$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa File: 844a594c-7e4b-3b8f-aaee-aec765543f6a.roa (raw, json) Hash identifier: QShNNcmIHpv2xz6lqCf+hDsm7420uQHAN8RmQKPXUH4= Subject key identifier: 4C:59:2F:5E:78:76:E1:57:DB:93:D2:E6:B2:86:62:7D:78:CA:B9:BC Certificate issuer: /CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Certificate serial: 010D0C9F4328584DB0758E024176F9C482C1AC80 Authority key identifier: 33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa Signing time: Fri 01 May 2026 13:00:30 +0000 ROA not before: Fri 01 May 2026 13:00:30 +0000 ROA not after: Thu 30 Jul 2026 13:00:30 +0000 asID: 376 IP address blocks: 204.19.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b0:75:8e:02:41:76:f9:c4:82:c1:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Validity Not Before: May 1 13:00:30 2026 GMT Not After : Jul 30 13:00:30 2026 GMT Subject: CN=99badb15-ec51-48c2-a852-3cba9075d90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0b:3f:fd:52:6f:e3:13:2f:e2:e6:fe:9f:ca: 96:ce:f7:85:3b:ac:d4:52:a4:20:b0:85:5f:b9:fc: 90:b6:e4:fa:7c:60:6f:ef:69:be:35:e2:98:58:e5: 01:69:8a:64:9e:ab:62:2e:6f:55:be:2d:16:a9:2e: a7:71:f8:b6:06:a6:ee:03:ba:41:1a:49:d3:08:f2: d4:2b:c5:c1:75:77:56:e4:cc:fd:c1:dc:3c:01:c2: 8b:52:eb:ab:b1:8e:03:6d:7c:75:dd:10:d3:c4:7e: a3:6d:3b:30:02:e3:be:80:19:b3:65:db:f5:82:55: 60:04:10:6a:78:5e:c6:b7:0d:b3:a5:b1:1d:b4:84: 23:84:44:95:3a:84:e1:94:ff:d3:54:5b:c7:7c:96: 99:84:95:67:f4:d4:9d:7a:45:99:c1:28:d6:e2:95: 37:21:df:91:aa:11:dc:c4:f5:62:02:b6:8e:04:d5: 7e:60:19:d6:23:49:1d:ac:4c:67:5a:e2:3a:0d:95: 38:32:8b:ff:32:49:8e:1f:11:45:b0:e1:3c:19:3b: 3c:c0:df:c2:37:3e:15:69:d5:a8:c5:f0:03:e6:b9: 2c:7f:a0:e1:dc:36:cc:af:c5:71:93:3c:5f:68:fb: e0:41:87:27:95:07:fb:a6:9a:67:19:7c:ae:7f:21: 87:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:59:2F:5E:78:76:E1:57:DB:93:D2:E6:B2:86:62:7D:78:CA:B9:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl X509v3 Authority Key Identifier: keyid:33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer sbgp-ipAddrBlock: critical IPv4: 204.19.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:17:ee:ee:de:61:95:a8:9e:79:d6:cd:d5:d6:40:9a:1a:a8: 7e:b3:9a:3b:77:ed:64:fe:bb:c8:6a:a1:99:6a:4c:8a:e6:1f: f3:80:d2:9d:fb:97:98:2c:0f:7e:a9:b1:28:9d:e8:f1:c2:d6: 74:03:d1:72:7c:52:ca:a7:e1:49:af:d2:61:86:e0:c1:75:98: 1c:66:d6:e4:fe:21:b2:8b:18:b2:4f:9b:a0:6c:0c:1b:2f:f5: a3:d7:90:75:8c:5e:12:f5:fd:54:5e:b9:ee:30:da:a7:a6:87: c7:d6:ce:f8:4e:a2:ff:4b:2c:f0:9f:63:3d:e2:5b:cb:ba:f3: 30:85:63:c2:f0:da:2b:3c:e3:33:bd:95:05:4a:97:0c:33:3d: 25:07:7d:ee:b0:18:65:22:ea:6a:2f:a3:21:93:f0:79:02:6a: 5c:eb:cb:5a:b1:7c:99:fa:2e:96:aa:fd:b1:05:1d:06:f3:26: d3:6d:b2:68:85:aa:bf:8f:76:2b:d2:69:b7:e7:2b:9a:ab:7c: 0e:d2:a7:54:e2:a8:e9:d2:3d:33:f8:a4:d7:28:03:24:47:8b: 08:1e:11:1b:e1:3e:3b:17:78:82:c6:73:f4:f6:f6:e4:5a:27: 96:77:a9:77:6c:42:3a:2f:e9:f2:e4:79:03:d9:f7:db:94:40: 21:fe:7b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdY4CQXb5xILBrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTgyOTFkNGQtZGE0OC00YjI1LTg0ZDYtM2RmODhmMmZl ZDU0MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk OTliYWRiMTUtZWM1MS00OGMyLWE4NTItM2NiYTkwNzVkOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQs//VJv4xMv4ub+n8qWzveFO6zUUqQgsIVf ufyQtuT6fGBv72m+NeKYWOUBaYpknqtiLm9Vvi0WqS6ncfi2BqbuA7pBGknTCPLU K8XBdXdW5Mz9wdw8AcKLUuursY4DbXx13RDTxH6jbTswAuO+gBmzZdv1glVgBBBq eF7Gtw2zpbEdtIQjhESVOoThlP/TVFvHfJaZhJVn9NSdekWZwSjW4pU3Id+RqhHc xPViAraOBNV+YBnWI0kdrExnWuI6DZU4Mov/MkmOHxFFsOE8GTs8wN/CNz4VadWo xfAD5rksf6Dh3DbMr8VxkzxfaPvgQYcnlQf7pppnGXyufyGHjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExZL154duFX25PS5rKGYn14yrm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xODI5 MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4OGYyZmVkNTQvODQ0YTU5NGMtN2U0Yi0z YjhmLWFhZWUtYWVjNzY1NTQzZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTgyOTFkNGQtZGE0OC00YjI1LTg0 ZDYtM2RmODhmMmZlZDU0LzE4MjkxZDRkLWRhNDgtNGIyNS04NGQ2LTNkZjg4ZjJm ZWQ1NC5jcmwwHwYDVR0jBBgwFoAUM9lgbdXMKovJHNAJgMgAwq5YgtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xODI5MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4 OGYyZmVkNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBMXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0X7u7eYZWonnnWzdXWQJoaqH6zmjt37WT+u8hqoZlqTIrmH/OA0p37 l5gsD36psSid6PHC1nQD0XJ8Usqn4Umv0mGG4MF1mBxm1uT+IbKLGLJPm6BsDBsv 9aPXkHWMXhL1/VReue4w2qemh8fWzvhOov9LLPCfYz3iW8u68zCFY8Lw2is84zO9 lQVKlwwzPSUHfe6wGGUi6movoyGT8HkCalzry1qxfJn6Lpaq/bEFHQbzJtNtsmiF qr+PdivSabfnK5qrfA7Sp1TiqOnSPTP4pNcoAyRHiwgeERvhPjsXeILGc/T29uRa J5Z3qXdsQjov6fLkeQPZ99uUQCH+e64= -----END CERTIFICATE-----Generated at Wed May 13 02:56:39 2026 by rpki-client