$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/741a0961-2984-301a-89be-a8d3bf403220.roa File: 741a0961-2984-301a-89be-a8d3bf403220.roa (raw, json) Hash identifier: lcOEnkzApOP7Ts4nTvIrtyX1HqnSfIDC3fUt9hPtILo= Subject key identifier: 34:DB:44:08:BB:81:C6:57:71:83:C2:90:30:CA:62:CF:0E:0C:AA:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8695620587D3BB823EE9A780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/741a0961-2984-301a-89be-a8d3bf403220.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 20940 IP address blocks: 23.1.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:62:05:87:d3:bb:82:3e:e9:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=85e4f163-beed-4801-bc74-42ea25106760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:d3:2e:dc:d5:b4:b8:27:16:0c:be:77:31: fb:40:83:93:04:c1:b6:21:77:9c:24:7e:89:a6:07: a8:40:62:ac:50:57:43:f5:4a:89:e2:01:ea:06:df: 5a:37:4c:63:b5:6b:63:2d:37:4d:ab:11:f3:01:ea: 15:15:9c:1a:28:e1:ac:83:ca:35:12:82:c1:56:32: cb:9b:bd:d8:46:64:50:32:d9:5f:a1:24:b5:ca:4c: 4e:2d:e5:42:0c:50:e9:2e:85:35:7e:b8:c3:33:41: ca:24:77:bf:34:d3:8d:54:78:35:c9:c1:11:b9:88: 3c:6b:e9:37:52:6d:e8:22:da:55:01:a4:62:33:1e: 72:0f:ab:0d:3b:9b:55:18:76:17:cd:05:d1:fb:66: 01:50:52:01:fe:40:31:d4:ff:e0:50:6e:c9:f4:f8: 3a:43:a4:00:0c:94:72:1c:c2:77:94:57:7c:c8:14: e7:b0:8a:da:3b:b9:f6:0a:52:ba:62:02:d7:34:1e: dd:27:4a:6b:34:1f:84:6d:98:d5:ba:6a:e9:32:60: 5d:46:74:91:9d:fe:6a:df:7e:d6:ba:de:f8:38:8e: 6d:fc:30:f1:2e:77:51:4e:9b:bb:31:82:14:f8:e8: 08:3f:7e:f2:52:97:8f:dd:bf:c9:aa:24:9d:f1:ec: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DB:44:08:BB:81:C6:57:71:83:C2:90:30:CA:62:CF:0E:0C:AA:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/741a0961-2984-301a-89be-a8d3bf403220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:06:9b:d0:ed:10:ba:d4:16:ab:49:58:ec:16:6f:d8:ee:de: 89:c3:9a:1e:32:e8:1b:bf:f7:3a:ac:66:7e:86:ef:16:3a:2e: d5:98:6a:e8:81:bc:12:c6:35:f9:58:a7:6e:71:fc:e7:6f:de: bd:8e:b9:97:74:b7:9b:e8:f2:c9:25:c4:63:fa:71:02:10:06: 03:c7:fd:6e:71:6c:5a:38:a5:90:80:10:f2:4d:b7:10:c8:9b: ec:2e:9f:3f:89:9c:42:46:82:d6:a7:66:1b:ff:08:92:06:73: ec:51:9c:d1:1e:51:40:0b:59:bb:5b:96:01:1e:a7:c8:e9:52: 16:bb:c4:12:6e:85:4a:18:a0:6b:e1:e8:45:ad:ca:ff:92:e6: 49:8b:28:6e:a3:4b:45:dc:b6:bf:d0:a7:59:22:ad:7a:80:4f: 15:86:e0:22:df:b2:63:c1:97:fa:c4:ee:9c:26:8a:9a:f6:c8: 68:da:a4:54:6a:e4:ad:a7:c1:d5:ee:0c:aa:8a:09:38:37:cf: 12:00:54:9f:cc:a8:97:0d:9a:1c:66:b3:e1:3e:cd:b5:2d:09: 86:e3:ec:c4:99:f4:a2:c3:c0:0e:02:ec:3c:89:b0:89:15:95: e6:98:1c:db:3b:08:7a:32:33:4c:0c:30:1e:9c:f1:5d:35:c6: e5:ff:18:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlWIFh9O7gj7pp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ODVlNGYxNjMtYmVlZC00ODAxLWJjNzQtNDJlYTI1MTA2NzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneHTLtzVtLgnFgy+dzH7QIOTBMG2IXecJH6J pgeoQGKsUFdD9UqJ4gHqBt9aN0xjtWtjLTdNqxHzAeoVFZwaKOGsg8o1EoLBVjLL m73YRmRQMtlfoSS1ykxOLeVCDFDpLoU1frjDM0HKJHe/NNONVHg1ycERuYg8a+k3 Um3oItpVAaRiMx5yD6sNO5tVGHYXzQXR+2YBUFIB/kAx1P/gUG7J9Pg6Q6QADJRy HMJ3lFd8yBTnsIraO7n2ClK6YgLXNB7dJ0prNB+EbZjVumrpMmBdRnSRnf5q337W ut74OI5t/DDxLndRTpu7MYIU+OgIP37yUpeP3b/JqiSd8ezCKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTbRAi7gcZXcYPCkDDKYs8ODKpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzQxYTA5NjEtMjk4NC0z MDFhLTg5YmUtYThkM2JmNDAzMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Gm9DtELrUFqtJWOwWb9ju3onDmh4y6Bu/9zqsZn6G7xY6LtWYauiB vBLGNflYp25x/Odv3r2OuZd0t5vo8sklxGP6cQIQBgPH/W5xbFo4pZCAEPJNtxDI m+wunz+JnEJGgtanZhv/CJIGc+xRnNEeUUALWbtblgEep8jpUha7xBJuhUoYoGvh 6EWtyv+S5kmLKG6jS0Xctr/Qp1kirXqATxWG4CLfsmPBl/rE7pwmipr2yGjapFRq 5K2nwdXuDKqKCTg3zxIAVJ/MqJcNmhxms+E+zbUtCYbj7MSZ9KLDwA4C7DyJsIkV leaYHNs7CHoyM0wMMB6c8V01xuX/GPk= -----END CERTIFICATE-----Generated at Sat Apr 18 03:24:39 2026 by rpki-client