$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa File: 0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa (raw, json) Hash identifier: 4DIW55nwpcI5c1eB6oYVwVdJPqgGT4dRmXBrbkTfxI0= Subject key identifier: 38:44:3F:FD:35:B1:C3:4C:98:86:62:04:5B:69:97:03:F8:51:85:28 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D8EF560ADFBA2EB6ACAB02A00 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 23.239.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:60:ad:fb:a2:eb:6a:ca:b0:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f750afd2-b928-4108-8327-b3eca073f06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:88:46:56:ce:77:28:c2:38:f4:4f:6a:7d: be:01:d5:ab:65:02:f6:db:cd:a1:bb:81:f1:08:58: 0c:f4:c0:d6:d9:5c:63:fe:46:50:e1:15:fd:53:17: 95:67:d9:f7:7f:e4:41:11:a5:9a:d9:07:d0:cf:be: 74:56:20:7e:e0:63:3b:03:a4:9f:9c:8c:98:2b:00: 5f:64:07:5e:d0:28:1b:bf:c9:79:04:41:14:22:7e: 34:fc:17:47:ca:78:6a:ed:a7:0b:e8:0f:63:8f:0d: 3e:4a:1e:b3:75:ae:a1:27:4b:07:eb:db:b3:73:aa: ad:97:ab:dc:72:6e:4a:06:f6:e4:e2:d8:92:50:e3: 74:a1:96:f2:d6:5d:3f:57:cb:bf:da:55:71:a7:dc: 60:65:f2:10:38:fc:30:55:b7:a0:e9:0d:88:e5:c9: b6:3b:17:bc:f2:11:d3:b3:d8:c1:83:ce:0d:91:50: 4e:68:1f:26:fb:80:86:e3:ab:d7:49:54:4a:ea:d8: a2:5e:d3:fc:98:4d:6b:f3:33:fd:a6:7d:7d:a5:bf: dd:ce:84:cd:81:99:ff:ce:66:91:2e:8e:61:66:20: 4a:8c:bb:74:33:03:49:02:ec:8b:23:ea:d0:d4:97: 8d:a5:d8:d6:f1:e9:90:48:dd:50:89:d2:7d:f7:16: 14:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:44:3F:FD:35:B1:C3:4C:98:86:62:04:5B:69:97:03:F8:51:85:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:1a:c4:37:9b:94:4e:e8:8b:c0:22:5c:81:d8:18:e2:aa:a6: 4f:ad:6b:d5:22:e0:56:48:af:5f:7d:17:e7:d3:5b:6d:17:5b: a7:aa:53:ac:2e:6a:0f:78:09:5d:60:9f:1a:de:dd:49:bd:8f: 88:b5:b6:ba:e8:bf:f7:09:1d:cc:9b:98:ec:04:5c:6e:b8:b4: 40:bb:3e:00:8c:a6:28:ab:e4:89:01:ce:12:b1:d6:bc:6d:02: be:92:13:44:a5:ec:18:c5:41:27:94:8b:b7:84:f0:41:79:43: 88:ba:4a:d0:21:af:4f:e7:65:ed:2c:91:7d:68:79:b8:b8:c2: 92:12:dc:8f:e3:ce:7c:a8:88:a4:22:fd:f8:75:ad:81:34:d7: 36:87:7d:1e:e7:91:fe:22:ad:34:d4:24:5f:68:5c:43:fa:be: 78:ee:5a:de:97:0e:32:7c:1a:87:eb:91:07:a9:01:a1:84:b3: c3:42:36:df:a0:70:34:43:97:c9:47:ee:b7:1d:1f:78:94:2b: b8:aa:32:61:16:56:10:0a:8b:ba:31:48:27:a1:04:8d:bf:c3: d6:ae:18:2d:5a:74:8c:00:39:60:dc:30:ce:e9:44:45:39:b1: 2b:1e:b1:6e:d6:fd:4b:20:f8:11:8e:e9:30:d4:c5:c0:d0:92: 4c:2d:10:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WCt+6LrasqwKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk Zjc1MGFmZDItYjkyOC00MTA4LTgzMjctYjNlY2EwNzNmMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKCIRlbOdyjCOPRPan2+AdWrZQL2282hu4Hx CFgM9MDW2Vxj/kZQ4RX9UxeVZ9n3f+RBEaWa2QfQz750ViB+4GM7A6SfnIyYKwBf ZAde0Cgbv8l5BEEUIn40/BdHynhq7acL6A9jjw0+Sh6zda6hJ0sH69uzc6qtl6vc cm5KBvbk4tiSUON0oZby1l0/V8u/2lVxp9xgZfIQOPwwVbeg6Q2I5cm2Oxe88hHT s9jBg84NkVBOaB8m+4CG46vXSVRK6tiiXtP8mE1r8zP9pn19pb/dzoTNgZn/zmaR Lo5hZiBKjLt0MwNJAuyLI+rQ1JeNpdjW8emQSN1QidJ99xYUAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhEP/01scNMmIZiBFtplwP4UYUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMGY2YzlhYTQtNmU1YS0z NDQxLWIyMmEtOTc1Y2FiYzlmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANgaxDeblE7oi8AiXIHYGOKqpk+ta9Ui4FZIr199F+fTW20XW6eqU6wu ag94CV1gnxre3Um9j4i1trrov/cJHcybmOwEXG64tEC7PgCMpiir5IkBzhKx1rxt Ar6SE0Sl7BjFQSeUi7eE8EF5Q4i6StAhr0/nZe0skX1oebi4wpIS3I/jznyoiKQi /fh1rYE01zaHfR7nkf4irTTUJF9oXEP6vnjuWt6XDjJ8GofrkQepAaGEs8NCNt+g cDRDl8lH7rcdH3iUK7iqMmEWVhAKi7oxSCehBI2/w9auGC1adIwAOWDcMM7pREU5 sSsesW7W/Usg+BGO6TDUxcDQkkwtEGc= -----END CERTIFICATE-----Generated at Sun May 3 14:50:58 2026 by rpki-client