$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8295af36-d8e3-3c5c-b600-e5c06a05fe1c.roa File: 8295af36-d8e3-3c5c-b600-e5c06a05fe1c.roa (raw, json) Hash identifier: qpmrOoU0EQpWlU63xaib40Z6jJpBgsa0hi+343D8vas= Subject key identifier: 05:E2:4F:AA:40:F3:DA:86:46:D2:85:B8:30:37:AA:3D:36:BE:01:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7FFA490A2C692E0C83518580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8295af36-d8e3-3c5c-b600-e5c06a05fe1c.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.53.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:49:0a:2c:69:2e:0c:83:51:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=4689c145-3fa3-48ea-959c-0b42b6ed71f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f8:60:a1:7e:2c:db:c2:98:50:98:62:ed:9a: 2b:52:99:7b:42:b5:c2:ca:de:1b:07:6f:31:63:3c: 02:3f:f4:61:01:c2:84:30:46:dd:fd:37:eb:76:36: 66:82:ce:d6:8b:b9:4c:cf:b2:20:3b:27:54:21:2a: 50:25:bd:e1:ca:62:07:0d:41:ab:c8:25:7c:f8:dd: 62:b0:dd:1c:a1:60:d8:84:01:d1:77:7d:ab:30:72: 2f:04:47:e8:7c:1c:e5:2d:73:ab:98:54:7f:60:dd: 50:53:70:5f:0f:d3:dc:d8:d9:a1:3d:0a:0c:d0:bb: 47:bc:35:13:43:6d:ab:7b:57:f5:82:9a:db:68:1d: c7:ba:3a:4d:ed:b9:e1:87:eb:ec:50:8d:6a:86:21: ed:81:88:78:7b:23:57:56:20:6c:88:ae:3a:4c:70: 45:97:7b:36:14:8d:37:1d:bf:fb:a0:71:7d:65:51: 56:78:9c:1f:bf:38:e5:97:0e:9c:a4:88:e9:0f:c9: f2:77:0e:03:fb:38:3b:52:49:ad:57:71:d1:ac:77: 2c:2e:29:c6:e6:e8:47:15:86:07:10:2b:39:12:10: bc:b5:c3:e1:cc:3f:31:5f:0f:d2:1d:49:b0:63:47: 1f:a3:7c:77:10:d7:5a:62:59:08:78:02:45:36:83: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E2:4F:AA:40:F3:DA:86:46:D2:85:B8:30:37:AA:3D:36:BE:01:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8295af36-d8e3-3c5c-b600-e5c06a05fe1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:32:b1:8a:a9:41:14:c3:ac:0c:43:74:c6:24:c8:25:2b:18: 4f:90:48:0c:33:75:57:4c:0d:23:56:70:ab:da:06:31:ab:22: 0d:70:93:3b:a2:82:ae:26:48:a8:c1:6a:a6:f1:96:f8:82:59: 87:fc:0a:83:b8:5f:43:d2:d8:74:42:8e:c7:26:ba:75:89:03: b7:40:02:be:22:9c:b0:7e:4e:e7:9b:75:70:b6:d5:36:ca:05: 20:c4:11:5d:d1:7c:34:71:d9:9b:d6:f9:a8:af:6f:51:92:dd: 0f:d2:17:d0:67:51:a0:f6:cc:35:24:c4:40:14:2f:f6:10:16: e7:f2:20:b2:24:f6:83:9d:1c:a7:1d:49:bc:f8:83:0e:ff:fa: 1d:7f:ff:37:3c:18:79:1e:fb:a9:9b:5f:a1:c8:66:11:ce:fa: f8:f7:d1:a8:1a:c8:c5:41:2b:d2:0c:fb:9d:f2:28:9c:ce:dc: 58:a5:78:3f:df:81:6d:c5:35:c5:6d:91:20:2b:b7:14:d5:29: 9c:44:f5:68:a0:be:62:96:9b:a1:67:fa:3d:89:82:82:61:00: d8:4f:a2:3c:e7:c0:3c:4a:f6:c0:e9:c0:1b:17:e1:43:d9:1a: 2e:41:b5:40:99:cf:8e:09:d8:21:ce:68:f7:3f:dd:db:40:3c: 8e:e6:ef:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+kkKLGkuDINRhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk NDY4OWMxNDUtM2ZhMy00OGVhLTk1OWMtMGI0MmI2ZWQ3MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/hgoX4s28KYUJhi7ZorUpl7QrXCyt4bB28x YzwCP/RhAcKEMEbd/TfrdjZmgs7Wi7lMz7IgOydUISpQJb3hymIHDUGryCV8+N1i sN0coWDYhAHRd32rMHIvBEfofBzlLXOrmFR/YN1QU3BfD9Pc2NmhPQoM0LtHvDUT Q22re1f1gprbaB3HujpN7bnhh+vsUI1qhiHtgYh4eyNXViBsiK46THBFl3s2FI03 Hb/7oHF9ZVFWeJwfvzjllw6cpIjpD8nydw4D+zg7UkmtV3HRrHcsLinG5uhHFYYH ECs5EhC8tcPhzD8xXw/SHUmwY0cfo3x3ENdaYlkIeAJFNoOSQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXiT6pA89qGRtKFuDA3qj02vgEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODI5NWFmMzYtZDhlMy0z YzVjLWI2MDAtZTVjMDZhMDVmZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIysYqpQRTDrAxDdMYkyCUrGE+QSAwzdVdMDSNWcKvaBjGrIg1wkzui gq4mSKjBaqbxlviCWYf8CoO4X0PS2HRCjscmunWJA7dAAr4inLB+TuebdXC21TbK BSDEEV3RfDRx2ZvW+aivb1GS3Q/SF9BnUaD2zDUkxEAUL/YQFufyILIk9oOdHKcd Sbz4gw7/+h1//zc8GHke+6mbX6HIZhHO+vj30agayMVBK9IM+53yKJzO3FileD/f gW3FNcVtkSArtxTVKZxE9WigvmKWm6Fn+j2JgoJhANhPojznwDxK9sDpwBsX4UPZ Gi5BtUCZz44J2CHOaPc/3dtAPI7m73I= -----END CERTIFICATE-----Generated at Tue Jul 21 21:48:55 2026 by rpki-client