$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afefd870-79c4-39ba-abeb-37b3457e8c41.roa File: afefd870-79c4-39ba-abeb-37b3457e8c41.roa (raw, json) Hash identifier: vNrDjX980YmeZYLv5cSjYrJcIZzYTB4C33P+opiwV10= Subject key identifier: 7B:C0:18:17:DB:C0:5F:F7:93:C7:E2:1D:24:1C:71:0F:01:64:28:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DADAAE89AFF1B13724A4A7880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afefd870-79c4-39ba-abeb-37b3457e8c41.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.32.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e8:9a:ff:1b:13:72:4a:4a:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=a470b277-aeba-402b-b5fd-cb9e1b5f6300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:41:89:97:01:c6:27:85:24:0c:30:79:fc: e3:ed:1d:48:15:ae:8e:5b:0f:8b:a9:cf:7d:b1:33: 76:d3:2c:4f:85:02:8c:1e:ee:3c:d1:64:ca:45:f7: 40:48:18:91:e5:73:b6:ca:21:05:3a:b2:81:d4:b3: 88:98:ec:d7:4d:d2:db:e5:1f:b6:23:ea:90:96:8f: f0:17:7c:c6:ec:61:ff:89:2f:1c:67:f3:d8:0c:8e: c8:a3:8e:30:e6:b3:e1:4c:42:ce:68:b8:48:17:39: 00:3d:b5:bf:fb:18:05:20:8d:df:44:73:40:43:1d: 53:54:99:e0:f0:4e:69:01:5f:0f:74:ac:85:51:e0: 2d:b0:08:2e:41:34:28:1a:30:43:45:19:f7:fd:91: 59:6f:8a:ee:c7:30:d5:f8:90:43:e1:34:82:65:6f: 86:dd:2c:60:6f:a2:80:1d:71:9c:27:9f:f4:a6:97: f5:2d:34:bd:4d:cb:46:f0:d2:ed:41:3e:fc:84:37: 9d:ce:76:c2:0b:a9:15:da:3e:93:60:0d:2b:76:88: 61:a3:ca:b2:9a:88:30:4a:6c:94:fc:3a:ef:fc:48: 79:c0:c8:1b:7a:82:e1:26:26:df:f8:6c:4d:80:d4: f9:52:17:cb:f1:20:5f:6f:15:57:e4:c0:c7:a4:60: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C0:18:17:DB:C0:5F:F7:93:C7:E2:1D:24:1C:71:0F:01:64:28:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afefd870-79c4-39ba-abeb-37b3457e8c41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:31:a9:5c:87:16:e7:18:61:cb:b4:80:97:10:35:95:eb:43: db:78:f7:74:34:55:87:5d:cd:00:18:56:a2:de:0f:a7:5c:c9: 1a:da:0d:0b:02:f9:a1:22:a1:ec:c7:13:51:75:d2:14:a4:72: 59:47:28:9a:ed:d1:20:59:d6:e9:f5:7c:3d:ec:c7:14:c9:61: af:bb:61:7f:e0:49:5b:c5:69:a7:44:1c:c6:69:e5:43:74:90: b7:71:38:94:96:e1:c5:10:4e:3c:2a:82:d3:4b:a9:17:62:e7: 90:60:4e:e3:b1:3b:2f:91:d3:88:b1:d7:f0:6a:1d:bf:f0:92: 79:ec:e4:0d:ae:8b:06:04:87:c3:d6:d5:3e:2b:ea:3f:cd:8c: a6:f6:df:51:af:52:40:2a:e9:3e:8d:7e:83:a1:70:b1:d7:70: 01:0b:ba:ee:d0:ea:5c:c6:c7:2d:93:e1:b6:65:1f:6d:d7:a2: 23:cc:9b:a5:2d:c8:83:c2:ab:a3:43:c3:56:94:a0:91:5e:7f: f9:18:c5:d6:d3:8d:ab:bf:d4:53:f8:d8:bc:3b:ab:e8:66:bd: 8c:86:81:89:e8:05:44:c2:5e:cd:1d:3a:48:b8:d0:46:b1:f3: 30:3f:9e:de:9d:53:cb:bc:fd:41:ce:04:64:77:2d:6b:a4:43: e1:84:3c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tquia/xsTckpKeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk YTQ3MGIyNzctYWViYS00MDJiLWI1ZmQtY2I5ZTFiNWY2MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAtBiZcBxieFJAwwefzj7R1IFa6OWw+Lqc99 sTN20yxPhQKMHu480WTKRfdASBiR5XO2yiEFOrKB1LOImOzXTdLb5R+2I+qQlo/w F3zG7GH/iS8cZ/PYDI7Io44w5rPhTELOaLhIFzkAPbW/+xgFII3fRHNAQx1TVJng 8E5pAV8PdKyFUeAtsAguQTQoGjBDRRn3/ZFZb4ruxzDV+JBD4TSCZW+G3Sxgb6KA HXGcJ5/0ppf1LTS9TctG8NLtQT78hDedznbCC6kV2j6TYA0rdohho8qymogwSmyU /Drv/Eh5wMgbeoLhJibf+GxNgNT5UhfL8SBfbxVX5MDHpGCy+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvAGBfbwF/3k8fiHSQccQ8BZChYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZlZmQ4NzAtNzljNC0z OWJhLWFiZWItMzdiMzQ1N2U4YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4xqVyHFucYYcu0gJcQNZXrQ9t493Q0VYddzQAYVqLeD6dcyRraDQsC +aEioezHE1F10hSkcllHKJrt0SBZ1un1fD3sxxTJYa+7YX/gSVvFaadEHMZp5UN0 kLdxOJSW4cUQTjwqgtNLqRdi55BgTuOxOy+R04ix1/BqHb/wknns5A2uiwYEh8PW 1T4r6j/NjKb231GvUkAq6T6NfoOhcLHXcAELuu7Q6lzGxy2T4bZlH23XoiPMm6Ut yIPCq6NDw1aUoJFef/kYxdbTjau/1FP42Lw7q+hmvYyGgYnoBUTCXs0dOki40Eax 8zA/nt6dU8u8/UHOBGR3LWukQ+GEPFc= -----END CERTIFICATE-----Generated at Wed May 13 09:13:43 2026 by rpki-client