$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f467909-4627-345f-9fd1-f01ecd751e58.roa File: 9f467909-4627-345f-9fd1-f01ecd751e58.roa (raw, json) Hash identifier: kly2iWYhHSCFgsKcZ88r73gYT/17cuMA8/T9zSwEfNg= Subject key identifier: E6:52:F7:D6:FF:6B:CE:B8:2F:3C:EB:5E:FA:A2:5C:19:F9:EA:B4:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D60E50428BBE7E63C92727460 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f467909-4627-345f-9fd1-f01ecd751e58.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.198.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:04:28:bb:e7:e6:3c:92:72:74:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=6b2e9f8a-11b0-485a-b944-f2b1f8247784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:08:8d:63:e3:7d:2e:8a:77:58:20:c1:5b: ca:73:c5:4f:54:c6:db:eb:cd:c6:11:e7:da:87:d4: d7:4b:88:c9:d1:eb:40:d5:83:7b:bd:47:89:d5:3b: 40:56:82:3a:53:8b:8f:85:10:0c:83:d4:fb:21:1c: 75:12:f1:4d:57:66:1f:f6:f6:e5:7a:f6:ce:b0:c6: aa:8c:f3:a8:cd:1c:e5:13:98:7c:62:2c:92:d5:78: 9c:af:82:05:18:46:75:d2:99:a0:9a:3f:63:d2:d9: 74:a5:09:7d:56:c7:d2:4f:a7:74:b4:ff:00:ea:cb: 95:a6:fe:3e:88:7a:18:3f:a1:8d:09:91:e8:b7:9b: 5c:0c:9a:41:0d:98:37:74:99:10:94:5e:33:b7:91: 3e:a5:ca:b5:8c:a7:71:a0:93:59:7f:3e:1a:fc:cb: 49:6d:a8:d0:a6:9a:fe:4a:bd:dc:ee:ac:57:5e:4f: f2:a1:b6:fb:61:7c:7e:d3:08:21:dc:4f:b1:ba:81: c8:e0:7b:8c:6e:f9:0d:5a:15:57:71:a5:46:bc:12: 6c:b6:47:e0:cf:c2:0d:47:eb:8d:c2:05:0d:db:8c: b8:67:84:47:b8:7b:a0:ec:38:b3:b7:f3:b6:95:06: d5:20:8b:5c:10:37:62:36:46:82:14:44:69:66:63: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:52:F7:D6:FF:6B:CE:B8:2F:3C:EB:5E:FA:A2:5C:19:F9:EA:B4:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f467909-4627-345f-9fd1-f01ecd751e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5a:29:2a:3e:c5:e9:a5:cc:c6:73:96:e7:44:b6:03:3f:c6: de:64:14:b7:97:d9:80:25:57:4d:de:ca:08:b8:f9:23:29:36: 57:21:b5:3c:4d:87:99:3d:69:70:5b:59:ef:7c:2e:ff:a9:d2: 98:8d:ee:52:ab:58:2a:16:59:90:d8:1f:9d:1b:e2:fc:fb:d5: 75:19:ce:d8:3e:fa:5e:01:aa:b1:a8:a6:4e:df:1c:6c:e7:14: c0:19:1c:fc:b3:84:fb:a6:45:63:b1:78:1a:e9:78:58:31:20: 4f:05:08:9a:20:28:7c:c7:12:8f:e7:73:d1:fa:9c:29:f3:24: b5:15:a5:73:ee:b4:74:54:77:17:de:ed:bc:d5:6f:91:75:fd: 01:db:29:08:d7:ef:0b:c1:be:22:ed:be:5a:f2:06:ce:ea:a3: fe:f2:8e:46:e9:04:5f:49:c4:93:d3:53:0f:f0:22:d8:ba:09: 0a:3d:4d:aa:22:5f:cf:9a:d6:9c:48:23:c3:b9:14:49:03:2e: 45:8b:8e:5c:b2:27:36:fa:ba:3e:c3:9e:74:d9:a6:e6:72:80: bd:43:96:01:cb:62:8e:fb:e4:99:f1:7e:42:ee:55:9f:5c:12: 29:06:2e:35:5e:9f:45:1e:fc:8b:66:3a:38:35:77:a3:fa:13: 74:74:bb:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QQou+fmPJJydGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NmIyZTlmOGEtMTFiMC00ODVhLWI5NDQtZjJiMWY4MjQ3Nzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwasIjWPjfS6Kd1ggwVvKc8VPVMbb683GEefa h9TXS4jJ0etA1YN7vUeJ1TtAVoI6U4uPhRAMg9T7IRx1EvFNV2Yf9vblevbOsMaq jPOozRzlE5h8YiyS1Xicr4IFGEZ10pmgmj9j0tl0pQl9VsfST6d0tP8A6suVpv4+ iHoYP6GNCZHot5tcDJpBDZg3dJkQlF4zt5E+pcq1jKdxoJNZfz4a/MtJbajQppr+ Sr3c7qxXXk/yobb7YXx+0wgh3E+xuoHI4HuMbvkNWhVXcaVGvBJstkfgz8INR+uN wgUN24y4Z4RHuHug7Dizt/O2lQbVIItcEDdiNkaCFERpZmPCHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZS99b/a864LzzrXvqiXBn56rTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWY0Njc5MDktNDYyNy0z NDVmLTlmZDEtZjAxZWNkNzUxZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8b8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFaKSo+xemlzMZzludEtgM/xt5kFLeX2YAlV03eygi4+SMpNlchtTxN h5k9aXBbWe98Lv+p0piN7lKrWCoWWZDYH50b4vz71XUZztg++l4BqrGopk7fHGzn FMAZHPyzhPumRWOxeBrpeFgxIE8FCJogKHzHEo/nc9H6nCnzJLUVpXPutHRUdxfe 7bzVb5F1/QHbKQjX7wvBviLtvlryBs7qo/7yjkbpBF9JxJPTUw/wIti6CQo9Taoi X8+a1pxII8O5FEkDLkWLjlyyJzb6uj7DnnTZpuZygL1DlgHLYo775JnxfkLuVZ9c EikGLjVen0Ue/ItmOjg1d6P6E3R0u7w= -----END CERTIFICATE-----Generated at Sat Apr 18 00:06:00 2026 by rpki-client