$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/643b4633-a606-3854-b152-66f4818490a3.roa File: 643b4633-a606-3854-b152-66f4818490a3.roa (raw, json) Hash identifier: A4v79RoZMPmjOZiaERiizAmBOpFmClX8DgPaBPu9Okc= Subject key identifier: 30:E5:48:FB:D7:F9:2B:A2:33:9D:D5:2D:6F:67:70:E3:68:A9:0E:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DADAAE4E87EC30E74E0C7ED40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/643b4633-a606-3854-b152-66f4818490a3.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.32.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e4:e8:7e:c3:0e:74:e0:c7:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=40bb079c-918e-44d4-b7d3-e40056657eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:69:a7:2e:11:b6:8f:e4:a9:18:50:75:a2:ec: fd:75:94:8f:29:7b:31:2f:17:dc:43:d1:f4:f9:55: 91:5e:08:5f:de:cc:c1:59:17:da:bd:40:9f:61:0e: c7:1f:35:a0:17:34:26:19:b6:41:86:05:ee:4d:99: 9b:42:78:44:f9:c4:a9:d2:c9:28:33:1e:8a:c5:43: 2c:bc:9b:98:ec:e7:20:80:45:e1:f5:35:28:d0:ee: 59:e9:c6:d8:a7:49:d1:82:02:63:1c:18:c7:fd:68: 06:72:d9:c0:49:c1:bd:62:b6:c5:43:a0:b8:fa:f3: 28:ab:1c:d7:1a:2c:b3:f5:eb:56:42:af:83:bf:83: d6:e6:c9:37:a8:59:bf:d8:eb:e9:be:31:8c:cb:26: f8:34:f8:40:7b:27:c6:95:e4:fa:e9:64:cb:cf:b1: 47:31:d0:fe:c5:64:55:21:ea:97:28:06:c6:c2:05: 18:28:75:19:6c:c0:02:4f:93:b9:60:b3:03:1a:a6: f0:28:23:36:ba:73:ae:f9:61:a8:68:c5:14:0b:e2: 0a:70:13:91:4d:dd:b3:19:ea:a3:dc:56:49:a8:a0: fd:c9:00:b5:f2:4b:f2:f1:1e:a3:60:97:b6:2b:27: 94:85:12:1c:57:5f:95:f0:e6:c0:9e:fb:1d:27:2e: f2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E5:48:FB:D7:F9:2B:A2:33:9D:D5:2D:6F:67:70:E3:68:A9:0E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/643b4633-a606-3854-b152-66f4818490a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ad:36:a6:f7:13:37:0d:d8:78:1e:7e:ac:17:4c:3e:9a:f4: 18:7b:e1:6e:3f:34:8a:26:10:07:59:8d:7b:53:5e:71:c1:e6: fb:dc:65:62:fb:b1:05:d1:b6:f1:30:1b:34:07:de:56:a2:cd: 1b:ce:96:1b:3f:29:c7:d1:c6:40:75:07:60:ca:17:2b:26:6c: 1e:2e:7f:b1:e4:e4:02:b6:c6:4e:41:d2:b1:af:78:5e:1f:12: be:11:f5:5f:d5:e4:63:cb:13:04:83:84:67:42:c2:b5:7c:46: e6:10:e6:7b:3a:fc:8c:ba:8a:5f:af:eb:41:88:c7:77:23:de: d0:d7:4c:d3:e2:39:18:be:5f:67:ef:bd:a5:01:31:f0:3e:00: f8:07:d2:86:66:7a:ca:e3:2b:8f:c0:8d:2b:bd:7b:75:b1:62: ae:14:03:63:b0:7b:4f:01:8f:fe:2e:13:32:2e:5f:f3:1e:06: 65:cd:37:fe:fd:55:7f:94:c1:26:5e:8b:9a:34:18:15:cf:eb: 98:40:8f:cd:1f:5c:a1:2a:d7:b7:51:ea:73:df:31:a4:b9:1a: 21:4a:12:e0:9b:1a:e2:f7:93:c5:80:cd:17:f6:e9:c9:b2:7c: fe:ab:95:0a:13:76:d8:c7:75:2d:ec:62:cf:b4:2c:85:a7:7f: 2d:a3:4f:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tquTofsMOdODH7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk NDBiYjA3OWMtOTE4ZS00NGQ0LWI3ZDMtZTQwMDU2NjU3ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmmnLhG2j+SpGFB1ouz9dZSPKXsxLxfcQ9H0 +VWRXghf3szBWRfavUCfYQ7HHzWgFzQmGbZBhgXuTZmbQnhE+cSp0skoMx6KxUMs vJuY7OcggEXh9TUo0O5Z6cbYp0nRggJjHBjH/WgGctnAScG9YrbFQ6C4+vMoqxzX Giyz9etWQq+Dv4PW5sk3qFm/2OvpvjGMyyb4NPhAeyfGleT66WTLz7FHMdD+xWRV IeqXKAbGwgUYKHUZbMACT5O5YLMDGqbwKCM2unOu+WGoaMUUC+IKcBORTd2zGeqj 3FZJqKD9yQC18kvy8R6jYJe2KyeUhRIcV1+V8ObAnvsdJy7yewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDlSPvX+SuiM53VLW9ncONoqQ4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQzYjQ2MzMtYTYwNi0z ODU0LWIxNTItNjZmNDgxODQ5MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAatNqb3EzcN2HgefqwXTD6a9Bh74W4/NIomEAdZjXtTXnHB5vvcZWL7 sQXRtvEwGzQH3laizRvOlhs/KcfRxkB1B2DKFysmbB4uf7Hk5AK2xk5B0rGveF4f Er4R9V/V5GPLEwSDhGdCwrV8RuYQ5ns6/Iy6il+v60GIx3cj3tDXTNPiORi+X2fv vaUBMfA+APgH0oZmesrjK4/AjSu9e3WxYq4UA2Owe08Bj/4uEzIuX/MeBmXNN/79 VX+UwSZei5o0GBXP65hAj80fXKEq17dR6nPfMaS5GiFKEuCbGuL3k8WAzRf26cmy fP6rlQoTdtjHdS3sYs+0LIWnfy2jTzk= -----END CERTIFICATE-----Generated at Wed May 13 11:27:38 2026 by rpki-client