$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa872ca3-603f-382b-8488-d4822f05e521.roa File: aa872ca3-603f-382b-8488-d4822f05e521.roa (raw, json) Hash identifier: xDhTTFQudVsxZobJ5JR3jZGgODo4I604PGyhNpz+uMA= Subject key identifier: 9C:86:17:48:03:E2:DA:6C:9A:C2:E6:19:70:5F:4E:CF:46:0E:44:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DADAAE8820B249AEA8B425530 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa872ca3-603f-382b-8488-d4822f05e521.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 35994 IP address blocks: 23.32.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e8:82:0b:24:9a:ea:8b:42:55:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=17d7b090-3b10-4f96-ab19-c6b7252964f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:22:ad:e9:0a:f6:c5:b6:43:fd:82:66:f9:22: 3f:7f:ad:39:93:bc:ff:82:3a:62:cd:06:fa:56:7f: 21:16:99:b4:cd:cd:a1:81:57:73:5a:f8:61:c4:47: 4b:84:6b:67:c5:b1:96:db:22:da:52:80:b6:c2:7c: b4:51:6b:8e:4e:f3:74:c8:7f:af:f4:b9:47:6e:16: 73:7a:95:ab:9c:bf:ef:a7:09:4c:e0:05:00:09:85: df:d3:d6:ec:04:2e:09:db:61:3e:ef:a1:34:e3:45: 83:a0:0b:b8:e5:ac:9a:e7:18:2d:e1:bd:2a:1e:01: 70:05:8f:73:05:32:9c:82:e7:0e:59:75:75:bd:ef: c8:83:34:7a:01:df:0b:8b:1e:3e:5a:88:73:9c:d5: ef:06:de:c9:bf:20:b6:01:1a:4b:d1:36:c9:44:a7: 06:d7:f1:89:67:5d:f5:e2:79:1a:e2:5a:14:06:63: 13:c2:0d:83:e7:73:a3:d7:1a:15:7a:a3:db:f5:35: e4:32:41:06:1e:67:46:57:18:51:70:d4:da:21:93: ad:ae:7f:43:cd:7c:ab:78:24:35:c0:b9:5e:e3:9d: 2b:77:e6:26:f3:08:03:98:a9:ab:d3:0f:31:a6:46: 9c:7d:05:4d:b3:d2:2d:5a:67:bd:9d:7d:9e:c8:b0: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:86:17:48:03:E2:DA:6C:9A:C2:E6:19:70:5F:4E:CF:46:0E:44:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa872ca3-603f-382b-8488-d4822f05e521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e5:57:57:57:d8:f5:45:63:a7:3b:de:84:84:e1:1c:d9:0c: bb:15:68:2e:05:c1:ca:a7:f5:8e:11:1b:0b:a7:1d:06:92:4f: c2:35:47:43:74:90:a2:1f:2b:df:b4:d2:29:75:f5:32:a7:00: 5e:f5:91:39:de:d0:41:89:bd:3b:0e:d8:64:c7:6d:96:57:60: 18:1a:9c:16:30:54:07:ac:a2:94:1f:d0:58:0c:e4:2e:f1:61: 4f:fe:79:b4:37:16:00:4b:87:f2:da:84:d9:02:9c:50:4d:f7: b6:6b:59:e2:7e:9b:be:90:47:ec:91:3b:fa:76:79:e3:f8:e9: 96:e2:87:ee:82:60:17:83:c8:f3:26:37:62:30:1f:70:06:07: fe:ba:01:6e:ad:2b:06:8a:21:f9:4d:ab:f0:32:01:ae:09:a4: a3:a0:96:25:08:a8:5f:71:42:0d:06:5a:f1:b4:27:dc:2c:bf: d4:ed:cb:1a:1f:21:cc:64:6c:85:08:04:0d:6b:66:e2:4d:d7: e8:4f:08:d8:dd:d1:ba:fb:75:bc:8c:19:f5:44:62:a6:34:f8: 42:82:15:29:96:c3:f7:40:4a:d0:3b:59:5a:23:6f:b1:5c:60: ba:9b:c1:50:ce:26:9c:36:18:b6:fc:47:de:da:96:ad:b3:14: 93:00:20:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tquiCCySa6otCVTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MTdkN2IwOTAtM2IxMC00Zjk2LWFiMTktYzZiNzI1Mjk2NGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SKt6Qr2xbZD/YJm+SI/f605k7z/gjpizQb6 Vn8hFpm0zc2hgVdzWvhhxEdLhGtnxbGW2yLaUoC2wny0UWuOTvN0yH+v9LlHbhZz epWrnL/vpwlM4AUACYXf09bsBC4J22E+76E040WDoAu45aya5xgt4b0qHgFwBY9z BTKcgucOWXV1ve/IgzR6Ad8Lix4+WohznNXvBt7JvyC2ARpL0TbJRKcG1/GJZ131 4nka4loUBmMTwg2D53Oj1xoVeqPb9TXkMkEGHmdGVxhRcNTaIZOtrn9DzXyreCQ1 wLle450rd+Ym8wgDmKmr0w8xpkacfQVNs9ItWme9nX2eyLDfCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyGF0gD4tpsmsLmGXBfTs9GDkTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE4NzJjYTMtNjAzZi0z ODJiLTg0ODgtZDQ4MjJmMDVlNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjlV1dX2PVFY6c73oSE4RzZDLsVaC4Fwcqn9Y4RGwunHQaST8I1R0N0 kKIfK9+00il19TKnAF71kTne0EGJvTsO2GTHbZZXYBganBYwVAesopQf0FgM5C7x YU/+ebQ3FgBLh/LahNkCnFBN97ZrWeJ+m76QR+yRO/p2eeP46Zbih+6CYBeDyPMm N2IwH3AGB/66AW6tKwaKIflNq/AyAa4JpKOgliUIqF9xQg0GWvG0J9wsv9Ttyxof IcxkbIUIBA1rZuJN1+hPCNjd0br7dbyMGfVEYqY0+EKCFSmWw/dAStA7WVojb7Fc YLqbwVDOJpw2GLb8R97alq2zFJMAIEk= -----END CERTIFICATE-----Generated at Wed May 13 12:26:35 2026 by rpki-client