$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91f560b1-be0b-300a-9c3f-71da8213ce60.roa File: 91f560b1-be0b-300a-9c3f-71da8213ce60.roa (raw, json) Hash identifier: f3lM7ns768UQ++KESaM/o3kXe8X+NSi7t7+9+vXTSHs= Subject key identifier: E7:46:DD:86:6C:30:CE:61:3A:DA:F5:E2:5C:26:17:8E:A0:7D:DA:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E66DA2413585E0A76FC645FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91f560b1-be0b-300a-9c3f-71da8213ce60.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 20940 IP address blocks: 23.3.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:24:13:58:5e:0a:76:fc:64:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=5b4c1924-a0a2-4e08-a32c-f7ec235138a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e7:68:fc:ae:1f:4c:3a:85:00:22:77:1e:69: 33:44:4f:d4:30:19:ac:11:6e:5b:ec:21:d9:69:b7: 3b:00:b5:cd:b3:85:a1:04:7c:cf:de:64:b2:4b:31: e4:d5:f8:f1:f0:c7:c0:a9:fb:70:7f:62:e3:82:29: 30:5d:fe:a0:55:b8:da:36:49:61:57:9a:92:0c:ef: 5d:66:a0:35:f2:d8:c9:94:42:13:da:f5:65:85:5c: d8:9b:8e:08:c7:3d:d7:5c:02:7d:e6:cc:dd:09:e7: 75:54:e2:2f:c7:d6:57:b7:65:0a:9f:28:b4:f5:27: 09:88:f6:a8:61:5c:2b:09:84:e6:42:19:1a:89:4a: 74:c3:7d:57:70:39:2d:57:90:25:cf:ee:a7:30:ec: 9b:2b:65:42:a9:1d:2c:bd:3f:8b:3d:59:b0:f1:98: da:2e:9f:11:8e:f0:d8:d5:8b:ed:b1:37:e3:8b:0b: de:55:fb:ee:c2:c4:bd:58:40:c5:46:4c:2d:74:fc: 9c:ae:a1:56:1b:89:c2:d0:83:47:ee:12:50:43:24: 40:64:8b:b4:b0:ac:57:96:74:a8:b8:21:be:81:99: 18:04:47:4b:b5:15:35:72:b1:38:80:27:e8:43:e4: eb:7c:8b:a4:b1:c7:00:b2:d7:28:9a:17:42:c3:e8: 85:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:46:DD:86:6C:30:CE:61:3A:DA:F5:E2:5C:26:17:8E:A0:7D:DA:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91f560b1-be0b-300a-9c3f-71da8213ce60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:2f:4a:b2:0f:7f:fb:65:27:56:37:48:af:d1:d1:74:b9:97: 4f:16:f3:c9:47:8d:26:15:81:5a:a5:a2:1b:87:9d:90:09:17: 85:6f:21:0e:6e:84:3a:0e:c9:d6:17:bc:80:f4:55:42:db:e2: f5:fe:e7:89:66:d8:a3:11:65:2a:85:86:c2:cd:c6:9a:3b:5f: 25:13:cd:ee:b1:8e:40:49:d4:bd:06:82:95:86:f6:21:7b:a2: d2:85:09:17:df:3d:da:e2:ba:63:26:f8:43:91:11:35:76:50: 7d:fe:11:a0:aa:03:a7:5b:5d:83:ff:ce:cd:5a:43:c7:48:8f: a8:c8:3d:29:e5:15:52:a6:51:c0:66:57:85:1f:11:5b:33:a7: 60:a4:d8:b0:8c:bd:6e:c1:e5:fe:98:c2:e6:2c:09:98:86:3b: fd:a0:21:0b:12:50:e0:97:9c:b7:38:43:45:04:0f:ef:b7:0b: 71:fa:5b:92:c3:3b:f6:3a:50:d1:ba:19:b4:b3:94:18:ef:6a: e9:bd:38:b0:84:fa:c6:c0:9e:6f:4b:3d:59:81:c5:e8:80:d9: 32:59:d1:c1:1e:b8:fb:92:64:55:06:8b:e4:62:30:8f:24:52: d5:52:0b:36:54:e0:db:8a:e1:c0:93:90:ab:82:a7:84:c0:77: 5c:73:d8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2iQTWF4KdvxkX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NWI0YzE5MjQtYTBhMi00ZTA4LWEzMmMtZjdlYzIzNTEzOGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+do/K4fTDqFACJ3HmkzRE/UMBmsEW5b7CHZ abc7ALXNs4WhBHzP3mSySzHk1fjx8MfAqftwf2LjgikwXf6gVbjaNklhV5qSDO9d ZqA18tjJlEIT2vVlhVzYm44Ixz3XXAJ95szdCed1VOIvx9ZXt2UKnyi09ScJiPao YVwrCYTmQhkaiUp0w31XcDktV5Alz+6nMOybK2VCqR0svT+LPVmw8ZjaLp8RjvDY 1YvtsTfjiwveVfvuwsS9WEDFRkwtdPycrqFWG4nC0INH7hJQQyRAZIu0sKxXlnSo uCG+gZkYBEdLtRU1crE4gCfoQ+TrfIuksccAstcomhdCw+iFKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdG3YZsMM5hOtr14lwmF46gfdoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFmNTYwYjEtYmUwYi0z MDBhLTljM2YtNzFkYTgyMTNjZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIvSrIPf/tlJ1Y3SK/R0XS5l08W88lHjSYVgVqlohuHnZAJF4VvIQ5u hDoOydYXvID0VULb4vX+54lm2KMRZSqFhsLNxpo7XyUTze6xjkBJ1L0GgpWG9iF7 otKFCRffPdriumMm+EORETV2UH3+EaCqA6dbXYP/zs1aQ8dIj6jIPSnlFVKmUcBm V4UfEVszp2Ck2LCMvW7B5f6YwuYsCZiGO/2gIQsSUOCXnLc4Q0UED++3C3H6W5LD O/Y6UNG6GbSzlBjvaum9OLCE+sbAnm9LPVmBxeiA2TJZ0cEeuPuSZFUGi+RiMI8k UtVSCzZU4NuK4cCTkKuCp4TAd1xz2MI= -----END CERTIFICATE-----Generated at Tue Jul 21 20:54:21 2026 by rpki-client