$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b157fe31-1124-3515-b8f4-9a4366f6f011.roa File: b157fe31-1124-3515-b8f4-9a4366f6f011.roa (raw, json) Hash identifier: mw8MRux34obp/dI9MZr4yG4ByBWK5MWm6tlz6KAwn78= Subject key identifier: 5A:EB:CA:48:6C:9E:E0:5C:A5:78:19:EF:90:0E:B3:2E:B4:73:91:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A9A33FA9BF56B469DA800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b157fe31-1124-3515-b8f4-9a4366f6f011.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.44.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9a:33:fa:9b:f5:6b:46:9d:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=407da9a1-edda-4c0a-ab1c-c5afda646420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5b:a7:43:0d:c7:62:b4:35:03:cb:c1:9e:d1: c5:17:fd:d4:af:36:b0:29:a4:72:54:5e:49:dd:e5: d5:2f:97:c4:53:f8:ba:5a:be:97:13:a8:6f:ab:42: ba:40:28:13:b5:45:5b:9a:3d:2b:9f:29:7c:8b:f7: cb:9d:00:ff:51:13:01:f2:7d:4f:85:cf:5b:1b:9f: f7:2b:90:72:a5:26:d4:b5:6e:22:e6:e3:63:eb:96: 6e:b2:f9:8e:2b:13:c9:cb:9e:6c:ad:c9:e5:96:1c: 3e:d4:69:07:e2:1f:1b:00:08:9e:bf:9f:28:d4:04: 0a:cc:f7:88:cb:11:3d:be:e4:11:ab:9d:6a:be:14: fe:c1:5f:68:00:49:0d:4d:fa:b0:a1:1a:41:ff:5d: 4a:f5:60:35:75:5b:db:4f:93:b9:b5:5c:d8:b7:75: e0:cd:7f:0b:1d:02:54:bc:ef:2f:13:f4:ec:1b:7b: a1:e4:8c:09:ff:ca:48:24:d9:74:1a:d5:76:b5:2e: 37:94:d3:eb:b1:67:3d:43:27:d0:66:60:dc:57:de: ca:b8:f5:ac:44:e6:e9:bc:45:61:25:c8:65:1a:2a: f2:05:da:1f:db:70:a7:c0:15:c6:44:59:af:59:49: 80:99:82:e0:5a:b0:56:5d:c0:83:88:d0:44:1f:8b: dd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EB:CA:48:6C:9E:E0:5C:A5:78:19:EF:90:0E:B3:2E:B4:73:91:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b157fe31-1124-3515-b8f4-9a4366f6f011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:87:eb:04:3d:09:60:21:7d:08:34:06:1e:86:77:b1:fc:00: 3b:52:3e:5d:8c:d2:00:74:58:cf:ea:36:12:69:20:e7:29:88: 09:3a:79:2a:56:c9:0c:22:96:67:36:97:82:f6:a4:cd:73:99: 07:04:78:3e:31:5d:d0:1e:fe:c4:1a:45:6f:9f:4d:12:5d:31: 3e:a9:8c:e2:ae:61:d9:9b:17:4d:97:86:87:27:05:ee:b9:a8: fb:d8:08:8c:a8:a1:33:40:4a:e2:c0:19:1c:e0:5d:ec:89:11: 15:ae:e8:da:6f:6f:35:cc:2c:28:76:da:8e:f9:4f:81:37:fe: b9:3b:b9:d8:cd:b6:c3:99:91:a0:91:90:77:61:46:24:bd:76: 0e:f6:8b:2b:75:4c:6e:15:7b:ba:d2:3d:7b:77:4b:40:71:14: ed:c1:3c:08:25:85:0e:13:64:64:a5:e1:4c:3f:13:23:56:5f: 33:98:e8:fa:4f:5d:5d:35:4d:77:ca:3d:77:7f:6f:35:ad:a6: f9:dd:bd:76:2a:b4:59:a1:ca:7b:8a:84:2b:cb:af:76:b3:88: d3:30:76:b6:19:ed:b4:5a:87:54:9e:ab:5e:16:45:e5:b8:e8: 37:14:5d:ce:0d:44:87:c6:25:73:39:ab:63:13:d3:1b:c5:e2: 2f:6f:ff:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpoz+pv1a0adqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NDA3ZGE5YTEtZWRkYS00YzBhLWFiMWMtYzVhZmRhNjQ2NDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFunQw3HYrQ1A8vBntHFF/3UrzawKaRyVF5J 3eXVL5fEU/i6Wr6XE6hvq0K6QCgTtUVbmj0rnyl8i/fLnQD/URMB8n1Phc9bG5/3 K5BypSbUtW4i5uNj65ZusvmOKxPJy55srcnllhw+1GkH4h8bAAiev58o1AQKzPeI yxE9vuQRq51qvhT+wV9oAEkNTfqwoRpB/11K9WA1dVvbT5O5tVzYt3XgzX8LHQJU vO8vE/TsG3uh5IwJ/8pIJNl0GtV2tS43lNPrsWc9QyfQZmDcV97KuPWsRObpvEVh JchlGiryBdof23CnwBXGRFmvWUmAmYLgWrBWXcCDiNBEH4vdEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrrykhsnuBcpXgZ75AOsy60c5EqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjE1N2ZlMzEtMTEyNC0z NTE1LWI4ZjQtOWE0MzY2ZjZmMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKH6wQ9CWAhfQg0Bh6Gd7H8ADtSPl2M0gB0WM/qNhJpIOcpiAk6eSpW yQwilmc2l4L2pM1zmQcEeD4xXdAe/sQaRW+fTRJdMT6pjOKuYdmbF02XhocnBe65 qPvYCIyooTNASuLAGRzgXeyJERWu6NpvbzXMLCh22o75T4E3/rk7udjNtsOZkaCR kHdhRiS9dg72iyt1TG4Ve7rSPXt3S0BxFO3BPAglhQ4TZGSl4Uw/EyNWXzOY6PpP XV01TXfKPXd/bzWtpvndvXYqtFmhynuKhCvLr3aziNMwdrYZ7bRah1Seq14WReW4 6DcUXc4NRIfGJXM5q2MT0xvF4i9v/1Y= -----END CERTIFICATE-----Generated at Fri Apr 17 04:02:19 2026 by rpki-client