$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa File: 9965c21a-d3d0-33de-969e-e44b520ca86a.roa (raw, json) Hash identifier: 62lhwdvIZhf+CdKchO/eFFsy5k2czZM2XRhs5Q0yc0w= Subject key identifier: 25:F4:01:54:97:55:98:9E:41:A8:28:E1:96:19:9A:61:16:1A:73:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D60E505D24EABF173C3A37300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 9299 IP address blocks: 23.44.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:05:d2:4e:ab:f1:73:c3:a3:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=23692be8-dfd9-49d3-b93f-13c2dee2dd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:9a:47:23:6d:d6:53:55:79:d6:d4:c7:73: 7d:bd:97:5d:a0:d0:43:4c:cb:df:03:a0:d5:f1:84: f4:0e:0a:26:3f:95:e1:f6:7b:43:c7:92:9e:92:35: 45:f7:98:45:5c:85:f0:8d:38:8b:ed:d6:aa:1a:69: ab:79:dc:e8:3c:38:88:9d:dc:bd:cc:73:f1:78:ce: 7e:e2:dd:2d:22:f5:f0:15:12:1b:7c:c4:9c:cd:93: 01:d5:8a:d7:89:a0:95:74:85:e7:4e:b1:1c:2a:6b: b6:fe:9f:97:32:dc:6a:6c:8a:4d:3a:fa:a5:07:6c: 34:e2:d0:1b:93:5d:ed:19:25:09:13:b0:b2:20:59: 52:b3:78:c3:ff:0e:d6:3f:3b:f3:50:d2:ce:ed:c4: 7a:6f:26:85:28:b5:02:69:8c:1a:16:7b:36:53:0a: ec:04:e8:f7:c3:5b:4c:25:02:59:8a:83:08:e4:03: d7:d0:2d:c1:70:81:60:44:7e:c1:4a:35:e0:a1:b9: 69:9f:0f:a2:27:af:ee:03:ac:4d:71:d7:6f:ed:3b: 6f:68:bb:08:e4:31:45:97:d1:19:66:2e:f5:c3:65: 40:dc:cf:12:ad:ef:cc:0a:67:3e:dd:ed:67:08:9b: 34:3b:a8:59:df:69:33:7c:d9:c0:da:5d:9e:a2:10: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F4:01:54:97:55:98:9E:41:A8:28:E1:96:19:9A:61:16:1A:73:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:23:14:89:f9:35:16:c0:11:b0:c8:1d:27:02:a4:f3:c7:82: 30:9c:bb:2e:b3:0e:d8:68:bc:ab:1c:9c:54:4f:1f:36:95:54: 14:3a:29:6d:5d:c5:cb:c6:cd:c2:f5:e8:51:7d:3c:ac:57:35: 9b:e6:28:1d:39:eb:4c:5e:89:c3:7e:95:47:a4:b7:bd:66:5c: eb:0a:01:40:17:63:07:96:a5:24:d7:cc:c0:98:6e:e8:12:99: 1a:78:38:9f:19:6b:c6:3e:b7:48:d8:78:98:d6:a8:0f:4f:fb: 67:37:ca:1b:c2:ab:e7:e7:e2:37:ed:b4:f4:e4:c8:c2:8e:e4: 5e:3d:fc:34:b1:32:69:35:6a:91:3a:29:b6:18:90:1c:3c:1c: b0:20:08:cb:5f:86:c8:61:60:f4:9b:c2:0c:bf:73:0d:0b:c3: cc:75:ca:97:f5:65:e6:fd:bb:48:67:d0:7e:e6:35:e0:c2:64: 4e:9c:96:b6:61:95:ea:84:b6:b8:48:b7:96:30:26:c6:be:41: 0e:2d:62:d8:83:b5:05:2e:8b:7f:bf:86:be:d3:14:15:37:ad: fb:89:71:18:ac:87:d0:59:9d:de:c0:ea:17:10:56:ec:fe:6a: 0b:f8:1c:50:28:37:c9:d3:e1:2e:45:df:f3:a7:c5:cd:4c:b2: 95:5f:47:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QXSTqvxc8OjcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MjM2OTJiZTgtZGZkOS00OWQzLWI5M2YtMTNjMmRlZTJkZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ+aRyNt1lNVedbUx3N9vZddoNBDTMvfA6DV 8YT0DgomP5Xh9ntDx5KekjVF95hFXIXwjTiL7daqGmmredzoPDiIndy9zHPxeM5+ 4t0tIvXwFRIbfMSczZMB1YrXiaCVdIXnTrEcKmu2/p+XMtxqbIpNOvqlB2w04tAb k13tGSUJE7CyIFlSs3jD/w7WPzvzUNLO7cR6byaFKLUCaYwaFns2UwrsBOj3w1tM JQJZioMI5APX0C3BcIFgRH7BSjXgoblpnw+iJ6/uA6xNcddv7TtvaLsI5DFFl9EZ Zi71w2VA3M8Sre/MCmc+3e1nCJs0O6hZ32kzfNnA2l2eohD0kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX0AVSXVZieQago4ZYZmmEWGnM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk2NWMyMWEtZDNkMC0z M2RlLTk2OWUtZTQ0YjUyMGNhODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgjFIn5NRbAEbDIHScCpPPHgjCcuy6zDthovKscnFRPHzaVVBQ6KW1d xcvGzcL16FF9PKxXNZvmKB0560xeicN+lUekt71mXOsKAUAXYweWpSTXzMCYbugS mRp4OJ8Za8Y+t0jYeJjWqA9P+2c3yhvCq+fn4jfttPTkyMKO5F49/DSxMmk1apE6 KbYYkBw8HLAgCMtfhshhYPSbwgy/cw0Lw8x1ypf1Zeb9u0hn0H7mNeDCZE6clrZh leqEtrhIt5YwJsa+QQ4tYtiDtQUui3+/hr7TFBU3rfuJcRish9BZnd7A6hcQVuz+ agv4HFAoN8nT4S5F3/Onxc1MspVfR0A= -----END CERTIFICATE-----Generated at Fri Apr 17 14:26:08 2026 by rpki-client