$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8986a54-213f-31d7-993f-7a80ac50326c.roa File: c8986a54-213f-31d7-993f-7a80ac50326c.roa (raw, json) Hash identifier: WzX069MQfBh8EBzfTFmTQoooUoMYDMy2f6mog4OpH+4= Subject key identifier: 76:C4:B8:9F:75:44:DF:46:73:14:83:C5:AB:B0:B0:82:CD:3E:D6:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DBD05AB39D6251F7C19DA7500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8986a54-213f-31d7-993f-7a80ac50326c.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.43.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:ab:39:d6:25:1f:7c:19:da:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=5fef4f2d-9231-45de-b3ec-00d82d4af7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b2:4f:d8:d2:73:79:07:2e:f3:ae:84:45:2b: cf:d3:00:a7:48:d2:dd:c7:aa:de:d2:bc:75:96:1c: 74:43:6f:4e:4c:60:f9:1f:50:7c:eb:ee:4f:cc:62: d1:ab:49:ed:1d:0f:e0:b4:6d:1d:c1:bc:76:78:b6: 05:07:7c:c6:6c:44:20:08:fe:d8:53:82:85:66:20: 70:a7:63:49:d3:26:8d:1e:16:ee:e8:16:f5:30:8a: 5c:4c:e9:21:f9:42:bf:51:6c:eb:fd:82:08:5f:90: 1c:47:fd:9f:2c:a6:ca:01:93:ee:d6:4a:45:66:19: d8:16:ec:e6:29:58:25:a9:0e:54:9b:a2:78:d1:e9: 80:b7:22:b8:99:7e:26:23:aa:58:df:29:3a:e0:63: 34:ff:ee:a6:9c:d0:49:50:ce:84:0e:55:37:3e:e6: 2e:41:70:88:05:d0:e4:39:e7:b1:68:9f:24:09:2b: 65:ca:dc:7b:2e:de:7f:14:42:a5:5d:ba:51:e0:35: 53:4d:c5:88:5f:ca:5b:22:ad:6c:3c:4d:b7:23:ad: e9:85:d5:96:d0:44:59:6a:47:af:c8:1c:82:d3:96: d1:67:93:a7:34:9c:78:2e:dd:54:79:f6:9f:e3:e0: 3d:87:94:60:6c:0e:5e:4e:51:1d:63:24:94:82:9f: 8d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C4:B8:9F:75:44:DF:46:73:14:83:C5:AB:B0:B0:82:CD:3E:D6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8986a54-213f-31d7-993f-7a80ac50326c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:15:be:49:2b:d8:6f:76:a8:35:57:d6:d6:a5:60:6f:d5:25: 03:97:47:29:cc:ce:21:85:11:0a:7a:5f:1d:64:7b:23:52:71: 96:c0:76:e7:8b:d1:74:95:0b:b3:03:65:29:0c:9e:e0:88:84: be:87:a1:fa:c3:a9:ed:f0:a9:7f:53:49:09:a1:77:7c:dc:32: 83:e8:85:d1:5b:05:e7:ac:ed:61:a6:6e:8e:d6:43:6f:e2:bb: 5e:01:b7:d5:16:93:2c:1e:d8:f4:53:4f:5c:52:ff:09:00:f7: c4:ba:98:d0:79:b5:9d:52:e5:ea:5f:53:cd:e2:76:1e:af:38: 5b:5d:09:35:8a:93:6a:93:5d:07:77:8c:4f:3c:6a:9d:b5:6d: a7:cd:a6:e8:50:67:64:53:45:07:8a:e9:1b:bd:21:67:22:d0: 54:7c:e8:19:d0:f6:07:a7:be:99:a1:fb:b3:b9:67:57:df:c9: b1:56:3a:e6:4c:e5:36:14:7c:16:4e:b2:c7:fb:31:31:2f:d6: bd:92:44:b0:58:2f:32:b4:2c:74:e8:e2:88:59:8d:8f:ef:64: 93:e8:db:6f:e8:9a:22:3a:90:75:f2:1e:76:0e:d9:13:62:94: a3:b3:0b:48:26:0f:35:8e:4f:30:a7:c7:ff:82:96:13:18:ab: 61:80:cf:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29Bas51iUffBnadQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk NWZlZjRmMmQtOTIzMS00NWRlLWIzZWMtMDBkODJkNGFmN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprJP2NJzeQcu866ERSvP0wCnSNLdx6re0rx1 lhx0Q29OTGD5H1B86+5PzGLRq0ntHQ/gtG0dwbx2eLYFB3zGbEQgCP7YU4KFZiBw p2NJ0yaNHhbu6Bb1MIpcTOkh+UK/UWzr/YIIX5AcR/2fLKbKAZPu1kpFZhnYFuzm KVglqQ5Um6J40emAtyK4mX4mI6pY3yk64GM0/+6mnNBJUM6EDlU3PuYuQXCIBdDk OeexaJ8kCStlytx7Lt5/FEKlXbpR4DVTTcWIX8pbIq1sPE23I63phdWW0ERZakev yByC05bRZ5OnNJx4Lt1Uefaf4+A9h5RgbA5eTlEdYySUgp+NJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbEuJ91RN9GcxSDxauwsILNPtYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg5ODZhNTQtMjEzZi0z MWQ3LTk5M2YtN2E4MGFjNTAzMjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwVvkkr2G92qDVX1talYG/VJQOXRynMziGFEQp6Xx1keyNScZbAdueL 0XSVC7MDZSkMnuCIhL6HofrDqe3wqX9TSQmhd3zcMoPohdFbBees7WGmbo7WQ2/i u14Bt9UWkywe2PRTT1xS/wkA98S6mNB5tZ1S5epfU83idh6vOFtdCTWKk2qTXQd3 jE88ap21bafNpuhQZ2RTRQeK6Ru9IWci0FR86BnQ9genvpmh+7O5Z1ffybFWOuZM 5TYUfBZOssf7MTEv1r2SRLBYLzK0LHTo4ohZjY/vZJPo22/omiI6kHXyHnYO2RNi lKOzC0gmDzWOTzCnx/+ClhMYq2GAz6s= -----END CERTIFICATE-----Generated at Wed May 13 11:16:53 2026 by rpki-client