$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa File: a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa (raw, json) Hash identifier: WDCfZbknHNV03GHOhcRWA3S6QJDM+3MjgD3gFwWgXJg= Subject key identifier: C5:D0:35:1B:6C:39:4D:6E:B4:D1:F3:A3:D8:8D:9E:7E:C8:89:1A:3F Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A5AD7ECCFDCE6EA2B3E120 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 23.235.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:ad:7e:cc:fd:ce:6e:a2:b3:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=ac47bf51-8eba-40f4-8aa8-940cad414839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:c1:4b:88:29:6d:de:70:c6:36:b4:b7:7c: 28:79:09:59:83:2d:ee:66:b2:7c:2d:f4:2a:8b:f9: 1f:97:cc:fc:b0:31:d9:f3:7a:bf:a8:ba:6d:08:6a: 54:d9:fa:ba:34:aa:af:38:d8:07:64:53:9f:0f:ea: b0:a7:9b:6c:21:67:62:4b:c4:65:7e:9f:9c:8a:56: 8e:83:a0:ce:88:57:4f:b3:1a:e0:b4:a4:50:d2:20: 7b:98:32:b5:61:4f:68:a7:6d:ef:7c:42:8b:70:3c: a0:cc:d9:11:d1:65:1f:6c:e5:f8:6a:95:f9:20:3b: 54:b3:3c:ba:c3:a1:1f:33:f3:d1:41:92:11:38:15: 3c:82:af:ab:d0:be:61:a6:09:af:18:11:1c:d3:7a: 17:53:ac:26:4b:59:a8:7e:b3:c2:0e:09:45:e6:c9: 83:95:3f:b7:5c:48:a6:f3:b0:60:ba:c8:29:25:39: 92:c4:d2:90:65:a0:50:42:7f:2a:41:8f:c0:4e:15: 21:64:c0:ac:d3:c6:b3:12:9d:f0:9c:4a:77:03:b1: c8:e0:b5:fe:d8:d7:a3:ab:12:12:4e:3a:37:89:5f: 87:64:2e:7c:76:93:cc:b2:dd:54:7c:e9:4b:1b:a2: 10:a3:18:69:d3:30:d0:b0:a0:ba:1f:5c:51:af:da: 46:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D0:35:1B:6C:39:4D:6E:B4:D1:F3:A3:D8:8D:9E:7E:C8:89:1A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 23.235.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:93:b3:cc:fb:bd:c2:06:c5:c2:ba:9f:6d:37:52:bc:aa:cb: f8:cc:8d:71:c4:6d:a6:39:21:11:91:dc:e7:ed:48:bf:e2:dc: 47:91:58:7f:56:fb:bc:16:b5:c0:a1:a6:1a:25:ff:f1:2b:24: 8b:b4:dc:55:5a:38:9b:b6:c7:8a:9e:cb:ba:90:1d:d3:46:f8: 02:f7:6c:7a:a5:dc:34:d1:5c:c1:53:b7:f8:f0:8a:f1:8e:18: 45:02:d1:a9:bd:40:83:cd:0d:87:49:92:a2:70:bc:54:ff:35: a3:96:8c:d6:74:23:ed:0e:d8:02:7e:83:d0:77:bb:b4:1c:42: f9:18:08:b4:71:37:27:49:06:a1:5a:bd:ad:33:77:23:52:f9: 91:b9:d3:9b:bc:56:36:de:37:1a:48:fc:bd:5f:af:96:05:38: 5e:af:03:a9:48:f9:bf:be:0e:e3:5d:1b:98:21:d8:6e:89:fe: 9a:fd:2e:27:85:60:b6:5f:95:71:2a:8f:fe:c4:39:e8:1f:ad: 99:81:a7:0d:22:32:bf:85:b1:e5:b2:91:57:97:81:ec:e5:db: 85:34:35:8f:3a:7c:0d:d6:00:7d:a1:cd:68:11:8d:15:20:35: ee:d4:ac:d4:73:c4:97:de:2a:96:93:e7:8e:7f:06:63:c1:04: 09:72:a5:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pa1+zP3ObqKz4SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YWM0N2JmNTEtOGViYS00MGY0LThhYTgtOTQwY2FkNDE0ODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLnBS4gpbd5wxja0t3woeQlZgy3uZrJ8LfQq i/kfl8z8sDHZ83q/qLptCGpU2fq6NKqvONgHZFOfD+qwp5tsIWdiS8Rlfp+cilaO g6DOiFdPsxrgtKRQ0iB7mDK1YU9op23vfEKLcDygzNkR0WUfbOX4apX5IDtUszy6 w6EfM/PRQZIROBU8gq+r0L5hpgmvGBEc03oXU6wmS1mofrPCDglF5smDlT+3XEim 87BgusgpJTmSxNKQZaBQQn8qQY/AThUhZMCs08azEp3wnEp3A7HI4LX+2NejqxIS Tjo3iV+HZC58dpPMst1UfOlLG6IQoxhp0zDQsKC6H1xRr9pGRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXQNRtsOU1utNHzo9iNnn7IiRo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYTNhZWVlNDgtNDk0OS0z NmJjLWE3ZWQtYzYyYWMyYWU2YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2Ts8z7vcIGxcK6n203Uryqy/jMjXHEbaY5IRGR3OftSL/i3EeRWH9W +7wWtcChphol//ErJIu03FVaOJu2x4qey7qQHdNG+AL3bHql3DTRXMFTt/jwivGO GEUC0am9QIPNDYdJkqJwvFT/NaOWjNZ0I+0O2AJ+g9B3u7QcQvkYCLRxNydJBqFa va0zdyNS+ZG505u8VjbeNxpI/L1fr5YFOF6vA6lI+b++DuNdG5gh2G6J/pr9LieF YLZflXEqj/7EOegfrZmBpw0iMr+FseWykVeXgezl24U0NY86fA3WAH2hzWgRjRUg Ne7UrNRzxJfeKpaT545/BmPBBAlypXI= -----END CERTIFICATE-----Generated at Sun May 3 17:53:45 2026 by rpki-client