$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caa1b83f-ea02-3b4a-b16b-5ca25234f07c.roa File: caa1b83f-ea02-3b4a-b16b-5ca25234f07c.roa (raw, json) Hash identifier: dNhx7Y930M6aIY4tJEXljTgJP8qfJWE44vDeZQ1+QYU= Subject key identifier: 8E:1E:C4:93:36:F1:0F:2A:90:80:1F:F6:02:A5:0B:0E:07:C9:DA:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DBFD084DF3F0F8643145CB980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caa1b83f-ea02-3b4a-b16b-5ca25234f07c.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 20940 IP address blocks: 23.48.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:84:df:3f:0f:86:43:14:5c:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=a8ad36f7-568b-4799-95a7-53e6f27dc88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:5a:25:7e:44:0e:a3:1f:4f:47:f4:51:3d: 77:36:8a:f2:45:14:ca:63:32:b8:7e:05:7b:d9:0f: 7a:ba:e2:ad:9b:0e:77:60:96:48:e6:c5:c4:5e:b8: 57:88:8c:41:f3:de:18:02:06:e1:55:ae:b8:cb:42: c0:c7:88:04:fd:02:93:91:41:45:c2:0a:0e:78:05: c9:36:b0:87:93:e7:aa:5e:fb:79:2e:3e:b8:35:ca: 8c:33:58:2f:e2:43:8d:e2:bf:1c:3b:e9:3a:04:0d: 4c:37:0c:29:8b:5a:e1:8f:ae:c9:b3:ff:68:0d:68: 0b:4c:5a:3c:77:41:e0:8a:23:e3:e4:c5:ff:ee:3b: 7e:75:a2:5a:96:c1:a4:82:07:6a:e4:cf:20:d3:f7: 4f:6e:b5:55:4f:30:79:3c:35:5a:cf:4c:b8:ae:99: 23:22:b6:7c:b3:70:d6:af:da:f7:b2:78:db:3e:78: 27:80:1e:db:51:1c:90:24:ba:e4:7b:46:3b:c3:b7: fb:57:9e:f6:c7:50:2e:1b:98:b3:6a:85:bb:42:b4: 5f:be:fd:d1:2d:49:0b:89:e3:41:1c:12:9b:88:2e: d4:bd:63:e6:50:c8:bc:f5:e5:0d:7e:57:46:c5:3e: a3:1f:e6:15:05:46:36:50:43:76:b8:ff:e5:35:6d: a2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:C4:93:36:F1:0F:2A:90:80:1F:F6:02:A5:0B:0E:07:C9:DA:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/caa1b83f-ea02-3b4a-b16b-5ca25234f07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:67:c4:c1:f5:79:c9:ac:5c:01:83:9a:f7:55:93:b4:01:fe: ff:c6:0b:2b:a7:c0:7e:15:db:fc:29:6a:a1:9c:3f:45:5f:e8: 83:0d:25:ac:a5:88:bb:67:03:7d:0f:0a:91:2e:d4:15:4c:e0: 87:5f:ff:29:95:d8:b3:62:7a:94:ca:25:f5:ed:62:52:53:1b: e3:77:a5:1f:e5:6a:83:96:89:f2:0f:1e:46:97:55:3b:97:4a: 1b:bd:7e:61:72:e1:69:bd:f6:f0:1a:8d:02:53:7e:a4:16:6a: 15:cb:49:c1:35:fb:01:75:68:88:e2:f3:14:82:31:8c:c4:ea: 08:36:a6:ed:c9:4a:f7:0f:ff:6f:27:80:2b:2b:4f:09:7b:63: b7:6d:89:9e:7e:6f:31:97:22:30:a9:e3:fe:f9:40:1c:d2:e7: bc:fb:3e:20:aa:7d:64:52:2a:ec:1e:b1:1a:a0:d3:26:8c:ec: a7:33:f7:5d:99:07:9b:8b:36:8e:11:ba:b1:c6:1e:ee:1c:6a: 22:32:47:80:46:f2:61:c2:fe:57:73:9e:e0:eb:26:c5:74:64: 34:8b:80:67:00:0a:5d:a6:a8:dd:93:14:cf:2b:47:dd:60:c7: 4d:b6:d2:66:68:2f:ba:b7:e2:68:0c:15:98:e5:79:ca:cf:fb: ca:99:dc:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0ITfPw+GQxRcuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk YThhZDM2ZjctNTY4Yi00Nzk5LTk1YTctNTNlNmYyN2RjODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL1aJX5EDqMfT0f0UT13NoryRRTKYzK4fgV7 2Q96uuKtmw53YJZI5sXEXrhXiIxB894YAgbhVa64y0LAx4gE/QKTkUFFwgoOeAXJ NrCHk+eqXvt5Lj64NcqMM1gv4kON4r8cO+k6BA1MNwwpi1rhj67Js/9oDWgLTFo8 d0HgiiPj5MX/7jt+daJalsGkggdq5M8g0/dPbrVVTzB5PDVaz0y4rpkjIrZ8s3DW r9r3snjbPngngB7bURyQJLrke0Y7w7f7V572x1AuG5izaoW7QrRfvv3RLUkLieNB HBKbiC7UvWPmUMi89eUNfldGxT6jH+YVBUY2UEN2uP/lNW2iKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4exJM28Q8qkIAf9gKlCw4HydqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FhMWI4M2YtZWEwMi0z YjRhLWIxNmItNWNhMjUyMzRmMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtnxMH1ecmsXAGDmvdVk7QB/v/GCyunwH4V2/wpaqGcP0Vf6IMNJayl iLtnA30PCpEu1BVM4Idf/ymV2LNiepTKJfXtYlJTG+N3pR/laoOWifIPHkaXVTuX Shu9fmFy4Wm99vAajQJTfqQWahXLScE1+wF1aIji8xSCMYzE6gg2pu3JSvcP/28n gCsrTwl7Y7dtiZ5+bzGXIjCp4/75QBzS57z7PiCqfWRSKuwesRqg0yaM7Kcz912Z B5uLNo4RurHGHu4caiIyR4BG8mHC/ldznuDrJsV0ZDSLgGcACl2mqN2TFM8rR91g x0220mZoL7q34mgMFZjlecrP+8qZ3MA= -----END CERTIFICATE-----Generated at Wed May 13 05:10:09 2026 by rpki-client