$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/946568a6-4d86-31c7-8985-45ec7edc8db8.roa File: 946568a6-4d86-31c7-8985-45ec7edc8db8.roa (raw, json) Hash identifier: ucn2nlEGmLPonWAnFw5g4L/oXLP44fprnzM/U2tMdks= Subject key identifier: 43:99:AE:E3:5F:6D:0F:3C:0B:7E:BF:FD:C0:6C:19:7C:45:32:52:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7A053825CBF51598A87B9000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/946568a6-4d86-31c7-8985-45ec7edc8db8.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.75.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:38:25:cb:f5:15:98:a8:7b:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=17380f6c-1164-449d-a13d-88e54048c379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:6f:08:53:4c:59:9e:dd:5e:21:ba:ec:0f: db:c7:1a:e8:00:0d:98:5b:3c:ea:fe:c0:b9:8e:e2: 29:c1:bd:d1:a1:e9:07:55:11:b0:91:f0:ea:41:55: b6:0e:c9:2f:af:62:e0:5a:d8:66:d7:16:f7:b0:ec: e2:a1:3b:18:12:ac:a2:c7:76:b4:85:58:dd:f5:6d: fc:e6:c4:7c:88:9b:7e:32:d2:f9:c4:f9:cc:98:da: 46:bf:d9:aa:95:df:7c:38:f1:53:82:7e:59:0d:64: e3:39:f8:ec:e2:46:5c:54:31:d9:b2:86:95:2a:dc: e9:5e:7a:ef:0e:76:9e:e9:cd:78:54:a4:5f:7a:da: 3f:cf:98:d1:1d:91:c0:7b:ee:b6:b9:4f:71:73:34: 9b:28:f7:4d:7d:01:0f:cf:d2:86:4a:d3:55:c4:0e: ea:d5:d3:e0:ce:b1:9a:e5:f7:06:30:96:48:af:9d: fa:fa:c7:b3:d5:72:b2:6c:22:95:8f:04:cb:cb:a6: e2:1c:71:7a:ca:e3:df:d5:c9:e4:25:bc:cd:53:37: 4b:80:07:6c:1e:dd:ff:e5:70:d5:a2:20:0b:97:68: 16:73:86:42:71:f2:d4:a3:c7:a5:1b:60:1d:44:a0: c0:9a:c2:a1:12:71:e7:b7:47:9f:4c:3c:1e:1c:c0: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:99:AE:E3:5F:6D:0F:3C:0B:7E:BF:FD:C0:6C:19:7C:45:32:52:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/946568a6-4d86-31c7-8985-45ec7edc8db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.75.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:35:ce:5a:c9:69:2e:74:a5:bc:8d:76:c0:de:19:3c:c6:21: 1a:59:e0:b0:f4:b7:4a:44:f0:21:81:02:ce:d9:d7:eb:89:1d: 98:7d:7a:c0:1b:7b:f2:9f:be:36:f9:f8:1b:53:61:1a:b0:e6: ea:e3:1e:cf:de:7e:d9:29:f6:ba:7d:c1:14:03:b4:1f:2b:61: ff:e7:c7:02:2b:f0:9a:bc:fb:ae:4e:eb:02:f4:65:b0:33:d6: 5d:6d:2c:04:dc:67:94:a4:d2:55:8b:2a:d7:f3:2d:06:61:08: ac:56:e1:2b:cc:85:68:41:07:99:74:b8:3d:47:fd:f0:91:46: 5e:c0:19:2e:4b:ae:2e:9d:fe:13:a7:f8:42:63:65:0f:b6:6c: 46:23:98:ec:53:01:11:a7:c3:c3:5b:f4:b3:26:ff:47:95:de: 1d:d8:e9:ce:da:bb:5a:ec:b8:41:5e:79:b1:b2:81:fc:a7:77: cb:a1:59:c8:0f:6c:5d:98:e4:c7:9e:39:b1:58:85:39:d2:25: 91:e9:5f:e1:32:67:da:f0:44:3b:0f:03:08:db:ee:42:89:d6: a8:f7:74:1b:1c:cf:2f:ce:e6:7a:07:2e:df:17:21:c8:5f:53: 36:a2:cf:5f:3d:ee:7c:2f:ca:77:5d:d3:e1:2a:96:67:94:ce: 75:fd:9d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTgly/UVmKh7kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MTczODBmNmMtMTE2NC00NDlkLWExM2QtODhlNTQwNDhjMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYlvCFNMWZ7dXiG67A/bxxroAA2YWzzq/sC5 juIpwb3RoekHVRGwkfDqQVW2Dskvr2LgWthm1xb3sOzioTsYEqyix3a0hVjd9W38 5sR8iJt+MtL5xPnMmNpGv9mqld98OPFTgn5ZDWTjOfjs4kZcVDHZsoaVKtzpXnrv Dnae6c14VKRfeto/z5jRHZHAe+62uU9xczSbKPdNfQEPz9KGStNVxA7q1dPgzrGa 5fcGMJZIr536+sez1XKybCKVjwTLy6biHHF6yuPf1cnkJbzNUzdLgAdsHt3/5XDV oiALl2gWc4ZCcfLUo8elG2AdRKDAmsKhEnHnt0efTDweHMAUjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOZruNfbQ88C36//cBsGXxFMlIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQ2NTY4YTYtNGQ4Ni0z MWM3LTg5ODUtNDVlYzdlZGM4ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF0t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU1zlrJaS50pbyNdsDeGTzGIRpZ4LD0t0pE8CGBAs7Z1+uJHZh9esAb e/Kfvjb5+BtTYRqw5urjHs/eftkp9rp9wRQDtB8rYf/nxwIr8Jq8+65O6wL0ZbAz 1l1tLATcZ5Sk0lWLKtfzLQZhCKxW4SvMhWhBB5l0uD1H/fCRRl7AGS5Lri6d/hOn +EJjZQ+2bEYjmOxTARGnw8Nb9LMm/0eV3h3Y6c7au1rsuEFeebGygfynd8uhWcgP bF2Y5MeeObFYhTnSJZHpX+EyZ9rwRDsPAwjb7kKJ1qj3dBsczy/O5noHLt8XIchf Uzaiz1897nwvyndd0+EqlmeUznX9nfg= -----END CERTIFICATE-----Generated at Fri Apr 17 13:17:10 2026 by rpki-client