$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7a11b76-43b9-39d7-8a55-3d6e80b43171.roa File: f7a11b76-43b9-39d7-8a55-3d6e80b43171.roa (raw, json) Hash identifier: w+26SnxqzNsF/n34bkhlg7Ft7GmBpzZGKDbr1Fv5mLA= Subject key identifier: CE:02:20:34:41:28:A0:E7:11:52:3B:96:30:47:4E:20:57:32:9B:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DADAAE4FFD4FF1E5842911C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7a11b76-43b9-39d7-8a55-3d6e80b43171.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 16625 IP address blocks: 23.32.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:e4:ff:d4:ff:1e:58:42:91:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=100e9fc6-4833-4cda-a750-35d4465dfd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fd:60:58:40:11:b2:eb:71:e8:6b:01:89:6b: a2:a7:82:51:b0:03:1a:84:15:9d:93:2c:48:14:0a: c3:96:73:d7:46:fe:7f:6a:2e:77:6a:dc:7e:02:fa: da:32:34:48:ac:a1:32:26:09:48:b9:aa:a0:52:be: 76:fd:25:93:a2:73:cf:f1:ee:19:18:71:60:b4:87: 4c:1b:ae:fb:56:a5:63:4a:60:bc:d7:fd:a4:eb:6f: dd:a9:01:14:d4:e1:10:67:ce:1c:a7:03:25:d3:7e: 97:ea:3d:5a:0e:f1:00:a0:b0:00:9e:0e:71:9d:31: 2f:b4:5c:d0:48:79:84:12:a4:ee:99:b2:0e:d3:99: 75:82:de:49:b7:f1:3d:12:bf:71:31:38:1e:75:cd: 9b:33:7e:1f:c8:85:58:6c:fb:e3:cd:9c:a5:b8:e8: 2f:88:8f:bc:60:00:10:8c:c8:37:1c:29:18:f5:22: 09:ce:62:55:7a:04:a7:34:04:10:a5:7f:cc:40:52: cf:c5:e9:e6:d1:30:0c:8b:8a:9d:6d:c2:bd:08:6d: a2:77:34:92:b6:1b:07:a9:a4:44:e0:06:b5:f9:3b: 6a:ae:1b:62:af:3c:72:bd:84:b8:97:02:ca:92:42: f4:56:48:47:6d:eb:89:16:a0:7e:1a:83:78:b6:75: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:02:20:34:41:28:A0:E7:11:52:3B:96:30:47:4E:20:57:32:9B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f7a11b76-43b9-39d7-8a55-3d6e80b43171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:10:19:60:32:7f:e4:e0:6d:1d:67:bf:a0:45:82:a0:fe:c2: db:92:a5:d0:85:14:0a:91:21:cc:6c:0e:a3:95:3a:a1:19:93: 03:de:50:09:b1:ea:df:9c:85:93:72:b3:0e:f2:f6:7e:2a:cf: b4:51:36:62:83:6b:e8:77:82:27:79:0e:d7:89:57:46:7d:6f: 16:4b:36:5b:52:aa:52:05:16:7d:00:e4:20:e9:d1:56:a4:79: eb:aa:9b:d3:c8:51:e1:60:e4:72:65:bd:e7:b4:dd:ff:18:4d: e9:5c:75:f7:0c:84:96:67:94:88:dc:f0:60:c9:14:b8:08:15: d6:34:da:aa:c0:d0:47:81:0e:b5:c7:09:4d:b4:4d:7f:0a:0d: 2d:ae:66:3b:32:7a:9d:34:fa:4f:ad:31:87:35:8e:e9:fa:c6: c2:59:75:a6:1b:54:0d:a9:4c:43:a4:00:3e:96:c5:50:2f:5b: dd:6a:36:19:23:b6:a7:6d:5d:d6:e4:ab:74:5c:b5:0f:c7:28: a0:4a:9b:db:46:4b:cb:ce:d9:66:69:51:df:5f:ae:16:c3:40: 0e:e6:b9:16:c4:2a:f8:5b:22:8b:06:bb:64:f1:49:5a:4b:1f: de:7f:30:3c:f8:ba:2f:27:03:5b:28:94:b7:b0:fc:4f:f5:7c: 4b:bc:f9:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tquT/1P8eWEKRHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MTAwZTlmYzYtNDgzMy00Y2RhLWE3NTAtMzVkNDQ2NWRmZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf1gWEARsutx6GsBiWuip4JRsAMahBWdkyxI FArDlnPXRv5/ai53atx+AvraMjRIrKEyJglIuaqgUr52/SWTonPP8e4ZGHFgtIdM G677VqVjSmC81/2k62/dqQEU1OEQZ84cpwMl036X6j1aDvEAoLAAng5xnTEvtFzQ SHmEEqTumbIO05l1gt5Jt/E9Er9xMTgedc2bM34fyIVYbPvjzZyluOgviI+8YAAQ jMg3HCkY9SIJzmJVegSnNAQQpX/MQFLPxenm0TAMi4qdbcK9CG2idzSSthsHqaRE 4Aa1+TtqrhtirzxyvYS4lwLKkkL0VkhHbeuJFqB+GoN4tnW5+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4CIDRBKKDnEVI7ljBHTiBXMpuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjdhMTFiNzYtNDNiOS0z OWQ3LThhNTUtM2Q2ZTgwYjQzMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8QGWAyf+TgbR1nv6BFgqD+wtuSpdCFFAqRIcxsDqOVOqEZkwPeUAmx 6t+chZNysw7y9n4qz7RRNmKDa+h3gid5DteJV0Z9bxZLNltSqlIFFn0A5CDp0Vak eeuqm9PIUeFg5HJlvee03f8YTelcdfcMhJZnlIjc8GDJFLgIFdY02qrA0EeBDrXH CU20TX8KDS2uZjsyep00+k+tMYc1jun6xsJZdaYbVA2pTEOkAD6WxVAvW91qNhkj tqdtXdbkq3RctQ/HKKBKm9tGS8vO2WZpUd9frhbDQA7muRbEKvhbIosGu2TxSVpL H95/MDz4ui8nA1solLew/E/1fEu8+f8= -----END CERTIFICATE-----Generated at Wed May 13 08:27:08 2026 by rpki-client