$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa File: 405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa (raw, json) Hash identifier: +/bbKi3oy6dEOBK6Ag08qDw8GcOaRVq6g0f4bsyWAiY= Subject key identifier: 0E:5C:C6:42:92:7D:C8:F0:38:68:5B:84:8B:47:9E:2A:6D:B4:69:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9E50221C1EDA09FA302FB860 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 24319 IP address blocks: 23.32.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:22:1c:1e:da:09:fa:30:2f:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=bc9d5d2c-cd64-4ea7-9c9a-24b58ede7c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:52:33:d8:15:a1:cf:8d:46:71:a1:c2:8c: 15:c9:b4:d0:a0:fb:fd:90:5d:db:e3:c4:54:60:e3: 5a:89:c5:ff:5c:2f:6f:74:b9:28:c3:71:d3:ab:bb: ff:92:f8:c2:f9:0f:e2:42:4d:55:ac:9f:a1:ff:d6: 5c:54:34:75:23:44:6f:03:22:45:a0:0a:1f:ce:f3: fd:0f:01:5b:03:ac:23:94:7b:b0:13:96:5f:17:1e: d7:b1:2a:42:eb:25:14:f4:a2:9f:59:83:77:d9:72: 88:91:68:00:7d:79:85:5f:cc:56:a1:bf:5f:f0:30: 24:2a:f1:a0:6b:be:e9:ac:65:92:8a:38:96:96:6b: c6:e9:bc:87:c1:b0:b1:dc:6e:83:8f:1f:cf:b8:12: f2:71:c8:b8:e4:2a:c0:ed:96:64:a2:80:fd:86:2b: 0c:59:a3:42:0b:47:b1:95:af:40:87:50:50:75:6c: b9:2b:21:56:94:59:45:6d:5f:83:fb:3a:b1:b0:83: c2:66:03:58:66:5b:ec:2f:66:0c:1e:c2:d3:2a:89: bc:bb:aa:a6:71:18:74:55:b7:be:24:07:3d:d4:e2: 7a:50:43:8d:99:f8:63:b1:a5:de:60:1e:df:88:68: 10:24:0a:75:ca:f7:6e:69:50:7d:f7:aa:6b:c0:c5: 0f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5C:C6:42:92:7D:C8:F0:38:68:5B:84:8B:47:9E:2A:6D:B4:69:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:52:4c:e5:21:96:c2:b6:87:b4:d8:22:33:d6:12:3a:ce:bc: 36:b1:02:96:ec:1c:c8:f8:b1:9d:3c:51:97:04:ed:e0:9d:1c: 4a:e3:55:3c:a3:91:86:31:23:c8:da:6b:01:70:0c:6c:e2:6f: 53:98:48:77:45:d6:de:6b:e5:2e:0b:ce:28:ec:48:cd:98:64: d1:77:88:51:4a:d0:63:11:f4:09:05:8d:f3:a9:2d:25:1c:19: 12:20:0a:00:43:e5:a3:a1:45:32:27:45:3a:74:53:b5:db:e6: a3:65:0b:40:92:32:c4:b9:c3:74:53:70:2d:21:4b:17:35:9d: 67:aa:6e:0a:f8:6a:af:99:7f:b8:66:f6:5a:bb:8a:e8:e0:54: 5c:12:05:65:85:fb:50:08:39:5f:1e:c5:1c:de:fe:e6:12:29: 59:56:7b:08:62:a0:76:75:53:4b:5b:e9:95:a2:c2:2f:9d:3c: fe:08:b8:76:81:d9:13:f1:aa:a6:e7:d1:b0:95:58:76:7d:1c: f3:d7:27:d2:24:45:f1:0d:e8:6a:1e:ff:62:0b:ae:e7:b4:6f: 1f:c2:c2:6d:d0:b6:d5:2f:af:5b:ee:8e:ed:3b:d7:92:96:d6: a6:e0:22:58:3f:c7:d4:75:f3:fb:60:16:9d:81:90:19:c0:52: 3c:2f:cf:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCIcHtoJ+jAvuGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YmM5ZDVkMmMtY2Q2NC00ZWE3LTljOWEtMjRiNThlZGU3YzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AxSM9gVoc+NRnGhwowVybTQoPv9kF3b48RU YONaicX/XC9vdLkow3HTq7v/kvjC+Q/iQk1VrJ+h/9ZcVDR1I0RvAyJFoAofzvP9 DwFbA6wjlHuwE5ZfFx7XsSpC6yUU9KKfWYN32XKIkWgAfXmFX8xWob9f8DAkKvGg a77prGWSijiWlmvG6byHwbCx3G6Djx/PuBLycci45CrA7ZZkooD9hisMWaNCC0ex la9Ah1BQdWy5KyFWlFlFbV+D+zqxsIPCZgNYZlvsL2YMHsLTKom8u6qmcRh0Vbe+ JAc91OJ6UEONmfhjsaXeYB7fiGgQJAp1yvduaVB996prwMUPSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5cxkKSfcjwOGhbhItHnipttGn/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDA1YThhZTItMmZkYi0z ZTVkLWE3NTktNDMwYTgzMTllMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFSTOUhlsK2h7TYIjPWEjrOvDaxApbsHMj4sZ08UZcE7eCdHErjVTyj kYYxI8jaawFwDGzib1OYSHdF1t5r5S4LzijsSM2YZNF3iFFK0GMR9AkFjfOpLSUc GRIgCgBD5aOhRTInRTp0U7Xb5qNlC0CSMsS5w3RTcC0hSxc1nWeqbgr4aq+Zf7hm 9lq7iujgVFwSBWWF+1AIOV8exRze/uYSKVlWewhioHZ1U0tb6ZWiwi+dPP4IuHaB 2RPxqqbn0bCVWHZ9HPPXJ9IkRfEN6Goe/2ILrue0bx/Cwm3QttUvr1vuju0715KW 1qbgIlg/x9R18/tgFp2BkBnAUjwvz4Q= -----END CERTIFICATE-----Generated at Wed May 13 07:54:31 2026 by rpki-client