$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36eedd7a-6a2a-3af4-8820-99d7f3b3f059.roa File: 36eedd7a-6a2a-3af4-8820-99d7f3b3f059.roa (raw, json) Hash identifier: Uq/Wpd7UMQrlNvd2EXDQVDYCC5pPnKKTxpFniVKdBK8= Subject key identifier: 60:53:9A:70:79:FB:DE:BC:38:A1:9F:B5:D8:FD:17:B1:9C:7E:A1:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DBD05AAAC5A71B5A01865EE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36eedd7a-6a2a-3af4-8820-99d7f3b3f059.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 16625 IP address blocks: 23.43.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:aa:ac:5a:71:b5:a0:18:65:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=d40ca7e2-d7ec-4c42-b359-c32a732a6367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c6:cd:e5:d1:c6:f4:42:14:44:4f:d8:eb:f1: 62:7a:9d:c9:62:8c:5f:c4:08:2a:4e:5a:b6:f5:1b: 6d:94:90:fb:c8:21:21:7a:b8:f0:15:e7:dd:a7:29: fc:d5:bb:7f:e4:64:bb:18:9c:45:24:68:6d:ec:51: c7:e5:02:86:a0:93:83:77:a3:1c:98:2c:00:c9:de: e9:2d:f7:3b:85:6f:e1:ca:92:3b:f6:ba:9c:6b:b7: d8:f0:e9:c9:ef:25:19:ac:f8:39:20:29:fb:5a:8e: b0:09:51:53:ac:18:02:32:5c:91:9f:69:97:6f:c2: 63:62:06:53:a4:6a:a5:48:f3:ab:f1:2f:14:b6:39: 73:a3:22:c1:4b:9b:7d:49:55:2f:8f:74:95:2b:b4: d4:2d:2d:c1:be:4d:c7:48:e2:04:9d:5f:30:4c:af: e7:20:52:a5:8a:b7:83:c3:59:b9:21:52:1b:2d:3c: 46:ea:82:b9:02:1a:04:f9:9b:54:ca:cc:11:dc:31: c0:e0:99:35:ff:ec:fa:9b:6d:db:0a:68:19:17:bc: c5:98:01:db:79:c3:a7:f8:60:1c:79:66:77:dd:73: a1:75:b6:62:ec:c1:3b:34:ac:2f:82:b9:64:5f:a7: 8d:ea:99:46:63:78:d6:f9:1a:02:2e:10:9a:05:dd: 40:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:53:9A:70:79:FB:DE:BC:38:A1:9F:B5:D8:FD:17:B1:9C:7E:A1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36eedd7a-6a2a-3af4-8820-99d7f3b3f059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e1:f1:98:2c:5c:6c:4c:da:a3:d4:35:92:31:88:e7:64:e7: 74:32:ef:a5:a5:3b:eb:54:35:b2:6e:ed:9a:8f:53:fc:41:62: 83:fb:29:69:ce:8f:76:58:32:59:e7:40:eb:40:1d:05:e3:72: 97:40:16:73:d4:50:b0:2f:fa:49:62:6a:e7:e6:a1:a1:f9:67: 1e:c1:a7:4e:b7:80:f3:3e:f5:39:2f:5a:87:a9:48:b7:25:26: 14:22:02:3d:d1:e2:f2:01:cf:89:48:69:91:98:9a:53:a7:59: ed:dd:ba:f4:df:6b:35:7b:ab:d8:87:a6:a2:78:36:74:4e:e7: e7:c8:99:67:15:ee:5f:9c:61:a6:04:bf:5e:38:ca:dd:a2:c8: 0d:d9:d5:b6:2f:30:e3:40:09:53:9e:ec:cb:e7:df:54:ae:4b: fa:4a:40:a0:db:94:ee:4e:55:f6:25:eb:e2:2a:c4:a3:91:a8: d8:60:25:77:77:85:e4:a3:50:c4:25:e4:d4:18:e2:8c:fc:01: a7:8b:8c:5b:31:ae:f5:eb:27:dd:b6:92:68:2c:c5:49:f3:e1: f8:e4:45:f2:98:e0:bd:49:ba:22:49:d5:33:5a:70:95:d3:d4: ec:62:63:be:fd:9f:32:10:2d:ab:05:f9:ae:f1:f2:64:5f:a1: c5:dc:b1:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BaqsWnG1oBhl7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZDQwY2E3ZTItZDdlYy00YzQyLWIzNTktYzMyYTczMmE2MzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8bN5dHG9EIURE/Y6/Fiep3JYoxfxAgqTlq2 9RttlJD7yCEherjwFefdpyn81bt/5GS7GJxFJGht7FHH5QKGoJODd6McmCwAyd7p Lfc7hW/hypI79rqca7fY8OnJ7yUZrPg5ICn7Wo6wCVFTrBgCMlyRn2mXb8JjYgZT pGqlSPOr8S8UtjlzoyLBS5t9SVUvj3SVK7TULS3Bvk3HSOIEnV8wTK/nIFKlireD w1m5IVIbLTxG6oK5AhoE+ZtUyswR3DHA4Jk1/+z6m23bCmgZF7zFmAHbecOn+GAc eWZ33XOhdbZi7ME7NKwvgrlkX6eN6plGY3jW+RoCLhCaBd1AzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBTmnB5+968OKGftdj9F7GcfqFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZlZWRkN2EtNmEyYS0z YWY0LTg4MjAtOTlkN2YzYjNmMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFytAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPh8ZgsXGxM2qPUNZIxiOdk53Qy76WlO+tUNbJu7ZqPU/xBYoP7KWnO j3ZYMlnnQOtAHQXjcpdAFnPUULAv+kliaufmoaH5Zx7Bp063gPM+9TkvWoepSLcl JhQiAj3R4vIBz4lIaZGYmlOnWe3duvTfazV7q9iHpqJ4NnRO5+fImWcV7l+cYaYE v144yt2iyA3Z1bYvMONACVOe7Mvn31SuS/pKQKDblO5OVfYl6+IqxKORqNhgJXd3 heSjUMQl5NQY4oz8AaeLjFsxrvXrJ922kmgsxUnz4fjkRfKY4L1JuiJJ1TNacJXT 1OxiY779nzIQLasF+a7x8mRfocXcsZs= -----END CERTIFICATE-----Generated at Wed May 13 08:22:26 2026 by rpki-client