$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa File: d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa (raw, json) Hash identifier: CESOS99UzzofAOKr3pIUMoJDRsTz7P+VGVh4Q473anQ= Subject key identifier: A0:86:28:A2:60:AE:89:50:4E:8C:A9:50:15:EA:7E:C4:12:EB:C2:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D75D54558A11DF030B7866600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 20940 IP address blocks: 23.67.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:45:58:a1:1d:f0:30:b7:86:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=b651a5c5-f23a-442f-8f02-98c1967e9b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:d9:2f:80:d4:ab:3a:b1:ed:10:23:65:60: 8c:51:5e:9f:93:7e:ad:8c:f8:8f:84:a5:dc:b4:9a: 9c:40:68:83:00:d9:25:78:f4:b1:0c:f0:9d:d9:38: 4d:d3:7f:2e:ed:3d:a3:74:69:cd:3c:5d:a9:b3:ab: ed:97:57:fe:bd:53:54:4c:9b:48:6b:30:c6:7e:70: ef:73:d9:9b:fa:61:e2:a9:2a:99:88:38:f2:2e:4a: e2:7a:fa:3b:ea:c1:7b:ae:a5:41:86:5e:e7:74:20: 48:66:88:40:ba:13:f5:36:c7:02:41:20:6e:b8:ef: 49:79:6f:f7:3c:ec:0a:e6:5a:07:85:64:f2:46:b9: 66:f1:c3:d1:97:d3:2a:23:79:8a:84:d6:87:e9:8e: 90:3f:a6:a0:a3:14:31:10:77:e1:30:b0:48:e2:dc: 1e:89:1e:cc:8c:47:32:c7:27:17:23:38:a6:4c:87: 26:84:9a:a1:67:6b:48:34:91:ec:42:9c:1e:d9:4c: a7:8f:2b:b0:46:42:bc:84:68:82:ee:63:c6:90:44: 74:b2:e9:74:fd:ab:7e:48:97:4d:4d:a3:90:a0:f7: 98:7d:77:5b:63:d4:5c:ce:2b:2d:8c:88:ab:b0:6c: 37:38:d6:dd:94:50:65:ae:14:16:20:b8:4a:3d:b7: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:86:28:A2:60:AE:89:50:4E:8C:A9:50:15:EA:7E:C4:12:EB:C2:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:8c:57:07:99:37:3f:55:eb:94:9d:2b:b0:7d:1d:57:45:a5: 92:2d:24:0c:c0:86:27:06:97:6b:80:e4:b4:84:57:c1:ff:60: d2:7c:00:39:1c:e8:7a:fa:34:3b:18:56:2b:f3:06:f8:ae:6d: 84:66:32:bf:9c:b0:47:1c:c1:cc:6b:93:f0:af:fe:d0:51:40: f0:c0:3e:d7:76:a8:c5:ff:33:34:ab:16:86:9c:83:f3:6d:f5: 78:b7:ce:94:b7:2a:14:65:03:75:66:9e:75:3b:42:17:cd:d5: ba:03:cc:22:21:6e:97:c3:d7:a7:be:ab:50:24:2a:ca:23:e3: a0:61:6e:0e:d6:14:14:fd:cc:48:58:af:fc:46:e2:40:7c:aa: 7b:56:5f:5d:06:43:b8:b5:78:c8:76:6a:f1:6a:0c:60:64:b9: a8:f7:d2:a7:3f:3d:0f:d9:ce:f2:13:e4:ca:f7:75:02:d8:bd: 3e:04:00:9c:c7:26:5c:78:bb:ee:df:fb:36:64:7c:26:f1:f4: 1b:a9:a7:c8:b8:6b:e0:1a:dc:bf:bf:2f:7f:4c:56:19:2d:88: 35:67:b9:05:23:f5:74:c3:a5:6e:57:5c:8c:9e:74:6c:cf:a3: 70:cf:90:34:3e:29:15:2b:64:42:90:91:70:1d:d4:97:cf:23: 7f:ca:66:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111UVYoR3wMLeGZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk YjY1MWE1YzUtZjIzYS00NDJmLThmMDItOThjMTk2N2U5YjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcLZL4DUqzqx7RAjZWCMUV6fk36tjPiPhKXc tJqcQGiDANklePSxDPCd2ThN038u7T2jdGnNPF2ps6vtl1f+vVNUTJtIazDGfnDv c9mb+mHiqSqZiDjyLkrievo76sF7rqVBhl7ndCBIZohAuhP1NscCQSBuuO9JeW/3 POwK5loHhWTyRrlm8cPRl9MqI3mKhNaH6Y6QP6agoxQxEHfhMLBI4tweiR7MjEcy xycXIzimTIcmhJqhZ2tINJHsQpwe2UynjyuwRkK8hGiC7mPGkER0sul0/at+SJdN TaOQoPeYfXdbY9RczistjIirsGw3ONbdlFBlrhQWILhKPbfMNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCGKKJgrolQToypUBXqfsQS68LXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVjMmM5NzEtODk0ZS0z OGNlLWI4ODItNGU2NWUyZWQwYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaMVweZNz9V65SdK7B9HVdFpZItJAzAhicGl2uA5LSEV8H/YNJ8ADkc 6Hr6NDsYVivzBviubYRmMr+csEccwcxrk/Cv/tBRQPDAPtd2qMX/MzSrFoacg/Nt 9Xi3zpS3KhRlA3VmnnU7QhfN1boDzCIhbpfD16e+q1AkKsoj46Bhbg7WFBT9zEhY r/xG4kB8qntWX10GQ7i1eMh2avFqDGBkuaj30qc/PQ/ZzvIT5Mr3dQLYvT4EAJzH Jlx4u+7f+zZkfCbx9Bupp8i4a+Aa3L+/L39MVhktiDVnuQUj9XTDpW5XXIyedGzP o3DPkDQ+KRUrZEKQkXAd1JfPI3/KZsc= -----END CERTIFICATE-----Generated at Fri Apr 17 11:00:51 2026 by rpki-client