$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2d80523-ea9c-39c4-bd72-4387c46ba108.roa File: a2d80523-ea9c-39c4-bd72-4387c46ba108.roa (raw, json) Hash identifier: kMrepbW8rbhS2MQscQxNXNBkxeey9eFfznBPzz3I1YI= Subject key identifier: 5F:F3:84:C1:76:43:0D:C5:A8:2A:2C:A9:67:13:18:6E:B2:5B:35:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D91C019641323E083FE257300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2d80523-ea9c-39c4-bd72-4387c46ba108.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 20940 IP address blocks: 23.208.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:19:64:13:23:e0:83:fe:25:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=98ac122b-a796-42b9-ac2c-38c09351a02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:b2:41:76:f9:8b:fe:71:7f:a9:20:3f:2e: 5c:4a:73:ca:e4:3c:cc:9f:6d:4e:04:07:8b:c2:7f: 72:b6:b9:99:24:7d:a9:d2:23:1b:d2:e2:89:0c:fd: 35:a9:a0:7d:10:db:b7:5f:05:e7:ba:a1:45:86:68: 93:bb:70:53:c6:62:22:a7:1f:fe:29:0a:b4:68:62: 7b:60:9f:db:2a:3a:c9:f3:90:19:12:aa:98:9c:e8: 2c:84:6a:b9:6f:4a:01:c3:8d:f6:bf:5d:fa:1a:a6: bc:da:8e:ff:f0:ff:4a:55:91:c4:a1:f5:9c:14:3c: e8:f9:b8:1c:85:cd:56:6a:0e:fa:3b:9d:4c:77:2b: dd:fd:76:1e:53:d2:1a:36:30:c6:bd:34:77:e0:ad: 8d:ca:6f:42:f3:45:94:5e:1c:65:38:0c:f6:e2:96: b9:28:44:24:0c:a5:40:65:f5:11:00:d4:19:8f:39: 6e:93:83:17:dd:28:3f:c7:12:3e:90:92:bb:3c:47: 1d:13:0a:81:a1:c0:b1:b2:db:4d:6e:44:35:c4:15: 5c:74:48:46:6d:1f:ea:ee:02:49:c6:f3:d3:90:36: 7d:2a:13:b4:30:48:d3:db:50:dc:90:15:05:6f:01: 21:64:1b:33:d9:e9:e2:dc:4b:23:86:f9:3f:47:fa: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F3:84:C1:76:43:0D:C5:A8:2A:2C:A9:67:13:18:6E:B2:5B:35:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2d80523-ea9c-39c4-bd72-4387c46ba108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e6:01:d9:52:bc:3e:78:0d:5b:37:f7:ea:b5:07:c9:52:f3: 3a:5a:83:7c:7b:59:3e:c0:f5:c0:02:43:bd:39:99:e1:3a:82: 92:ac:67:27:ad:8e:0a:55:fd:f4:70:14:a4:66:e9:35:c3:3c: 24:21:52:0f:0f:ee:02:89:07:7d:a6:60:ff:27:69:be:0e:4e: 44:86:31:cb:ba:d6:e9:03:a6:61:8d:b7:eb:36:02:ab:2d:16: 22:20:14:ce:c2:5d:85:20:d6:a1:80:4e:e4:b0:97:be:72:9e: c4:02:03:d3:18:05:7a:22:5d:1b:11:57:b2:21:08:e0:78:df: 86:f1:b6:d7:50:09:5e:a2:ce:fe:20:52:16:45:53:81:aa:26: cf:85:07:14:30:79:37:91:51:11:ce:0e:7f:2a:ed:50:90:f3: e3:8e:94:b1:57:6d:ea:c7:e7:67:f9:1f:70:7b:2c:67:85:1e: c4:99:4d:05:b3:9a:00:25:62:09:c5:c8:5b:66:13:b1:0b:71: c2:a6:f2:59:77:09:f9:20:ad:44:07:92:47:54:5c:79:76:4b: aa:d0:9d:83:21:a0:2e:eb:0b:4e:59:ac:2e:ac:62:ef:72:59: 6f:5d:c6:c3:97:39:a7:3c:0e:36:9d:83:f0:ea:13:7e:fa:fb: fa:57:ee:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBlkEyPgg/4lcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OThhYzEyMmItYTc5Ni00MmI5LWFjMmMtMzhjMDkzNTFhMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgCyQXb5i/5xf6kgPy5cSnPK5DzMn21OBAeL wn9ytrmZJH2p0iMb0uKJDP01qaB9ENu3XwXnuqFFhmiTu3BTxmIipx/+KQq0aGJ7 YJ/bKjrJ85AZEqqYnOgshGq5b0oBw432v136Gqa82o7/8P9KVZHEofWcFDzo+bgc hc1Wag76O51Mdyvd/XYeU9IaNjDGvTR34K2Nym9C80WUXhxlOAz24pa5KEQkDKVA ZfURANQZjzluk4MX3Sg/xxI+kJK7PEcdEwqBocCxsttNbkQ1xBVcdEhGbR/q7gJJ xvPTkDZ9KhO0MEjT21DckBUFbwEhZBsz2eni3Esjhvk/R/rSHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/zhMF2Qw3FqCosqWcTGG6yWzWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTJkODA1MjMtZWE5Yy0z OWM0LWJkNzItNDM4N2M0NmJhMTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9AfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvmAdlSvD54DVs39+q1B8lS8zpag3x7WT7A9cACQ705meE6gpKsZyet jgpV/fRwFKRm6TXDPCQhUg8P7gKJB32mYP8nab4OTkSGMcu61ukDpmGNt+s2Aqst FiIgFM7CXYUg1qGATuSwl75ynsQCA9MYBXoiXRsRV7IhCOB434bxttdQCV6izv4g UhZFU4GqJs+FBxQweTeRURHODn8q7VCQ8+OOlLFXberH52f5H3B7LGeFHsSZTQWz mgAlYgnFyFtmE7ELccKm8ll3CfkgrUQHkkdUXHl2S6rQnYMhoC7rC05ZrC6sYu9y WW9dxsOXOac8Djadg/DqE376+/pX7pY= -----END CERTIFICATE-----Generated at Wed Apr 22 00:52:07 2026 by rpki-client