$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2da436c1-0093-341e-ba65-c23a21d3af7e.roa File: 2da436c1-0093-341e-ba65-c23a21d3af7e.roa (raw, json) Hash identifier: PTkMaTJ3kIww4oLz/ZA0uSDuWR5Mo6IOBChUSjqPb20= Subject key identifier: 22:55:6D:02:36:AC:23:92:8F:1E:5C:98:2E:6D:D4:CF:5D:5F:CB:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DBFD07EEA5580DEBC12208000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2da436c1-0093-341e-ba65-c23a21d3af7e.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 16625 IP address blocks: 23.47.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:7e:ea:55:80:de:bc:12:20:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=ca63a4db-8011-43ce-b801-7b6c53eeaaa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:24:1a:70:14:b0:92:6f:68:02:86:5d:2a:54: 57:67:cf:bc:31:2a:aa:0b:02:6a:54:62:8d:26:a4: 6b:b0:fa:a4:de:66:9c:fe:cb:b0:89:61:a1:54:5e: 32:ed:06:92:1e:98:61:94:19:81:f8:06:6a:c4:ce: 6f:cf:36:c5:57:3b:c0:b1:44:3e:65:5d:e7:74:c7: 6a:82:7f:90:dd:0f:cc:d3:8f:72:65:24:16:bc:18: d4:2a:62:78:a4:d4:86:47:3e:0d:b6:a5:d7:2d:e1: 06:64:8a:5a:51:af:11:af:63:68:22:f9:44:26:4f: 06:2b:75:87:5d:be:b6:f7:75:93:7f:14:da:e7:35: 0f:b2:bf:d2:1c:2c:62:d7:37:ef:12:5c:ec:47:83: 16:b9:1b:6d:f2:a0:8a:3d:f7:dc:19:d3:d3:2c:66: a4:77:50:71:9f:a9:09:07:8a:ac:f8:59:3d:5e:26: c5:9c:22:22:de:ac:ed:fb:94:1d:bd:a6:8a:6f:99: a2:c8:33:c7:ed:3f:f1:36:32:6b:3c:d2:e9:43:a6: 21:fc:81:62:4f:a0:c5:da:09:2f:3b:0d:4a:66:25: 65:ae:1e:27:32:e4:c9:69:85:a1:95:d6:f3:b6:bf: 54:88:25:64:b2:ed:61:8b:eb:e8:a8:fc:70:8b:38: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:55:6D:02:36:AC:23:92:8F:1E:5C:98:2E:6D:D4:CF:5D:5F:CB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2da436c1-0093-341e-ba65-c23a21d3af7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.47.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a0:2d:6d:bf:cf:17:ea:5f:5f:2e:30:67:1d:58:7c:03:13: 12:34:fd:86:a6:38:7b:79:71:2e:05:01:84:5c:91:7e:dc:ba: f5:bb:32:0c:f6:35:89:8e:58:3c:5a:7a:c3:49:b5:ab:34:7c: 01:cc:80:ae:4f:48:c3:c0:82:5a:68:d8:84:ae:7f:99:7f:03: 11:e9:07:98:fb:34:31:2e:5c:0b:5e:2d:57:9c:20:02:dc:ef: 56:7f:ee:76:af:4d:af:27:db:b4:c7:d2:00:db:fe:5a:43:01: 91:6f:d6:d2:88:b2:14:69:20:61:f7:3f:20:7b:e3:3c:69:45: b2:4e:a3:84:51:6b:0b:01:2e:b0:d4:bd:af:27:99:8d:81:0e: 76:4b:72:ec:5c:53:15:80:ff:43:db:4a:ed:ac:53:22:75:4c: de:37:b9:a9:e8:0a:0e:bc:56:f5:ac:81:24:54:3c:d8:a0:25: d9:d9:09:b7:96:a2:71:b5:ab:9e:fb:dd:cd:c4:73:ef:65:e1: 37:15:5d:b6:a0:ee:0d:96:b8:c6:83:f8:b2:18:b0:a7:56:2f: de:c6:db:67:5c:a2:4b:34:76:65:d2:a1:ba:4e:04:22:a3:8c: 3b:c9:23:a7:ee:3a:ae:28:27:49:08:0a:a0:27:82:21:64:14: c9:c3:97:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0H7qVYDevBIggAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk Y2E2M2E0ZGItODAxMS00M2NlLWI4MDEtN2I2YzUzZWVhYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyQacBSwkm9oAoZdKlRXZ8+8MSqqCwJqVGKN JqRrsPqk3mac/suwiWGhVF4y7QaSHphhlBmB+AZqxM5vzzbFVzvAsUQ+ZV3ndMdq gn+Q3Q/M049yZSQWvBjUKmJ4pNSGRz4NtqXXLeEGZIpaUa8Rr2NoIvlEJk8GK3WH Xb6293WTfxTa5zUPsr/SHCxi1zfvElzsR4MWuRtt8qCKPffcGdPTLGakd1Bxn6kJ B4qs+Fk9XibFnCIi3qzt+5QdvaaKb5miyDPH7T/xNjJrPNLpQ6Yh/IFiT6DF2gkv Ow1KZiVlrh4nMuTJaYWhldbztr9UiCVksu1hi+voqPxwizjNXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJVbQI2rCOSjx5cmC5t1M9dX8vAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmRhNDM2YzEtMDA5My0z NDFlLWJhNjUtYzIzYTIxZDNhZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFy9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGgLW2/zxfqX18uMGcdWHwDExI0/YamOHt5cS4FAYRckX7cuvW7Mgz2 NYmOWDxaesNJtas0fAHMgK5PSMPAglpo2ISuf5l/AxHpB5j7NDEuXAteLVecIALc 71Z/7navTa8n27TH0gDb/lpDAZFv1tKIshRpIGH3PyB74zxpRbJOo4RRawsBLrDU va8nmY2BDnZLcuxcUxWA/0PbSu2sUyJ1TN43uanoCg68VvWsgSRUPNigJdnZCbeW onG1q5773c3Ec+9l4TcVXbag7g2WuMaD+LIYsKdWL97G22dcoks0dmXSobpOBCKj jDvJI6fuOq4oJ0kICqAngiFkFMnDl1M= -----END CERTIFICATE-----Generated at Wed May 13 08:11:11 2026 by rpki-client