$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa File: c646d1f6-aaea-3038-bf20-421eb2a50335.roa (raw, json) Hash identifier: 6fZ8Hq8fkrEQGyKW8DYS5bwUQOmorhcpAf0ALol5hGY= Subject key identifier: A8:97:5D:F4:22:90:5B:2B:BE:07:70:E0:96:93:5A:DD:1E:6D:F3:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8695706E826C44E4DC8E3D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.3.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:70:6e:82:6c:44:e4:dc:8e:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=66556b8f-531f-43fb-9d8e-c3259ffd119f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:9e:41:2f:fc:7d:35:0e:7a:97:ad:2b:d3: 20:4f:89:40:b6:18:81:e4:e8:40:c8:7e:37:92:9d: b1:cd:e8:f8:4c:49:c2:26:e5:2c:0e:2f:63:2e:9e: f8:23:71:17:00:2a:20:d4:6a:10:1c:99:a7:f4:10: 61:5c:f2:4a:0f:c2:b9:d4:d7:6e:d5:a1:00:17:97: e8:a2:27:60:83:8c:ed:4f:5c:d4:2a:8c:c2:1a:ba: 0c:7c:ab:6b:6e:00:3d:3b:51:08:5c:67:af:db:29: 23:48:df:7e:85:17:71:fe:56:4a:1c:27:77:5d:2b: 44:7f:8b:f3:1e:d2:51:d7:d8:53:27:df:49:df:cd: b3:66:e9:e6:24:0f:99:38:3d:7a:de:9d:a0:c1:b1: 46:45:dc:22:36:69:56:36:6c:be:68:a3:aa:32:39: cd:38:93:91:05:76:8e:50:f8:91:2d:86:1f:02:70: 5d:9a:fe:03:b0:16:36:a3:96:85:6b:13:a9:dd:10: 09:55:da:2d:59:8d:5d:57:47:2c:fa:da:51:cd:86: 1b:90:2d:29:53:31:50:82:98:23:7e:72:8d:d7:4d: 5d:99:6d:dc:74:fe:99:51:56:e6:0f:98:be:82:d3: 27:29:89:f9:4a:37:48:88:d3:87:03:d6:b1:f8:4e: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:97:5D:F4:22:90:5B:2B:BE:07:70:E0:96:93:5A:DD:1E:6D:F3:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4a:fc:9d:4b:79:ca:a3:ac:29:77:7f:15:8c:38:e2:eb:8c: e5:e4:d0:99:73:fe:36:29:13:54:af:ea:09:fd:fa:4b:66:1b: 9d:6f:6f:26:c3:74:89:38:33:74:45:52:21:e4:0a:86:e6:c6: fc:d1:d2:e3:8e:38:8c:4c:9a:1c:6c:9d:09:b5:0d:e2:0b:3e: 94:a7:ea:c6:bd:60:53:0c:a0:31:c0:46:5e:4a:23:51:44:dd: 9f:30:fd:d2:0d:e1:e9:2f:dc:71:e2:57:4a:fa:2b:05:cc:b3: 01:29:45:9d:30:19:01:2d:10:8f:f9:40:80:bc:ed:54:32:e5: a3:f7:56:35:b7:4f:76:39:a4:3e:24:65:c8:b9:79:39:87:e3: b2:16:52:55:3e:de:e9:0e:2a:d3:bd:d3:8c:c6:d7:9f:63:cb: 14:fe:10:35:0f:2a:d8:e6:8a:fd:cc:ff:7e:4b:68:24:af:6e: e0:b9:2c:75:df:dd:45:df:0a:42:62:f5:68:e5:fc:df:2b:f1: 5f:3b:98:23:d4:0a:d1:a6:ca:97:af:fe:71:db:bb:ea:1d:3d: 9b:52:3b:e5:b4:69:1d:38:a1:48:d1:d0:d1:5a:0f:21:07:7e: 42:ff:67:a2:11:18:20:2e:ea:d0:64:f8:a6:8e:dc:89:55:c3: d0:1b:e1:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXBugmxE5NyOPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NjY1NTZiOGYtNTMxZi00M2ZiLTlkOGUtYzMyNTlmZmQxMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgyeQS/8fTUOepetK9MgT4lAthiB5OhAyH43 kp2xzej4TEnCJuUsDi9jLp74I3EXACog1GoQHJmn9BBhXPJKD8K51Ndu1aEAF5fo oidgg4ztT1zUKozCGroMfKtrbgA9O1EIXGev2ykjSN9+hRdx/lZKHCd3XStEf4vz HtJR19hTJ99J382zZunmJA+ZOD163p2gwbFGRdwiNmlWNmy+aKOqMjnNOJORBXaO UPiRLYYfAnBdmv4DsBY2o5aFaxOp3RAJVdotWY1dV0cs+tpRzYYbkC0pUzFQgpgj fnKN101dmW3cdP6ZUVbmD5i+gtMnKYn5SjdIiNOHA9ax+E7hKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiXXfQikFsrvgdw4JaTWt0ebfNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzY0NmQxZjYtYWFlYS0z MDM4LWJmMjAtNDIxZWIyYTUwMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFwOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBK/J1LecqjrCl3fxWMOOLrjOXk0Jlz/jYpE1Sv6gn9+ktmG51vbybD dIk4M3RFUiHkCobmxvzR0uOOOIxMmhxsnQm1DeILPpSn6sa9YFMMoDHARl5KI1FE 3Z8w/dIN4ekv3HHiV0r6KwXMswEpRZ0wGQEtEI/5QIC87VQy5aP3VjW3T3Y5pD4k Zci5eTmH47IWUlU+3ukOKtO904zG159jyxT+EDUPKtjmiv3M/35LaCSvbuC5LHXf 3UXfCkJi9Wjl/N8r8V87mCPUCtGmypev/nHbu+odPZtSO+W0aR04oUjR0NFaDyEH fkL/Z6IRGCAu6tBk+KaO3IlVw9Ab4XI= -----END CERTIFICATE-----Generated at Fri Apr 17 14:28:03 2026 by rpki-client