$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43a87ee4-2377-3b5f-9c79-8a1b6e7a3021.roa File: 43a87ee4-2377-3b5f-9c79-8a1b6e7a3021.roa (raw, json) Hash identifier: R3LxIdq1h1VAA8oVCMLf93OkcjNt+oSvwlUjew3TkzI= Subject key identifier: F5:C8:4E:3D:4D:D7:4D:AD:22:EF:7B:93:97:96:B7:40:94:8D:B2:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DAF1023E11074D0D818E008F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43a87ee4-2377-3b5f-9c79-8a1b6e7a3021.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 25019 IP address blocks: 23.34.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:23:e1:10:74:d0:d8:18:e0:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=d5518c1f-cfee-4627-a5ef-ad46e9c30585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d0:54:e5:5e:11:bb:39:47:a9:ec:41:71:3e: ba:fb:12:50:38:5c:5e:52:47:a7:be:42:27:65:d8: 49:ab:52:b1:4a:28:6b:46:d3:88:b0:00:ba:68:c2: 90:75:30:1c:30:fb:0f:df:b9:cd:01:e0:4d:fe:61: d3:4d:14:9c:72:8b:fa:b5:dc:d5:60:80:5e:2e:ca: 83:55:bb:5c:05:12:3c:1e:9a:05:f9:ba:9d:84:a2: 60:4d:21:99:fd:bc:27:eb:c4:d6:7d:cd:11:d8:f2: a4:60:5e:04:8b:28:2a:e0:5d:93:52:b8:1c:71:8d: 65:23:9e:02:ac:04:12:3f:b4:db:09:b2:f6:8d:26: c2:af:91:f1:b0:c8:1e:1e:df:0a:4d:0a:99:7f:95: b2:c7:f3:97:72:3b:95:33:3e:2d:2d:a5:3b:56:c4: b5:30:98:dc:ee:f7:25:c7:ba:12:be:ed:1f:1f:9f: 05:83:22:db:12:9f:28:db:b5:1f:5b:7b:d4:78:67: 3a:9c:00:4d:16:03:42:1d:f8:db:f7:3f:82:63:fe: 8a:ac:16:5c:86:c5:56:20:fd:71:f1:b6:23:84:7c: ca:49:e8:bd:d7:1e:a2:94:23:3d:b8:29:b3:e8:9b: 2c:36:ea:54:01:c4:41:1e:b1:94:f0:17:48:55:2d: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C8:4E:3D:4D:D7:4D:AD:22:EF:7B:93:97:96:B7:40:94:8D:B2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43a87ee4-2377-3b5f-9c79-8a1b6e7a3021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:fa:8f:d7:de:8a:57:8d:f9:54:9f:c8:40:3b:31:d8:fb:8c: a4:a4:96:28:8f:45:3b:5e:fb:22:9f:b0:58:28:07:df:1a:91: 8b:d0:5c:6a:27:c2:10:af:04:2f:76:c6:60:e9:0a:46:f1:da: 1d:2b:e3:40:6d:10:7b:63:92:03:a5:24:3b:e3:da:7f:26:2d: df:a3:cd:bc:2b:3d:24:0a:38:10:3f:21:41:70:4c:45:be:31: 60:db:7b:0e:62:d5:19:c9:90:44:22:58:48:e3:35:f2:72:d4: c5:89:63:c2:c6:39:17:bb:7c:12:1c:7d:6f:14:0b:67:6a:b9: 32:ec:bd:a4:cf:32:16:c2:14:5b:f4:d8:fc:ba:2e:9c:53:5a: c8:46:d6:7b:4f:5a:a6:66:75:06:16:a2:c8:3b:16:71:b7:be: 69:79:04:3b:05:b5:fe:57:64:8a:92:32:00:df:19:25:1f:0a: 31:4b:31:cd:1d:81:25:47:fc:38:a3:61:7e:e5:1b:89:22:ed: 3c:0c:44:43:5a:ab:a4:e1:44:ef:4f:4c:40:9c:46:85:76:5a: d3:97:99:23:2a:85:5d:a6:4f:57:73:f8:ed:c1:5c:71:df:a1: fe:00:d3:9f:2d:ea:8b:b3:41:38:3d:52:fa:01:52:8d:ba:f3: 4e:f5:e5:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vECPhEHTQ2BjgCPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk ZDU1MThjMWYtY2ZlZS00NjI3LWE1ZWYtYWQ0NmU5YzMwNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NBU5V4RuzlHqexBcT66+xJQOFxeUkenvkIn ZdhJq1KxSihrRtOIsAC6aMKQdTAcMPsP37nNAeBN/mHTTRSccov6tdzVYIBeLsqD VbtcBRI8HpoF+bqdhKJgTSGZ/bwn68TWfc0R2PKkYF4Eiygq4F2TUrgccY1lI54C rAQSP7TbCbL2jSbCr5HxsMgeHt8KTQqZf5Wyx/OXcjuVMz4tLaU7VsS1MJjc7vcl x7oSvu0fH58FgyLbEp8o27UfW3vUeGc6nABNFgNCHfjb9z+CY/6KrBZchsVWIP1x 8bYjhHzKSei91x6ilCM9uCmz6JssNupUAcRBHrGU8BdIVS1lJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXITj1N102tIu97k5eWt0CUjbK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNhODdlZTQtMjM3Ny0z YjVmLTljNzktOGExYjZlN2EzMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG76j9feileN+VSfyEA7Mdj7jKSkliiPRTte+yKfsFgoB98akYvQXGon whCvBC92xmDpCkbx2h0r40BtEHtjkgOlJDvj2n8mLd+jzbwrPSQKOBA/IUFwTEW+ MWDbew5i1RnJkEQiWEjjNfJy1MWJY8LGORe7fBIcfW8UC2dquTLsvaTPMhbCFFv0 2Py6LpxTWshG1ntPWqZmdQYWosg7FnG3vml5BDsFtf5XZIqSMgDfGSUfCjFLMc0d gSVH/DijYX7lG4ki7TwMRENaq6ThRO9PTECcRoV2WtOXmSMqhV2mT1dz+O3BXHHf of4A058t6ouzQTg9UvoBUo2680715T4= -----END CERTIFICATE-----Generated at Wed May 13 09:07:12 2026 by rpki-client