$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8674ede9-6c3d-3dff-910c-3d2802c654e3.roa File: 8674ede9-6c3d-3dff-910c-3d2802c654e3.roa (raw, json) Hash identifier: NvLfn8j5rddbjqrbSzI/n3QgmTjur8qOjzDiMZjRSa8= Subject key identifier: 71:6D:87:1B:13:30:1F:2C:C5:C5:67:B9:17:83:6D:87:E4:DF:17:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7E95016266F22AE5CD160BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8674ede9-6c3d-3dff-910c-3d2802c654e3.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 23.48.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:01:62:66:f2:2a:e5:cd:16:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=98d05ebe-ccf5-4ae7-9483-a60653834844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:49:48:99:37:d9:21:d9:94:e7:8c:12:c5: ed:17:01:71:52:4a:c8:5e:b2:45:1f:61:36:d1:99: 14:17:c2:0a:44:74:f5:44:86:39:bf:49:5f:82:d1: d3:eb:2f:3e:b7:c3:25:74:74:cc:58:10:ef:d1:60: 5c:a4:53:04:32:c8:56:ca:32:8b:6b:ba:62:41:d0: ae:bb:c4:26:29:ee:67:2a:86:46:05:6a:5a:d4:cb: 23:31:dd:ac:15:b7:0d:74:bd:e2:6d:dd:db:1b:86: 5b:59:64:7b:61:08:76:a1:8f:22:0c:61:f0:49:2f: 4c:ea:d4:1a:b4:66:52:22:12:ee:75:2f:30:14:35: 38:b7:1a:1c:17:b3:1e:07:8f:03:82:29:ab:d8:ce: fa:9a:63:44:6a:d7:d0:5b:17:c7:15:83:80:73:64: ce:d7:41:51:05:1a:66:46:76:b7:96:1f:da:5a:20: da:56:04:51:f8:ff:91:65:5e:ef:57:34:05:78:ff: b2:d2:72:70:bb:57:d0:f6:a8:bc:09:2a:99:2f:f5: 36:da:bb:87:aa:37:d8:52:42:d2:60:9d:fd:97:8b: 49:61:77:e1:ee:c3:95:d8:92:d0:38:c3:21:b5:da: 62:67:e4:7e:75:43:a8:04:be:d1:22:88:ae:81:e6: 00:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6D:87:1B:13:30:1F:2C:C5:C5:67:B9:17:83:6D:87:E4:DF:17:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8674ede9-6c3d-3dff-910c-3d2802c654e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:91:50:c3:5f:fd:09:2e:3a:f8:7b:ac:7b:33:f3:50:fc:8f: 14:17:c2:75:60:58:15:46:40:20:18:3c:d8:11:40:ba:76:65: 78:c1:eb:c9:3d:81:74:85:bd:98:8d:5d:6b:30:73:2e:d8:f8: 5b:ba:0b:13:24:ee:a0:4b:c0:8a:dd:64:dc:8b:96:55:e8:e6: 48:dd:03:e5:be:5c:cc:4c:22:4e:27:67:c9:89:9b:0a:2e:02: ca:9b:9a:82:f3:6f:08:52:2c:0c:de:b5:7e:19:d8:fb:29:5b: ba:6e:ba:8d:66:d7:cd:65:ad:f5:71:ce:d2:be:cf:04:ca:0c: be:74:4b:b9:df:4c:1f:65:c0:69:12:9b:df:bf:ec:70:e3:74: d2:59:81:f8:60:20:53:d2:2c:94:47:f6:76:30:51:e5:d3:6b: 04:44:52:4b:cd:9a:85:f4:e8:d0:c7:5f:56:bc:2d:38:93:90: d6:f7:37:ad:9a:57:0b:6e:2a:d2:43:a5:19:18:16:6c:ef:c4: c2:f0:14:79:c0:48:38:4b:5a:3d:4e:bd:fe:3e:46:a1:b7:76: 97:26:41:60:68:d2:d3:4d:fa:f4:3f:f5:62:ef:2f:9d:98:f7: ef:c1:ad:59:b4:b7:d2:0c:7b:3f:38:a4:47:6a:1a:9b:46:60: 23:7e:b5:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQFiZvIq5c0WC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OThkMDVlYmUtY2NmNS00YWU3LTk0ODMtYTYwNjUzODM0ODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHJJSJk32SHZlOeMEsXtFwFxUkrIXrJFH2E2 0ZkUF8IKRHT1RIY5v0lfgtHT6y8+t8MldHTMWBDv0WBcpFMEMshWyjKLa7piQdCu u8QmKe5nKoZGBWpa1MsjMd2sFbcNdL3ibd3bG4ZbWWR7YQh2oY8iDGHwSS9M6tQa tGZSIhLudS8wFDU4txocF7MeB48Dgimr2M76mmNEatfQWxfHFYOAc2TO10FRBRpm Rna3lh/aWiDaVgRR+P+RZV7vVzQFeP+y0nJwu1fQ9qi8CSqZL/U22ruHqjfYUkLS YJ39l4tJYXfh7sOV2JLQOMMhtdpiZ+R+dUOoBL7RIoiugeYAAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFthxsTMB8sxcVnuReDbYfk3xckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODY3NGVkZTktNmMzZC0z ZGZmLTkxMGMtM2QyODAyYzY1NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCRUMNf/QkuOvh7rHsz81D8jxQXwnVgWBVGQCAYPNgRQLp2ZXjB68k9 gXSFvZiNXWswcy7Y+Fu6CxMk7qBLwIrdZNyLllXo5kjdA+W+XMxMIk4nZ8mJmwou AsqbmoLzbwhSLAzetX4Z2PspW7puuo1m181lrfVxztK+zwTKDL50S7nfTB9lwGkS m9+/7HDjdNJZgfhgIFPSLJRH9nYwUeXTawREUkvNmoX06NDHX1a8LTiTkNb3N62a VwtuKtJDpRkYFmzvxMLwFHnASDhLWj1Ovf4+RqG3dpcmQWBo0tNN+vQ/9WLvL52Y 9+/BrVm0t9IMez84pEdqGptGYCN+tTw= -----END CERTIFICATE-----Generated at Tue Jul 21 20:53:55 2026 by rpki-client