$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa File: ba5d2792-5be8-3b48-878e-d276c8a625d0.roa (raw, json) Hash identifier: Lb/8PgMRq/jtBm0qyRIKBU2uen72j4RSEfiHsHEkrvU= Subject key identifier: D4:2D:D6:B5:10:9E:62:8A:FE:12:0A:D9:BB:89:B0:3B:20:C6:62:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DBBA05B5B49ED1BC83DC94080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.37.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:5b:5b:49:ed:1b:c8:3d:c9:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=6e4b0af1-5f8a-438d-bc35-c499345e6cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:16:86:c9:0e:db:ba:71:3f:1b:11:ac:93:14: 66:b4:da:af:56:a3:65:c6:ad:90:97:24:0a:e2:8d: 1c:c7:50:0e:ac:9d:62:35:30:9e:f4:10:25:ce:93: 5d:2c:8e:a4:7c:f4:c4:d4:e1:b3:97:3a:0a:26:b4: 69:6e:6a:fc:92:21:29:76:95:88:d9:d5:38:f8:1f: d9:aa:67:c8:1e:a2:63:0b:5c:b3:85:c2:87:f9:80: 0e:a6:14:32:47:4f:3d:b3:e5:b0:54:43:08:f1:e4: 39:75:18:89:a2:ac:c1:ec:66:62:f9:7e:e2:37:8f: db:2f:f4:57:40:57:4f:bd:04:0c:98:65:d6:a0:c9: 3f:dc:87:76:b4:f0:f9:b4:96:ca:9e:55:7c:57:66: 1a:d5:1b:97:75:da:8b:ca:09:82:e6:61:68:76:d7: f0:b5:32:8d:c6:6a:38:dd:86:14:57:ee:b3:2b:d7: 3f:ab:94:2f:f2:cf:78:22:e3:11:b5:99:b2:2e:12: ca:b4:b4:40:19:22:4e:e5:41:47:df:4b:e7:ae:6a: a6:11:6c:d3:bd:11:55:e1:3c:63:9c:03:f3:79:e8: ea:8d:e1:6e:40:16:85:73:9f:cd:db:d7:b9:5e:bc: cf:a1:5c:fb:27:e5:d5:68:97:75:0a:9c:17:b6:d4: 25:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2D:D6:B5:10:9E:62:8A:FE:12:0A:D9:BB:89:B0:3B:20:C6:62:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ca:3b:d9:37:89:92:3b:5b:fd:ac:2b:31:c7:cc:c5:05:df: 91:6e:89:b7:3c:6a:6e:95:86:65:34:ed:a0:a0:d5:e6:0f:1f: 82:38:7b:e7:0e:6b:08:7c:6d:8b:95:5b:b8:e8:f3:2f:9e:3b: 46:64:ce:93:9b:61:28:fc:ef:10:be:c8:80:f3:eb:9a:24:7c: 36:1e:dd:c8:9a:b6:0b:44:35:03:b8:80:a1:f7:eb:6b:e2:8b: 5d:3c:4a:0f:fc:80:75:70:63:8f:cc:eb:f0:4b:ce:ba:17:26: f4:64:1a:3a:99:4a:78:1b:28:6e:31:af:3e:a8:dd:76:82:1f: ce:17:0d:33:b4:03:90:68:e3:d2:1b:76:af:a0:11:08:7b:56: 2b:e2:b8:70:df:88:c2:e2:d8:f9:14:d5:a8:44:65:d8:a8:d6: f0:2b:09:25:1b:20:45:67:76:5e:33:ab:43:90:8a:19:97:60: 9a:ca:d2:5a:f8:e6:5c:88:aa:56:64:33:dd:88:c3:9f:92:7d: ba:c9:02:04:65:a3:34:d8:2f:81:08:54:bc:d6:4d:8e:1e:f0: 81:49:5c:45:0c:d7:06:2c:25:4b:fa:7c:0e:15:79:02:80:3e: b8:a4:c4:21:3a:fe:7e:15:71:5a:c0:8d:20:be:d8:41:47:fb: 43:f4:24:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oFtbSe0byD3JQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk NmU0YjBhZjEtNWY4YS00MzhkLWJjMzUtYzQ5OTM0NWU2Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBaGyQ7bunE/GxGskxRmtNqvVqNlxq2QlyQK 4o0cx1AOrJ1iNTCe9BAlzpNdLI6kfPTE1OGzlzoKJrRpbmr8kiEpdpWI2dU4+B/Z qmfIHqJjC1yzhcKH+YAOphQyR089s+WwVEMI8eQ5dRiJoqzB7GZi+X7iN4/bL/RX QFdPvQQMmGXWoMk/3Id2tPD5tJbKnlV8V2Ya1RuXddqLygmC5mFodtfwtTKNxmo4 3YYUV+6zK9c/q5Qv8s94IuMRtZmyLhLKtLRAGSJO5UFH30vnrmqmEWzTvRFV4Txj nAPzeejqjeFuQBaFc5/N29e5XrzPoVz7J+XVaJd1CpwXttQlZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQt1rUQnmKK/hIK2buJsDsgxmKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmE1ZDI3OTItNWJlOC0z YjQ4LTg3OGUtZDI3NmM4YTYyNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbKO9k3iZI7W/2sKzHHzMUF35Fuibc8am6VhmU07aCg1eYPH4I4e+cO awh8bYuVW7jo8y+eO0ZkzpObYSj87xC+yIDz65okfDYe3ciatgtENQO4gKH362vi i108Sg/8gHVwY4/M6/BLzroXJvRkGjqZSngbKG4xrz6o3XaCH84XDTO0A5Bo49Ib dq+gEQh7ViviuHDfiMLi2PkU1ahEZdio1vArCSUbIEVndl4zq0OQihmXYJrK0lr4 5lyIqlZkM92Iw5+SfbrJAgRlozTYL4EIVLzWTY4e8IFJXEUM1wYsJUv6fA4VeQKA PrikxCE6/n4VcVrAjSC+2EFH+0P0JLE= -----END CERTIFICATE-----Generated at Wed May 13 07:55:13 2026 by rpki-client