$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ca46559-d881-37b1-a497-2d37eac333b4.roa File: 3ca46559-d881-37b1-a497-2d37eac333b4.roa (raw, json) Hash identifier: d3o4f0w573/CyKi97A4yzF4jtFkXXGFRV8udVKC7yl4= Subject key identifier: D9:C8:70:76:33:0F:87:0B:D0:7F:8A:06:41:D7:8E:B5:91:AD:4D:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E5FDF62CF963B4378957FDA2C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ca46559-d881-37b1-a497-2d37eac333b4.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 23.32.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:62:cf:96:3b:43:78:95:7f:da:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=8239b29c-a458-4e98-b11b-93f427fd691d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5c:6c:a8:84:18:dd:ac:43:53:af:11:aa:89: 22:80:6e:35:70:0b:66:46:c7:e3:a5:c2:91:05:3d: 50:63:33:27:a1:55:6b:4f:b2:5c:a8:17:81:d1:30: a1:26:ff:98:3b:40:8b:43:8d:0e:57:ec:9a:74:c2: 3f:bf:4c:a2:95:b3:b8:fc:59:39:4d:bc:32:ad:b5: 72:a7:01:58:db:21:37:e7:80:00:01:7b:bc:84:d6: e7:46:2c:7b:94:dd:ae:72:df:a0:d8:5b:f1:9f:3e: cb:c8:a1:c4:9b:57:f3:cf:a6:69:df:b8:89:61:8d: 65:37:cf:55:06:d0:22:ac:e6:7e:a5:9a:64:70:0d: 77:d3:6e:5e:26:32:3f:1f:28:ae:5a:dc:20:93:73: 8a:f4:7a:0f:ec:97:1c:89:06:f9:18:54:32:b1:18: bd:eb:c8:2e:5b:1c:b7:16:2b:ab:97:2c:99:77:c3: 34:ce:cd:5a:a9:66:6e:d6:f6:a0:72:3f:6b:10:3b: 0a:c5:5e:a9:52:73:d6:4d:3a:f0:09:f0:06:68:dc: 93:ec:44:cb:57:85:30:85:c5:15:59:39:50:29:85: e7:9c:eb:32:f4:aa:ea:08:67:09:10:bd:50:62:8b: a3:18:d8:87:43:9a:17:4e:61:7e:8b:8b:03:f4:ed: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C8:70:76:33:0F:87:0B:D0:7F:8A:06:41:D7:8E:B5:91:AD:4D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ca46559-d881-37b1-a497-2d37eac333b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c4:8d:cc:60:c7:ab:bb:41:87:dd:4c:5f:4e:59:30:8c:10: db:94:74:38:25:bc:7c:0a:a0:fb:02:f7:9d:45:6a:df:b9:71: ca:c6:4d:c5:f1:8c:e0:c9:2d:b6:46:d4:f2:5e:9a:2b:9d:bd: 24:4f:b4:b2:49:b8:37:50:1a:cf:c9:f5:e9:0e:e7:e2:d9:5d: 6f:6a:8f:52:c6:93:54:c1:ca:d1:62:01:0a:cb:41:02:72:0e: c8:7c:be:18:d3:45:87:d8:2c:18:bd:de:b3:db:80:7c:37:b6: 44:d3:45:37:7c:42:44:83:93:b9:bf:b1:ff:7f:da:ce:d3:17: 36:fe:ee:b4:82:c8:ad:19:1b:ae:7f:44:d2:ae:a7:d3:18:9c: 24:90:e1:80:a2:8f:81:30:3f:2c:91:46:76:b2:14:f1:0e:ca: bd:cf:08:6a:42:91:d7:6e:f3:c8:71:f5:5d:41:32:22:77:9f: 71:69:ae:f0:5c:8d:5a:37:85:af:58:9a:eb:97:d4:00:08:4e: 99:dc:17:4c:25:75:7c:4c:fb:f0:81:27:90:2b:d1:00:87:9a: 73:00:d2:54:ef:c2:43:88:b7:03:29:77:8d:34:76:56:21:86: 0c:81:67:35:de:e6:43:1a:6a:8d:3f:38:85:07:22:5a:9b:25: 46:8a:00:e1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5f32LPljtDeJV/2iwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk ODIzOWIyOWMtYTQ1OC00ZTk4LWIxMWItOTNmNDI3ZmQ2OTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlxsqIQY3axDU68RqokigG41cAtmRsfjpcKR BT1QYzMnoVVrT7JcqBeB0TChJv+YO0CLQ40OV+yadMI/v0yilbO4/Fk5TbwyrbVy pwFY2yE354AAAXu8hNbnRix7lN2uct+g2Fvxnz7LyKHEm1fzz6Zp37iJYY1lN89V BtAirOZ+pZpkcA13025eJjI/HyiuWtwgk3OK9HoP7JcciQb5GFQysRi968guWxy3 FiurlyyZd8M0zs1aqWZu1vagcj9rEDsKxV6pUnPWTTrwCfAGaNyT7ETLV4UwhcUV WTlQKYXnnOsy9KrqCGcJEL1QYoujGNiHQ5oXTmF+i4sD9O1bkQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNnIcHYzD4cL0H+KBkHXjrWRrU0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2NhNDY1NTktZDg4MS0z N2IxLWE0OTctMmQzN2VhYzMzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFFyAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlcSNzGDHq7tBh91MX05ZMIwQ25R0OCW8fAqg+wL3nUVq37lxysZNxfGM 4MkttkbU8l6aK529JE+0skm4N1Aaz8n16Q7n4tldb2qPUsaTVMHK0WIBCstBAnIO yHy+GNNFh9gsGL3es9uAfDe2RNNFN3xCRIOTub+x/3/aztMXNv7utILIrRkbrn9E 0q6n0xicJJDhgKKPgTA/LJFGdrIU8Q7Kvc8IakKR127zyHH1XUEyInefcWmu8FyN WjeFr1ia65fUAAhOmdwXTCV1fEz78IEnkCvRAIeacwDSVO/CQ4i3Ayl3jTR2ViGG DIFnNd7mQxpqjT84hQciWpslRooA4Q== -----END CERTIFICATE-----Generated at Tue Jul 21 20:53:58 2026 by rpki-client