$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b53e29-8d7a-3e65-a313-319da60909e5.roa File: 32b53e29-8d7a-3e65-a313-319da60909e5.roa (raw, json) Hash identifier: izwlSxwxAjP1Hn4x9XwpuqYs4dZeC4aeY873Uq8aL1o= Subject key identifier: D4:07:83:FE:59:DB:6F:8E:51:20:8F:4D:77:D5:74:97:3A:73:2C:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8EF9A3CE63B5BEE3B6DDB0C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b53e29-8d7a-3e65-a313-319da60909e5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 38040 IP address blocks: 23.53.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:a3:ce:63:b5:be:e3:b6:dd:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=24ce2e9e-67c7-4aa8-9299-3ab7be330750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:46:c5:47:de:4b:95:23:b8:cd:be:47:1f: 85:57:2d:2e:cb:e5:a0:34:2e:d4:99:ea:a6:4f:07: 0c:f3:64:9b:66:03:fc:0d:25:95:20:f7:ae:20:8d: 98:d5:e3:57:89:18:80:d3:be:c2:60:eb:fb:db:aa: a7:2b:21:6e:43:e4:6e:b5:05:8c:b6:24:1a:34:e5: a3:8c:1a:1e:2b:11:3c:e3:4d:be:0a:e9:f9:4f:bd: 71:1b:7c:80:32:f8:0b:8b:57:e2:48:02:e4:a2:2f: 1c:c4:f2:30:52:a8:71:7c:a0:87:b6:41:15:ce:04: 13:3d:5b:6f:71:a1:c0:6d:59:58:4f:bf:f2:b2:58: 3d:c8:74:60:57:3b:4f:95:24:37:dc:d4:34:53:2c: 1f:e6:6b:4c:b5:c4:6b:e5:0d:57:28:86:12:7f:fd: 1a:99:53:88:82:c4:7d:c5:a0:ec:39:f7:f5:69:fe: 5b:a0:80:bc:4e:be:f0:ec:79:b6:30:1c:68:55:7f: 0b:ef:53:61:12:99:e8:2e:58:45:22:a7:a8:25:f9: 90:f5:eb:91:09:88:c8:6d:d0:67:be:8d:9e:a3:17: 93:b6:b7:bb:ab:72:8c:fc:70:18:40:d2:62:8f:b3: 75:f7:52:85:7d:82:92:00:a9:ec:38:ec:17:2c:48: dc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:07:83:FE:59:DB:6F:8E:51:20:8F:4D:77:D5:74:97:3A:73:2C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b53e29-8d7a-3e65-a313-319da60909e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ff:7e:a0:9a:31:fd:b6:e9:1d:eb:ab:88:67:d1:a3:9b:d4: d1:a8:70:df:de:57:5f:c5:5e:e4:bd:c7:aa:f6:8a:7e:da:2b: 11:76:a6:9f:9c:19:b9:26:54:51:a1:c1:5f:24:64:ef:68:2d: 61:e3:34:a1:93:cd:da:0e:9b:f2:7e:2b:6c:cc:7e:29:ec:35: f2:cc:46:a0:03:4e:06:95:2f:58:d2:65:bd:0e:6f:8f:31:3a: 46:54:f9:3b:fa:cc:9c:0e:fb:dd:ec:64:95:3f:68:0b:30:fc: ea:fc:20:1e:0d:47:41:d2:37:9b:65:4b:62:e7:8e:3a:26:74: 3f:f3:59:f6:c8:46:90:be:ad:fb:b2:02:a3:ed:02:6f:7b:1c: ae:27:34:a4:eb:77:c7:4d:aa:8f:9f:21:d7:bf:1b:da:38:f7: 8f:19:1a:3a:4a:3f:dc:2b:ed:f1:25:28:77:b6:1c:32:7f:b1: 62:c0:49:7e:32:cc:65:31:1d:03:ee:b4:77:a7:11:55:8a:32: a0:52:f8:d1:ee:79:c5:2f:1f:66:09:67:c9:e9:2f:0a:ea:4a: 39:2e:de:6b:9d:0f:1c:89:df:7b:05:c0:5a:2f:d9:78:ce:3e: 05:bc:35:cb:3a:0d:e9:dc:5b:c1:1d:23:43:9f:65:b4:30:4b: 03:5a:06:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+aPOY7W+47bdsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MjRjZTJlOWUtNjdjNy00YWE4LTkyOTktM2FiN2JlMzMwNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxVGxUfeS5UjuM2+Rx+FVy0uy+WgNC7Umeqm TwcM82SbZgP8DSWVIPeuII2Y1eNXiRiA077CYOv726qnKyFuQ+RutQWMtiQaNOWj jBoeKxE8402+Cun5T71xG3yAMvgLi1fiSALkoi8cxPIwUqhxfKCHtkEVzgQTPVtv caHAbVlYT7/yslg9yHRgVztPlSQ33NQ0Uywf5mtMtcRr5Q1XKIYSf/0amVOIgsR9 xaDsOff1af5boIC8Tr7w7Hm2MBxoVX8L71NhEpnoLlhFIqeoJfmQ9euRCYjIbdBn vo2eoxeTtre7q3KM/HAYQNJij7N191KFfYKSAKnsOOwXLEjcQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQHg/5Z22+OUSCPTXfVdJc6cyyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJiNTNlMjktOGQ3YS0z ZTY1LWEzMTMtMzE5ZGE2MDkwOWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7/fqCaMf226R3rq4hn0aOb1NGocN/eV1/FXuS9x6r2in7aKxF2pp+c GbkmVFGhwV8kZO9oLWHjNKGTzdoOm/J+K2zMfinsNfLMRqADTgaVL1jSZb0Ob48x OkZU+Tv6zJwO+93sZJU/aAsw/Or8IB4NR0HSN5tlS2LnjjomdD/zWfbIRpC+rfuy AqPtAm97HK4nNKTrd8dNqo+fIde/G9o4948ZGjpKP9wr7fElKHe2HDJ/sWLASX4y zGUxHQPutHenEVWKMqBS+NHuecUvH2YJZ8npLwrqSjku3mudDxyJ33sFwFov2XjO PgW8Ncs6DencW8EdI0OfZbQwSwNaBj8= -----END CERTIFICATE-----Generated at Mon Apr 20 21:07:14 2026 by rpki-client