$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9243b82-1930-3e01-9aea-20a07266313e.roa File: c9243b82-1930-3e01-9aea-20a07266313e.roa (raw, json) Hash identifier: A5WD/e1ZJr1APwwirTOlvyHstJPCIZ0/nOIM5FBc4Ck= Subject key identifier: 15:8F:92:5F:BA:76:23:D2:E6:34:C5:04:11:EF:81:DA:95:F2:27:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DBBA064D7570973BF3B52E640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9243b82-1930-3e01-9aea-20a07266313e.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 20940 IP address blocks: 23.38.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:64:d7:57:09:73:bf:3b:52:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=bbde68a5-4831-4776-8640-ea1adea8bd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0f:73:8a:9a:a6:53:0b:f2:44:a7:ca:09:f8: 24:50:6e:77:bb:2c:00:75:c1:0f:39:a7:ae:9b:e4: 32:e0:49:2e:7b:33:6c:d1:20:a6:0f:46:e9:36:f5: dd:4e:aa:c6:9e:58:15:7d:0f:8d:be:57:53:3e:05: a4:da:1f:b2:b0:18:25:ff:f5:f1:b8:21:7d:a8:4d: e3:0a:35:a7:81:3d:4a:3d:56:05:c9:54:86:cf:fb: 26:61:82:a7:56:73:44:27:59:a3:f3:28:6e:f1:fb: 53:6b:ce:e2:c1:a2:75:dc:92:1c:ad:4e:da:03:4e: e3:aa:3c:bf:8d:13:e7:18:fb:5e:bf:6b:6d:bd:f6: 49:ea:6b:ec:4b:6b:ce:b4:c7:a5:27:6f:d3:87:c1: fe:be:62:90:96:f0:92:5d:c9:f6:11:60:eb:9d:20: f9:73:55:cf:63:cb:df:67:ea:04:79:19:19:74:34: d1:35:06:cd:ef:69:21:88:d9:eb:c6:5d:09:94:eb: f0:3a:2f:98:8f:6d:1c:88:66:b8:06:67:7a:3d:20: af:85:a9:ae:ce:d0:c7:1f:e4:06:01:26:c9:8c:e0: fa:73:34:70:db:5c:98:11:c0:c5:c5:e8:d6:b3:73: 51:49:44:6c:20:68:a4:95:cb:47:67:e7:ff:00:c5: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8F:92:5F:BA:76:23:D2:E6:34:C5:04:11:EF:81:DA:95:F2:27:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9243b82-1930-3e01-9aea-20a07266313e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:af:c9:0d:44:9c:8c:18:53:da:a8:60:83:15:1e:dc:d2:35: 43:b6:c9:4b:e3:9a:f2:c4:25:de:5d:5f:6a:76:ad:5b:48:84: 7b:41:2d:6e:4c:43:f5:59:6d:95:70:0e:6c:f2:3b:8b:30:ca: ee:4b:aa:ae:41:cb:69:f2:1c:c3:62:ef:35:64:f9:d0:cf:96: a2:e8:ba:4b:2f:f4:7c:fd:bc:ff:1c:ea:ef:82:05:a8:a9:b2: c4:f4:55:e1:7e:50:25:e7:96:20:02:22:d0:bd:e5:c0:9a:f6: 06:a3:6d:5a:8a:3c:ad:d6:15:4a:cb:e1:b2:5f:21:60:da:7d: 59:d8:e1:03:1e:8e:51:85:4d:72:c5:8d:42:6c:71:ec:d9:58: e8:60:65:32:d3:9b:c7:ba:c7:63:4d:4f:da:20:27:e8:49:89: 73:14:79:ae:ca:47:b7:4e:5e:c2:15:b3:58:d2:7b:64:e1:63: 85:94:30:8b:66:04:18:d6:92:45:4f:ba:57:a0:f5:1c:72:7a: d0:e4:a0:a3:0d:11:86:ef:ab:32:4c:86:9e:4e:78:d4:b7:4c: 15:c5:5c:60:20:86:d3:88:5a:94:01:aa:d1:c3:d9:63:af:26: d1:07:21:d4:3a:32:82:c7:cf:ed:f4:f0:65:35:70:4b:f9:d0: 39:f1:a8:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oGTXVwlzvztS5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk YmJkZTY4YTUtNDgzMS00Nzc2LTg2NDAtZWExYWRlYThiZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ9zipqmUwvyRKfKCfgkUG53uywAdcEPOaeu m+Qy4EkuezNs0SCmD0bpNvXdTqrGnlgVfQ+NvldTPgWk2h+ysBgl//XxuCF9qE3j CjWngT1KPVYFyVSGz/smYYKnVnNEJ1mj8yhu8ftTa87iwaJ13JIcrU7aA07jqjy/ jRPnGPtev2ttvfZJ6mvsS2vOtMelJ2/Th8H+vmKQlvCSXcn2EWDrnSD5c1XPY8vf Z+oEeRkZdDTRNQbN72khiNnrxl0JlOvwOi+Yj20ciGa4Bmd6PSCvhamuztDHH+QG ASbJjOD6czRw21yYEcDFxejWs3NRSURsIGiklctHZ+f/AMUqtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWPkl+6diPS5jTFBBHvgdqV8ifgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzkyNDNiODItMTkzMC0z ZTAxLTlhZWEtMjBhMDcyNjYzMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2vyQ1EnIwYU9qoYIMVHtzSNUO2yUvjmvLEJd5dX2p2rVtIhHtBLW5M Q/VZbZVwDmzyO4swyu5Lqq5By2nyHMNi7zVk+dDPlqLouksv9Hz9vP8c6u+CBaip ssT0VeF+UCXnliACItC95cCa9gajbVqKPK3WFUrL4bJfIWDafVnY4QMejlGFTXLF jUJscezZWOhgZTLTm8e6x2NNT9ogJ+hJiXMUea7KR7dOXsIVs1jSe2ThY4WUMItm BBjWkkVPuleg9RxyetDkoKMNEYbvqzJMhp5OeNS3TBXFXGAghtOIWpQBqtHD2WOv JtEHIdQ6MoLHz+308GU1cEv50DnxqKU= -----END CERTIFICATE-----Generated at Wed May 13 13:29:56 2026 by rpki-client