a:5d:23:00:51:ea:39: bd:cc:f1:db:fb:4e:8c:49:a4:c5:e2:9e:70:3b:07:a9:5d:1a: d9:35:78:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlW+bmsyj7aPRgsswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YzQ0ZGY3NjktNjI2MC00NGY3LWEyZDYtY2U3YzYxNTc4ODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGYXcy6+TBBwKFfgHd790Ovyxp/kzjmUj6vd jzTDoCGpHiPp2/XuwbPZdMhdQPls/cH+88GA5pDjjQeuYcLQfnJ2L5G/z411okS5 J2dZkT8xQefGE44a7kkFVXiwOP5t4GhATsdFlUgridWgTIznSSN7iHNpxE8ohVkP E5U9JhZvJLWgzQu+QsWe0D8oJbsiL+zI3qEI9/plcauxJCFlixp/MF8cgTlkGlCy 1J8CyOPKcBuiaYHAk2c+RQzGn5oRMnByeoKVpjtl6GcLWwk0TXrutQSw8cQk+IMg aVItMq7DGS0UVh+jEa4n9MvENDS+LJFf+eEkAxMVu3RfBSGwAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTQW0kpeeOUxzzewRxIKP8pFMcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTYzYTNjODMtMDg1YS0z ZDgzLTk5ZTktZWZkN2YxOTk3YTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFwJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrWdvX+6l5hFU4z9CFns1cq/zq4Yfa633NsWSNQI0iR/a3FABdKal4p B6tSihOulnsyXIb2/NQYbMt6F3zxbJXAm3xrRYBjq7sJ9NlJEa9sYJwW5zb5gsjN Rmz9xYxN+g0Zvj7r0bLpxTDp1sAjckfhuQi9iH8onmuurfLsX4iYPBD/LlQ3MYcw pI63E6OvQ8I+zYtE+dD9FEYwJM+/9Uw/VKrTgV152D15Fr3KM6Wo9USkW3u/yqTa f7gb8D0z+tXXhIBygcUs87YpXtDC6p4z5qb7cPzbKJ4B/FCkP+geuTz7Kl0jAFHq Ob3M8dv7ToxJpMXinnA7B6ldGtk1eIY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:06:19 2026 by rpki-client