$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9d50e60-bc48-3d82-b7ef-ebeda58db732.roa File: d9d50e60-bc48-3d82-b7ef-ebeda58db732.roa (raw, json) Hash identifier: NAN6Eg1Yd8N6HATkgDijmvRGFeo1GO41xvC/y2ix2Yg= Subject key identifier: A8:48:13:BD:66:AD:6B:65:82:7C:1D:63:25:44:82:55:D3:F9:8A:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D651511EF2D9BCC90962999C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9d50e60-bc48-3d82-b7ef-ebeda58db732.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 35994 IP address blocks: 23.219.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:11:ef:2d:9b:cc:90:96:29:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=b0960593-312e-4e26-8fd6-3a90b25bdb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4b:8e:f4:b1:08:7c:8f:91:ef:b7:70:75:70: de:09:ff:b4:98:a5:76:52:59:fd:5c:72:e5:94:c5: 3b:92:e4:9d:bb:7d:46:4d:f4:15:ae:91:fd:a4:c4: 3c:48:07:08:81:b4:a4:ca:ac:6c:b3:bd:17:93:dc: e7:b9:2b:72:0f:01:a5:57:7f:05:90:b9:cf:2c:66: 32:6f:63:7e:b9:e4:5c:ed:a6:ac:43:4f:84:a1:1d: 6c:ac:ee:f3:6b:09:d6:b8:4a:d6:cf:30:0e:8a:c7: db:4e:2c:b1:78:60:b6:88:cb:2a:1e:3e:bb:49:54: 50:ee:63:80:d3:31:00:62:db:0e:bc:44:a1:68:34: aa:cd:78:60:5d:7b:f2:52:c4:72:21:38:14:cc:f6: 1e:b4:e9:9a:a5:8e:86:11:ba:c3:9c:d5:7a:26:60: c4:2e:59:cc:5d:ca:04:3a:c1:c0:5a:90:20:00:a4: ef:59:39:28:a3:fe:15:dd:b8:73:ec:46:cf:76:60: d8:fa:54:b6:d0:ec:2a:80:93:9e:9c:a8:34:bd:57: d7:b5:ab:c4:01:82:19:9d:1a:2c:f1:1a:6f:b8:8c: 12:9e:93:18:8d:8a:f4:06:b9:75:93:47:95:7f:d4: fe:e3:41:cb:05:9a:e8:43:f5:47:6c:80:30:89:f7: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:48:13:BD:66:AD:6B:65:82:7C:1D:63:25:44:82:55:D3:F9:8A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9d50e60-bc48-3d82-b7ef-ebeda58db732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e5:d9:93:db:e8:69:66:73:08:26:77:cb:e2:5c:fd:da:8f: da:47:95:55:35:08:c0:0d:b4:40:c2:5b:27:f3:99:4b:3c:fb: be:c3:05:8c:00:9d:17:ca:70:71:d6:c0:87:cd:51:bd:5b:ce: 44:28:4a:0f:4d:c8:2d:80:0a:c0:f1:ff:6f:99:b8:96:36:81: db:c4:e3:80:82:69:61:0f:dc:b2:c5:af:4e:27:e9:75:e8:43: 56:fe:be:ea:f5:b9:ec:b0:85:c8:7b:d4:af:a2:9b:58:2c:ab: fa:49:94:c8:fc:fc:32:78:ab:9e:ee:f5:6e:41:77:e0:6b:68: 78:5a:77:ec:7b:a8:f1:aa:fc:eb:5b:cc:c0:2e:35:fa:3b:ad: c6:0f:72:e0:9f:28:7b:f1:99:fe:9c:8b:31:a6:5e:ea:36:30: 18:f8:d7:4c:ff:2e:fa:e9:c4:4a:a4:da:bf:1d:a3:b5:bc:e7: e0:72:aa:cc:30:69:4e:d2:01:b8:19:c1:87:3b:91:98:09:d0: 29:4d:6d:13:90:ca:2e:63:30:a5:e1:a0:01:22:39:1d:5f:1d: bb:b6:aa:21:8b:56:a2:63:70:a4:0d:7e:88:c0:83:95:ed:9d: d5:bc:7a:ed:77:6d:8d:b4:fd:75:d1:7c:72:8f:20:38:df:55: fb:09:11:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRHvLZvMkJYpmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk YjA5NjA1OTMtMzEyZS00ZTI2LThmZDYtM2E5MGIyNWJkYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkuO9LEIfI+R77dwdXDeCf+0mKV2Uln9XHLl lMU7kuSdu31GTfQVrpH9pMQ8SAcIgbSkyqxss70Xk9znuStyDwGlV38FkLnPLGYy b2N+ueRc7aasQ0+EoR1srO7zawnWuErWzzAOisfbTiyxeGC2iMsqHj67SVRQ7mOA 0zEAYtsOvEShaDSqzXhgXXvyUsRyITgUzPYetOmapY6GEbrDnNV6JmDELlnMXcoE OsHAWpAgAKTvWTkoo/4V3bhz7EbPdmDY+lS20OwqgJOenKg0vVfXtavEAYIZnRos 8RpvuIwSnpMYjYr0Brl1k0eVf9T+40HLBZroQ/VHbIAwiffFFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhIE71mrWtlgnwdYyVEglXT+YqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDlkNTBlNjAtYmM0OC0z ZDgyLWI3ZWYtZWJlZGE1OGRiNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9uDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDl2ZPb6Glmcwgmd8viXP3aj9pHlVU1CMANtEDCWyfzmUs8+77DBYwA nRfKcHHWwIfNUb1bzkQoSg9NyC2ACsDx/2+ZuJY2gdvE44CCaWEP3LLFr04n6XXo Q1b+vur1ueywhch71K+im1gsq/pJlMj8/DJ4q57u9W5Bd+BraHhad+x7qPGq/Otb zMAuNfo7rcYPcuCfKHvxmf6cizGmXuo2MBj410z/LvrpxEqk2r8do7W85+Byqsww aU7SAbgZwYc7kZgJ0ClNbROQyi5jMKXhoAEiOR1fHbu2qiGLVqJjcKQNfojAg5Xt ndW8eu13bY20/XXRfHKPIDjfVfsJESo= -----END CERTIFICATE-----Generated at Sun Apr 19 09:00:54 2026 by rpki-client