$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289070a8-416e-3675-a127-cec7cd0fd6b2.roa File: 289070a8-416e-3675-a127-cec7cd0fd6b2.roa (raw, json) Hash identifier: r+efIbpZEnBDRqXmA2w6+BdBIMGbBIlLgMjAfwEJrWw= Subject key identifier: D4:C4:0D:27:53:65:81:EF:29:AA:A2:C0:D0:3E:EB:BD:86:3B:09:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DBBA067BB5181CF28C5F1AA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289070a8-416e-3675-a127-cec7cd0fd6b2.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 20940 IP address blocks: 23.40.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:67:bb:51:81:cf:28:c5:f1:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=fd155a30-3886-4302-84a3-e1d447817fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5a:44:10:f0:d8:ac:5c:0a:ea:f9:8a:7e:24: 3b:0a:75:37:63:3d:57:0d:61:f9:2c:76:05:bb:13: e5:5d:0a:1d:05:f1:78:83:d6:ba:8d:e3:31:93:fa: 53:fd:55:85:11:51:c8:8e:47:0e:90:b1:42:43:a4: b2:3e:5b:91:3a:a8:3a:af:37:a3:80:8c:c0:d6:ad: 61:cf:e7:06:fc:5a:b4:3d:9f:f4:24:02:c3:57:31: a3:57:0d:7e:8f:b2:bf:5e:5c:7d:28:9a:0c:e9:e7: 11:1f:79:ef:29:80:c9:15:56:75:e8:d3:cb:c1:5f: da:b8:b7:c2:10:73:25:8f:11:63:7a:82:2f:4b:72: e5:5d:67:f5:74:e1:18:b1:b6:c1:bf:bb:00:bc:1b: 0d:91:bb:54:5f:11:59:67:ba:45:9f:09:9a:a9:a0: dc:26:3a:0a:84:a3:06:6f:50:53:9a:90:4a:99:4f: 8c:c6:3b:2a:9a:04:f7:78:a9:af:3e:50:75:ef:1d: 3d:01:80:cb:d5:e6:3c:82:20:00:5c:fa:f8:16:36: c7:a0:ed:42:81:a5:40:bf:b9:64:5e:82:ab:73:6e: 01:2e:85:68:b9:a4:d2:b3:45:8b:65:be:ad:91:d9: ad:aa:28:e6:76:b9:44:e9:67:f6:af:60:9f:95:e0: 28:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C4:0D:27:53:65:81:EF:29:AA:A2:C0:D0:3E:EB:BD:86:3B:09:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/289070a8-416e-3675-a127-cec7cd0fd6b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d8:fb:2c:c1:fd:0c:9d:fb:92:52:dc:d7:5f:85:ef:98:23: ee:24:7c:8c:3d:89:29:16:75:fb:6d:49:8b:e7:85:9b:f4:01: 0a:e5:73:8c:53:bd:9b:82:11:6f:7b:73:1a:74:cc:48:d2:4b: bd:6e:d9:0d:27:ac:80:14:8d:77:04:b8:3a:e2:47:56:39:21: 9b:90:30:e4:cd:11:73:60:c5:55:9c:58:e5:49:3f:b1:70:6e: 95:a8:dc:28:0d:c3:55:e3:59:dc:6e:ed:2f:79:06:8d:23:bf: 67:6b:39:b1:f8:56:5f:95:18:47:b4:0b:03:64:a2:a2:20:3f: 47:14:71:56:28:95:70:f9:df:e4:2b:aa:d8:e8:81:7c:fa:54: 4b:c3:c7:7a:62:cb:10:59:be:4c:0a:da:3c:21:1d:e2:0d:a2: 5f:97:b5:10:ed:3d:03:3e:e6:49:8d:80:bb:57:68:b2:87:a4: ac:f1:18:a0:ee:bf:26:46:01:dc:53:bc:06:b5:08:69:10:98: c9:91:be:b3:f6:4a:3a:d1:2f:ac:3c:ab:5a:a5:99:71:bf:b6: c7:65:4c:cd:7f:29:02:86:bc:2b:27:fc:bc:87:d8:0f:64:ba: 6f:42:7b:b6:1c:f8:0f:cc:5a:1a:8b:b4:e4:ec:4e:d6:85:ac: 46:8c:92:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oGe7UYHPKMXxqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk ZmQxNTVhMzAtMzg4Ni00MzAyLTg0YTMtZTFkNDQ3ODE3ZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVpEEPDYrFwK6vmKfiQ7CnU3Yz1XDWH5LHYF uxPlXQodBfF4g9a6jeMxk/pT/VWFEVHIjkcOkLFCQ6SyPluROqg6rzejgIzA1q1h z+cG/Fq0PZ/0JALDVzGjVw1+j7K/Xlx9KJoM6ecRH3nvKYDJFVZ16NPLwV/auLfC EHMljxFjeoIvS3LlXWf1dOEYsbbBv7sAvBsNkbtUXxFZZ7pFnwmaqaDcJjoKhKMG b1BTmpBKmU+MxjsqmgT3eKmvPlB17x09AYDL1eY8giAAXPr4FjbHoO1CgaVAv7lk XoKrc24BLoVouaTSs0WLZb6tkdmtqijmdrlE6Wf2r2CfleAolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTEDSdTZYHvKaqiwNA+672GOwndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg5MDcwYTgtNDE2ZS0z Njc1LWExMjctY2VjN2NkMGZkNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjY+yzB/Qyd+5JS3Ndfhe+YI+4kfIw9iSkWdfttSYvnhZv0AQrlc4xT vZuCEW97cxp0zEjSS71u2Q0nrIAUjXcEuDriR1Y5IZuQMOTNEXNgxVWcWOVJP7Fw bpWo3CgNw1XjWdxu7S95Bo0jv2drObH4Vl+VGEe0CwNkoqIgP0cUcVYolXD53+Qr qtjogXz6VEvDx3piyxBZvkwK2jwhHeINol+XtRDtPQM+5kmNgLtXaLKHpKzxGKDu vyZGAdxTvAa1CGkQmMmRvrP2SjrRL6w8q1qlmXG/tsdlTM1/KQKGvCsn/LyH2A9k um9Ce7Yc+A/MWhqLtOTsTtaFrEaMkvI= -----END CERTIFICATE-----Generated at Wed May 13 07:12:30 2026 by rpki-client