$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa File: 867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa (raw, json) Hash identifier: wq0ltfTtYbCHqNo71ywEPopSdr0lFZ9iyizYYTo9vJQ= Subject key identifier: BD:45:F0:40:9D:E8:11:97:F1:AB:3B:13:A1:CA:BE:BB:F5:51:72:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8EF973EC642686FC25773A60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 45899 IP address blocks: 23.32.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:73:ec:64:26:86:fc:25:77:3a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2f68cf75-a3fe-4d92-bb02-b623277b7dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:24:29:ae:7d:7a:58:8e:ec:7a:03:bf:13:7f: 36:87:93:d3:00:1f:13:fe:fd:96:ef:68:96:ea:dc: 51:95:89:36:fc:48:9f:62:c6:7f:e2:6e:d8:7a:0e: 41:49:dd:3e:a3:68:67:b0:c9:58:a2:87:b3:e7:73: 86:ea:ce:7f:0b:68:11:29:43:05:a2:ea:fc:09:7e: 4c:55:fc:bf:8c:ed:31:81:07:12:df:4c:09:95:84: b0:c0:a3:ca:6b:17:6d:22:a4:98:c3:9b:a6:99:25: 64:65:ab:7a:37:ea:15:8d:7e:7b:c1:f1:94:d7:f1: ef:ad:e3:70:88:94:b3:b3:91:87:bb:70:df:44:d5: 19:c5:93:f5:99:59:a0:8a:88:cf:c2:ba:c8:74:e3: 1a:5c:94:5f:11:54:e6:50:87:2b:cf:56:89:eb:51: 2e:45:e9:0e:75:64:13:51:74:c2:fd:ea:3a:57:53: 3a:2e:07:0b:c1:46:cf:ab:e6:55:22:0c:2e:65:98: 89:be:13:0b:e6:dd:26:2c:69:c3:22:12:29:a6:9b: 60:f6:b2:a6:17:20:c7:d5:23:89:64:5c:b5:bd:5a: 73:44:69:db:1f:f1:20:76:13:98:39:07:64:d2:f5: d7:59:91:fa:47:4e:70:88:41:39:17:4d:83:d2:4f: 5e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:45:F0:40:9D:E8:11:97:F1:AB:3B:13:A1:CA:BE:BB:F5:51:72:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f6:4f:3d:dd:a2:eb:11:fd:14:f4:07:9f:e6:43:23:c1:a6: d1:ba:a1:6b:4b:df:52:48:eb:ba:07:7e:9d:be:ef:a9:9c:66: b0:f7:c6:10:cf:f3:e6:b4:8b:b9:fb:0b:af:3d:df:dd:08:cc: 07:51:07:fc:71:7b:65:aa:0b:aa:fe:27:b3:08:11:f7:bf:d9: f5:2d:49:eb:38:ef:cb:dd:27:8e:2c:54:03:4c:96:e2:8a:d0: aa:03:82:59:a9:d6:20:5c:fb:00:08:a1:d2:2f:38:b0:46:fa: 4b:5c:a7:d1:4b:2d:e9:ce:d2:8c:4a:0e:d4:e1:94:d4:32:87: f3:22:ce:8d:4a:45:2a:c0:42:08:25:cd:c2:5b:66:61:49:3c: c8:73:b3:4c:b5:21:34:1b:f5:69:d2:5b:72:95:15:54:d8:45: df:1e:f7:78:80:88:28:49:5a:ac:f4:be:ba:6c:06:f1:1f:4c: 32:0d:a9:ad:9a:6f:c5:99:2d:f3:ca:12:f2:71:62:49:eb:38: 58:8b:84:95:01:02:a7:55:b1:7d:47:ac:de:ea:d1:52:14:08: b4:f7:09:52:9e:33:db:49:4b:5a:9a:2a:f6:ee:9b:b8:b2:a3: c7:54:29:56:eb:13:56:95:7b:88:08:82:6c:a7:a2:1c:88:5c: 13:fa:8e:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+XPsZCaG/CV3OmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmY2OGNmNzUtYTNmZS00ZDkyLWJiMDItYjYyMzI3N2I3ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCQprn16WI7segO/E382h5PTAB8T/v2W72iW 6txRlYk2/EifYsZ/4m7Yeg5BSd0+o2hnsMlYooez53OG6s5/C2gRKUMFour8CX5M Vfy/jO0xgQcS30wJlYSwwKPKaxdtIqSYw5ummSVkZat6N+oVjX57wfGU1/HvreNw iJSzs5GHu3DfRNUZxZP1mVmgiojPwrrIdOMaXJRfEVTmUIcrz1aJ61EuRekOdWQT UXTC/eo6V1M6LgcLwUbPq+ZVIgwuZZiJvhML5t0mLGnDIhIppptg9rKmFyDH1SOJ ZFy1vVpzRGnbH/EgdhOYOQdk0vXXWZH6R05wiEE5F02D0k9eIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1F8ECd6BGX8as7E6HKvrv1UXJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODY3ZTRmYTYtZGM2Zi0z MTFkLWEwYTEtMTNlZjM0NzJiODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyD5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP2Tz3dousR/RT0B5/mQyPBptG6oWtL31JI67oHfp2+76mcZrD3xhDP 8+a0i7n7C689390IzAdRB/xxe2WqC6r+J7MIEfe/2fUtSes478vdJ44sVANMluKK 0KoDglmp1iBc+wAIodIvOLBG+ktcp9FLLenO0oxKDtThlNQyh/Mizo1KRSrAQggl zcJbZmFJPMhzs0y1ITQb9WnSW3KVFVTYRd8e93iAiChJWqz0vrpsBvEfTDINqa2a b8WZLfPKEvJxYknrOFiLhJUBAqdVsX1HrN7q0VIUCLT3CVKeM9tJS1qaKvbum7iy o8dUKVbrE1aVe4gIgmynohyIXBP6jr4= -----END CERTIFICATE-----Generated at Tue Apr 21 20:43:13 2026 by rpki-client