$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa File: 5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa (raw, json) Hash identifier: 6WGHfU0nYTy+u2jlz0caSzjQ5voCdG0qVfOH26bAoxk= Subject key identifier: 76:BA:83:62:89:96:78:D1:27:BE:BF:C9:D4:F8:55:99:F7:5B:F4:E5 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584DBA3B03AE03D99DB824108D80 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 31898 IP address blocks: 23.239.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:03:ae:03:d9:9d:b8:24:10:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=18d95d26-3fd8-4dcd-8fd3-d042a7b41fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:70:bf:5b:6c:a3:fc:f7:b7:e7:1a:72:e6:c7: 05:e0:4e:79:5e:0c:e7:ef:38:44:6e:6d:ab:25:52: a3:ec:95:c0:42:2e:89:74:6f:bc:33:1b:95:62:19: af:8c:83:d9:9e:d7:a5:d6:5b:e5:57:a0:e8:37:9e: a6:62:52:4b:91:6d:2b:c6:11:bf:2e:c9:3f:4c:da: a2:93:5c:3d:0f:ca:dc:42:ed:b8:ef:5a:28:22:f5: a5:a4:36:a5:c0:51:d3:d3:c2:2e:ea:0a:cd:c0:d6: 5d:8f:df:fb:c9:f1:55:57:61:b3:79:21:ef:c8:d1: 4d:53:c0:e4:2c:c7:14:9d:3a:3d:9c:4d:3f:d9:5c: 4e:38:63:6c:dd:1f:76:07:27:61:b4:34:09:79:ea: 75:89:82:9f:a6:69:13:8b:75:ea:95:a1:05:ef:8a: 37:19:20:48:b9:0f:35:b9:3f:47:5c:3a:67:b1:79: fd:3a:bf:bd:71:24:fe:b0:e5:94:d9:16:88:92:ab: 88:fe:3c:cc:c5:78:7e:5b:a1:78:0f:20:09:4b:d7: 66:64:c5:b9:c4:97:0c:9f:9e:91:cd:d8:44:1b:70: 49:37:17:54:8f:de:bd:b5:1e:c3:cb:46:36:46:16: 32:a1:a5:53:0f:8d:8c:3a:31:14:00:d3:d8:05:d9: df:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BA:83:62:89:96:78:D1:27:BE:BF:C9:D4:F8:55:99:F7:5B:F4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:03:60:53:ee:a0:74:d9:c2:03:b3:32:a0:59:a7:9f:5d:83: 80:6b:9e:4e:25:4e:76:fe:5c:08:5d:bb:56:6e:18:a7:39:4c: cd:c7:c6:44:85:e5:b7:61:77:de:03:a0:90:6f:27:3f:ad:d1: 9c:2b:89:b2:b2:d8:be:1d:d1:d4:73:72:85:e1:5d:d3:6b:6a: 11:a8:2b:fa:74:4e:43:2c:e6:1a:f2:16:cf:84:d6:f5:5c:4f: d4:f8:7d:89:4b:7c:f2:6d:76:58:1a:5b:ed:ee:da:cd:17:d4: f2:45:9c:87:77:f6:ad:f4:49:a4:0d:c8:80:df:c2:52:4f:9d: 31:1f:2a:bf:ae:50:69:a1:d7:8a:84:c3:fc:d0:bc:9f:6f:74: 47:86:5e:9f:43:79:06:fe:af:1a:ab:8c:12:7e:a7:ab:59:f3: e4:48:6e:2d:4e:b6:b0:72:4b:27:39:20:04:cf:5a:37:55:58: 15:a8:9c:16:ab:04:03:68:fc:6b:e0:af:ec:fa:e3:47:93:9f: 88:9c:f1:80:c8:ca:d0:20:6d:af:5a:3a:85:f6:ea:64:72:be: 8b:8c:fd:69:1f:e3:64:8e:0e:4d:b6:9a:9b:13:f2:ac:60:a1: 09:53:ae:c3:49:f9:f8:8e:1c:c9:e3:ff:53:58:0e:77:50:98: 83:98:0d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OwOuA9mduCQQjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk MThkOTVkMjYtM2ZkOC00ZGNkLThmZDMtZDA0MmE3YjQxZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3C/W2yj/Pe35xpy5scF4E55Xgzn7zhEbm2r JVKj7JXAQi6JdG+8MxuVYhmvjIPZntel1lvlV6DoN56mYlJLkW0rxhG/Lsk/TNqi k1w9D8rcQu2471ooIvWlpDalwFHT08Iu6grNwNZdj9/7yfFVV2GzeSHvyNFNU8Dk LMcUnTo9nE0/2VxOOGNs3R92BydhtDQJeep1iYKfpmkTi3XqlaEF74o3GSBIuQ81 uT9HXDpnsXn9Or+9cST+sOWU2RaIkquI/jzMxXh+W6F4DyAJS9dmZMW5xJcMn56R zdhEG3BJNxdUj969tR7Dy0Y2RhYyoaVTD42MOjEUANPYBdnf9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa6g2KJlnjRJ76/ydT4VZn3W/TlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNTg0MGZjZGMtNGE5OC0z ZDhiLThmMzUtZWNiM2U3OGU4YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcDYFPuoHTZwgOzMqBZp59dg4Brnk4lTnb+XAhdu1ZuGKc5TM3HxkSF 5bdhd94DoJBvJz+t0ZwribKy2L4d0dRzcoXhXdNrahGoK/p0TkMs5hryFs+E1vVc T9T4fYlLfPJtdlgaW+3u2s0X1PJFnId39q30SaQNyIDfwlJPnTEfKr+uUGmh14qE w/zQvJ9vdEeGXp9DeQb+rxqrjBJ+p6tZ8+RIbi1OtrBySyc5IATPWjdVWBWonBar BANo/Gvgr+z640eTn4ic8YDIytAgba9aOoX26mRyvouM/Wkf42SODk22mpsT8qxg oQlTrsNJ+fiOHMnj/1NYDndQmIOYDSE= -----END CERTIFICATE-----Generated at Wed May 13 08:49:25 2026 by rpki-client