$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10d4bcf7-f1d6-3c24-a1e7-ba3183e6692c.roa File: 10d4bcf7-f1d6-3c24-a1e7-ba3183e6692c.roa (raw, json) Hash identifier: CVilIM636ZnAAcafeQhv04A5bGjxfUoNGWzSVpuY4ok= Subject key identifier: 9F:BA:7E:57:D5:92:18:F1:E2:F6:6A:7C:86:8D:EF:5D:26:D1:64:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DAF1026AF5CD7FD79D2EC3F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10d4bcf7-f1d6-3c24-a1e7-ba3183e6692c.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.33.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:26:af:5c:d7:fd:79:d2:ec:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=121d3360-a2a3-4a38-98e3-9ce2a8638086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:3f:57:76:25:c1:5a:9a:5f:8f:cf:38:6a: ed:1d:df:27:08:ea:6d:a2:8a:7e:08:fa:77:bc:01: 88:c4:eb:89:e7:55:c0:4a:97:5a:e4:b1:f9:41:16: ef:23:12:74:50:6b:a8:63:60:db:9f:6c:68:73:86: 36:13:91:97:74:8f:0b:33:c6:96:92:0d:59:74:a7: 2f:bc:c7:a2:a1:60:8a:91:56:9f:4b:b8:ac:62:c0: 36:e7:1e:48:d7:0b:3f:c4:6f:ca:ea:5d:f3:22:35: 76:e1:c6:53:f6:5b:90:9c:82:68:5a:2c:27:00:c5: d7:b3:83:36:8a:0e:aa:4a:d1:4b:fc:17:90:53:1a: ad:a3:7a:8b:42:16:f5:c8:1c:81:25:7d:d3:0f:64: f7:64:cc:31:e9:05:aa:0d:d2:b9:6d:fb:66:31:c5: e7:1c:81:77:6a:06:23:36:6c:46:1a:82:83:23:92: 04:db:a5:dd:6c:db:47:32:d6:8c:a4:67:8f:70:52: 46:67:65:d6:29:ca:fb:76:dc:4d:a9:9b:4a:df:d2: 46:92:82:10:aa:c2:1f:0d:9d:46:f1:54:ce:97:3c: 54:8c:c5:bd:f4:f5:9f:f6:a8:b2:51:e1:ba:ee:d1: 96:78:12:fd:bc:b8:4c:28:40:d6:28:d2:b8:89:b2: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BA:7E:57:D5:92:18:F1:E2:F6:6A:7C:86:8D:EF:5D:26:D1:64:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10d4bcf7-f1d6-3c24-a1e7-ba3183e6692c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:96:53:de:74:cc:35:ca:9a:80:40:71:e6:93:3e:3c:81:cd: ea:c8:64:57:13:52:af:95:b2:6b:a6:76:56:ba:d8:1e:40:d3: 23:b0:38:c2:28:23:a0:af:22:c4:88:63:a3:08:e2:cb:c5:04: 55:ba:3f:d4:55:fb:f8:61:9c:6a:95:93:3c:e9:a5:e4:34:39: 51:70:c1:e2:73:dd:42:38:fb:9d:26:f1:81:8e:5f:dc:df:09: e0:03:04:b7:65:3c:83:37:39:93:8e:b0:7c:c3:8a:0c:c2:cd: 44:07:d6:0b:47:de:48:e9:03:b2:2e:7b:3e:13:c8:13:80:1e: 29:24:70:f7:a0:0a:34:fb:3a:c0:2f:5d:a7:18:81:20:85:45: 6c:21:d8:c8:a9:de:a2:bb:c5:05:ad:34:dd:12:bd:91:5c:cf: 52:9f:c7:04:0a:2c:68:bb:6d:10:ab:d1:94:04:60:9b:67:81: b9:3c:4e:c0:c0:d8:27:8b:29:9c:cd:0c:3a:f7:18:ca:4f:2d: 4a:3d:78:3f:9e:53:77:37:e1:87:dd:d3:de:f3:b0:ab:4a:2c: a3:c5:91:91:c8:d8:9d:2e:f6:34:65:80:b9:09:77:35:f2:36: fa:4b:ea:35:31:ea:dd:af:aa:5d:70:83:d0:63:83:7d:65:28: a6:31:d8:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vECavXNf9edLsP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk MTIxZDMzNjAtYTJhMy00YTM4LTk4ZTMtOWNlMmE4NjM4MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYU/V3YlwVqaX4/POGrtHd8nCOptoop+CPp3 vAGIxOuJ51XASpda5LH5QRbvIxJ0UGuoY2Dbn2xoc4Y2E5GXdI8LM8aWkg1ZdKcv vMeioWCKkVafS7isYsA25x5I1ws/xG/K6l3zIjV24cZT9luQnIJoWiwnAMXXs4M2 ig6qStFL/BeQUxqto3qLQhb1yByBJX3TD2T3ZMwx6QWqDdK5bftmMcXnHIF3agYj NmxGGoKDI5IE26XdbNtHMtaMpGePcFJGZ2XWKcr7dtxNqZtK39JGkoIQqsIfDZ1G 8VTOlzxUjMW99PWf9qiyUeG67tGWeBL9vLhMKEDWKNK4ibILlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+6flfVkhjx4vZqfIaN710m0WSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTBkNGJjZjctZjFkNi0z YzI0LWExZTctYmEzMTgzZTY2OTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWWU950zDXKmoBAceaTPjyBzerIZFcTUq+Vsmumdla62B5A0yOwOMIo I6CvIsSIY6MI4svFBFW6P9RV+/hhnGqVkzzppeQ0OVFwweJz3UI4+50m8YGOX9zf CeADBLdlPIM3OZOOsHzDigzCzUQH1gtH3kjpA7Iuez4TyBOAHikkcPegCjT7OsAv XacYgSCFRWwh2Mip3qK7xQWtNN0SvZFcz1KfxwQKLGi7bRCr0ZQEYJtngbk8TsDA 2CeLKZzNDDr3GMpPLUo9eD+eU3c34Yfd097zsKtKLKPFkZHI2J0u9jRlgLkJdzXy NvpL6jUx6t2vql1wg9Bjg31lKKYx2Lc= -----END CERTIFICATE-----Generated at Wed May 13 11:05:37 2026 by rpki-client