$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa File: 8ec81666-b29e-37f5-93fa-ec08312dd538.roa (raw, json) Hash identifier: vwruRftJ6zyL/EfhCQ/gnIUwNvNCQwVdcNbdcMOLL1Q= Subject key identifier: E7:33:00:16:DA:90:7F:70:59:8C:BC:5D:31:7D:6B:06:5E:C4:9E:83 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D7A051CE4F28C6A3E6196FE00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 21866 IP address blocks: 23.239.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:1c:e4:f2:8c:6a:3e:61:96:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=53befb7f-796d-49e4-9a42-6ad187701b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:e3:56:17:4d:8e:06:43:4b:e8:d9:84:59: cd:df:2b:39:4a:63:d7:91:32:cb:1e:19:c2:92:50: 60:7a:9b:50:c7:2a:3e:f1:dc:53:76:4f:b7:10:02: f5:c2:52:cf:5d:79:ed:d3:91:4f:0d:9d:62:4c:c1: f2:ac:48:e5:34:c4:3d:f6:61:1d:7a:40:55:26:a2: d6:72:71:f6:fc:d0:1c:5b:0e:73:45:9e:64:3b:fe: 58:6b:91:51:98:d8:67:db:7b:8f:b8:da:f7:b5:53: 5b:2a:ec:41:db:75:6c:bf:68:52:b8:4c:62:3c:da: 6b:38:e1:dc:09:06:d5:f0:aa:0e:1a:79:99:c5:be: 5f:76:2f:d0:88:fc:35:9d:9f:96:86:48:73:13:aa: 26:be:16:45:e4:7a:51:02:6c:c5:8c:9d:b5:3f:b6: 1e:4c:57:b3:97:44:16:61:57:33:9c:54:1b:4a:33: c7:9b:8c:53:92:f7:a1:bf:a8:c1:c9:03:52:53:7d: 43:38:37:11:f0:e8:ed:57:20:2a:ca:f5:e0:49:4a: 8a:8d:16:92:38:b2:a3:f6:b1:b1:ab:02:a4:c4:03: 8a:86:8a:76:37:12:f4:ff:2c:4d:fb:3a:24:57:95: e6:18:05:6a:05:ee:2f:c7:f4:13:5a:6f:fe:8f:19: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:33:00:16:DA:90:7F:70:59:8C:BC:5D:31:7D:6B:06:5E:C4:9E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/8ec81666-b29e-37f5-93fa-ec08312dd538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:3b:8b:c1:f1:a3:e6:8c:57:a9:dc:da:2c:dc:f3:ce:df:b2: 1f:3e:87:65:e5:73:81:cb:28:4f:45:cf:d7:3f:24:ce:5a:07: 69:86:3b:4f:c0:05:92:34:79:2a:66:5e:9b:50:67:0b:ab:c9: cd:11:ae:3b:89:56:d5:c3:31:83:e2:1e:c8:53:39:a3:3c:1e: cb:7e:16:ed:1d:07:21:7b:93:9d:52:3c:3c:c2:2e:6a:ba:67: 94:06:18:0f:4f:68:aa:ca:ff:92:db:c3:e8:ba:02:52:0a:7f: 83:1c:c5:bf:57:bb:ca:bf:8d:32:6e:d4:bf:d2:79:b4:ff:d8: 60:a5:d1:45:af:6b:5b:c1:5f:3a:a7:34:7a:13:94:23:ff:d7: 98:b9:46:05:60:0f:03:a7:94:10:1b:81:54:2a:32:35:4a:a3: 98:38:5a:5c:a4:db:82:91:58:ed:30:29:2e:f9:f2:b5:36:06: f4:ee:26:f6:f8:38:22:47:4a:cf:12:dc:ec:39:34:8f:bd:b1: 08:e3:78:0a:a7:7b:9f:9b:2f:fa:f3:89:55:43:41:ed:bc:f9: 6a:09:4c:4b:d4:15:75:20:19:c9:fd:04:d7:38:a8:73:60:26: 1d:a1:2e:49:88:d9:30:40:f6:ff:ea:0f:df:bd:96:52:dd:f4: 34:47:5a:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRzk8oxqPmGW/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NTNiZWZiN2YtNzk2ZC00OWU0LTlhNDItNmFkMTg3NzAxYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC/jVhdNjgZDS+jZhFnN3ys5SmPXkTLLHhnC klBgeptQxyo+8dxTdk+3EAL1wlLPXXnt05FPDZ1iTMHyrEjlNMQ99mEdekBVJqLW cnH2/NAcWw5zRZ5kO/5Ya5FRmNhn23uPuNr3tVNbKuxB23Vsv2hSuExiPNprOOHc CQbV8KoOGnmZxb5fdi/QiPw1nZ+WhkhzE6omvhZF5HpRAmzFjJ21P7YeTFezl0QW YVcznFQbSjPHm4xTkvehv6jByQNSU31DODcR8OjtVyAqyvXgSUqKjRaSOLKj9rGx qwKkxAOKhop2NxL0/yxN+zokV5XmGAVqBe4vx/QTWm/+jxnEHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOczABbakH9wWYy8XTF9awZexJ6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvOGVjODE2NjYtYjI5ZS0z N2Y1LTkzZmEtZWMwODMxMmRkNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD07i8Hxo+aMV6nc2izc887fsh8+h2Xlc4HLKE9Fz9c/JM5aB2mGO0/A BZI0eSpmXptQZwuryc0RrjuJVtXDMYPiHshTOaM8Hst+Fu0dByF7k51SPDzCLmq6 Z5QGGA9PaKrK/5Lbw+i6AlIKf4Mcxb9Xu8q/jTJu1L/SebT/2GCl0UWva1vBXzqn NHoTlCP/15i5RgVgDwOnlBAbgVQqMjVKo5g4Wlyk24KRWO0wKS758rU2BvTuJvb4 OCJHSs8S3Ow5NI+9sQjjeAqne5+bL/rziVVDQe28+WoJTEvUFXUgGcn9BNc4qHNg Jh2hLkmI2TBA9v/qD9+9llLd9DRHWnE= -----END CERTIFICATE-----Generated at Fri Apr 17 20:31:23 2026 by rpki-client