$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc3f34a2-3e57-3601-aca2-4d7c6e656a90.roa File: cc3f34a2-3e57-3601-aca2-4d7c6e656a90.roa (raw, json) Hash identifier: jyDJ63b2rahOV332gpP0QlW+DltKT3zeWfAERL/LtDo= Subject key identifier: DF:A1:45:B7:09:90:32:98:69:15:8C:EF:86:2C:86:05:06:C0:9B:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D86956F6C78A67EED1F9CBB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc3f34a2-3e57-3601-aca2-4d7c6e656a90.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.2.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:6f:6c:78:a6:7e:ed:1f:9c:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=b2344c7c-7672-49dd-acc8-89bc9bf7a030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:58:6e:7f:87:ec:f3:49:7b:51:e1:1f:b2: 80:e8:67:c4:c9:ca:41:ba:ff:65:20:03:04:f2:15: 7c:a6:5d:5d:60:ba:90:9d:b9:61:ce:52:52:98:91: b4:ce:26:5a:d1:11:a9:5b:eb:aa:1e:2f:b0:69:72: ae:f5:07:1b:2b:10:1f:0f:c5:98:32:8b:49:a4:23: 89:88:e0:f0:ac:00:76:e4:8d:8a:c3:6f:38:ee:d6: cf:01:2c:9a:ce:81:a0:1d:6f:ea:42:65:26:00:f9: e4:df:9a:57:e4:88:0d:5a:04:dc:c2:02:bd:ea:7f: bb:4c:9c:48:09:73:1c:31:15:e7:35:dd:50:2d:25: fa:e5:11:ae:d2:43:c5:38:e9:2f:b7:78:ec:78:85: 11:be:57:a0:69:e1:1c:92:50:20:68:fd:f7:c2:41: 5a:5a:e5:a5:5a:b2:53:a3:8a:d9:22:e6:00:8f:61: 13:3c:ff:74:91:fa:fb:f7:e5:3d:c6:45:f5:0f:48: ac:9c:33:5b:31:38:8d:85:d9:89:04:c4:51:4d:98: 49:ef:76:b7:87:12:ed:e2:13:ae:bf:4d:95:a3:87: 96:e1:da:4a:91:e9:b0:fe:ee:5d:3d:ac:2c:33:81: aa:0c:ed:d4:e5:b2:06:be:21:d9:df:cf:26:cf:30: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A1:45:B7:09:90:32:98:69:15:8C:EF:86:2C:86:05:06:C0:9B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc3f34a2-3e57-3601-aca2-4d7c6e656a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:14:b1:9a:c6:03:5d:90:1d:3d:d4:9e:ed:4c:80:27:72:c6: 8b:86:39:c5:f4:09:3e:8e:f8:b3:ac:40:4e:8d:51:e1:cc:70: af:e9:cd:80:52:07:86:e8:6d:0a:e4:54:e3:a4:12:7c:ba:41: 06:84:80:fd:ad:88:70:5a:da:d8:d1:1b:4c:01:38:aa:c5:6c: 3b:c1:ed:4f:f1:f1:6d:56:72:28:14:c1:98:36:0c:e6:f1:3a: 12:69:37:bf:d9:ca:79:d4:ca:d4:5f:d9:f6:8d:16:c2:17:b5: 8f:fb:b9:c2:51:f1:d2:9b:1e:8c:c0:3d:04:ef:cf:84:f9:b7: 14:22:cb:35:09:62:d6:0b:9e:94:29:b1:a9:fa:09:87:cb:d6: 3f:33:90:c8:cd:b6:3a:d9:7f:b7:43:d9:45:59:70:ad:20:6c: 4f:03:5d:b5:78:ad:b8:41:c3:4c:fa:60:0c:ed:73:4e:ca:dd: ce:ab:78:a7:66:12:f7:d4:35:3f:4a:10:42:ad:05:8c:dc:74: f3:df:93:d4:ca:6d:25:f3:c8:c8:8a:58:74:a1:dd:18:a9:25: 3d:d1:92:30:9a:e3:cc:a7:07:86:a9:29:da:2b:af:90:47:04: cb:10:fc:d2:ba:fb:4b:b2:e0:7b:c8:f6:23:cf:b9:17:c3:d3: 67:a5:35:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlW9seKZ+7R+cuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YjIzNDRjN2MtNzY3Mi00OWRkLWFjYzgtODliYzliZjdhMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc1Ybn+H7PNJe1HhH7KA6GfEycpBuv9lIAME 8hV8pl1dYLqQnblhzlJSmJG0ziZa0RGpW+uqHi+waXKu9QcbKxAfD8WYMotJpCOJ iODwrAB25I2Kw2847tbPASyazoGgHW/qQmUmAPnk35pX5IgNWgTcwgK96n+7TJxI CXMcMRXnNd1QLSX65RGu0kPFOOkvt3jseIURvlegaeEcklAgaP33wkFaWuWlWrJT o4rZIuYAj2ETPP90kfr79+U9xkX1D0isnDNbMTiNhdmJBMRRTZhJ73a3hxLt4hOu v02Vo4eW4dpKkemw/u5dPawsM4GqDO3U5bIGviHZ388mzzCWcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+hRbcJkDKYaRWM74YshgUGwJuUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2MzZjM0YTItM2U1Ny0z NjAxLWFjYTItNGQ3YzZlNjU2YTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQUsZrGA12QHT3Unu1MgCdyxouGOcX0CT6O+LOsQE6NUeHMcK/pzYBS B4bobQrkVOOkEny6QQaEgP2tiHBa2tjRG0wBOKrFbDvB7U/x8W1WcigUwZg2DObx OhJpN7/ZynnUytRf2faNFsIXtY/7ucJR8dKbHozAPQTvz4T5txQiyzUJYtYLnpQp san6CYfL1j8zkMjNtjrZf7dD2UVZcK0gbE8DXbV4rbhBw0z6YAztc07K3c6reKdm EvfUNT9KEEKtBYzcdPPfk9TKbSXzyMiKWHSh3RipJT3RkjCa48ynB4apKdorr5BH BMsQ/NK6+0uy4HvI9iPPuRfD02elNX0= -----END CERTIFICATE-----Generated at Fri Apr 17 05:05:52 2026 by rpki-client