$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96c96246-6bf7-3032-89a5-9aec6eb0db9d.roa File: 96c96246-6bf7-3032-89a5-9aec6eb0db9d.roa (raw, json) Hash identifier: yIA9rvGjAqDT7gnPhn8sOtJzvIyvtHufAlzaY/P5oZQ= Subject key identifier: 88:1C:D1:B4:29:10:2B:68:4E:97:53:C8:9D:37:1E:42:F6:30:7E:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7634EBFF05B1AEE36AF4E2BE Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96c96246-6bf7-3032-89a5-9aec6eb0db9d.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 23.217.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:eb:ff:05:b1:ae:e3:6a:f4:e2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=b7ddb66d-51f8-4054-a10c-c2c868bf7365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:22:c2:3e:10:49:4d:24:eb:ac:d9:42:b6: 1c:98:6a:f6:7b:51:a5:e6:4f:3b:97:20:35:4e:f3: eb:ee:e7:2b:06:e2:48:7c:0e:9b:8d:70:b7:9f:54: 55:dc:95:94:15:20:06:d0:ed:f1:6e:aa:b7:6d:d3: 53:d8:77:61:91:d9:11:c8:c3:1e:80:53:ed:de:a3: 38:39:15:d8:6a:34:d1:a8:4c:c4:65:0a:b2:8b:4d: 2e:0b:93:f6:51:72:06:2d:ad:ca:24:3c:7f:80:21: 98:0d:60:0f:74:e5:46:09:01:c8:c2:2a:54:10:73: f3:ac:31:2e:a8:23:b2:88:af:e2:be:f2:bd:d1:ca: 2c:85:5e:a1:f8:e5:c7:76:00:c1:b8:d8:47:2f:cd: a7:77:d9:62:fa:a6:17:f8:d7:8a:2f:49:fb:6c:ca: f8:fd:3c:7d:a0:20:ee:ed:85:7f:4e:e3:05:63:52: 87:a8:61:ef:4e:ac:14:28:06:2b:cd:08:e7:09:a6: 0b:9b:66:cf:d7:f8:e0:77:f0:7c:fa:dd:a3:de:e7: 99:2d:31:09:6c:1e:8a:95:d3:4e:bc:3e:bc:97:f2: 75:aa:3b:60:0c:f8:4b:fe:3d:02:d5:3d:27:10:d8: df:d4:60:be:98:a5:80:a0:ab:bd:8c:f3:ca:fa:b4: 14:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1C:D1:B4:29:10:2B:68:4E:97:53:C8:9D:37:1E:42:F6:30:7E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96c96246-6bf7-3032-89a5-9aec6eb0db9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d6:64:ba:e4:06:3f:30:5c:8c:99:69:2f:22:12:d6:02:08: 19:2d:cc:f7:a1:d9:ab:73:ee:30:f9:9a:39:42:2f:c3:b5:61: 57:10:66:fc:6d:9a:58:fa:02:cc:54:9e:9f:a5:5c:31:83:af: 4b:a9:57:af:a0:4d:fc:0d:d6:c9:8a:e9:a7:64:76:c0:f6:f1: 1e:f7:89:63:b3:c8:9e:6c:bc:6b:e5:d5:04:07:6b:d8:ea:3a: 15:84:2e:42:c4:f2:9c:f2:5c:cb:23:0a:d2:6f:aa:18:ff:e3: d8:be:39:ff:27:21:86:ea:c5:fa:33:a2:fa:1f:ce:45:39:1b: d0:a7:65:ed:a3:8d:c3:a3:e8:c7:b8:aa:25:52:c2:a1:10:e3: af:ce:04:b7:21:48:bc:6b:e0:49:27:95:29:e3:e1:0c:c4:3e: 45:e1:81:41:fd:5f:82:f9:99:5c:2b:06:76:b7:9c:ed:a3:78: 10:b9:7b:22:d3:c0:0f:6e:00:02:15:b5:67:a6:43:16:43:4e: 10:aa:63:5d:87:77:72:6b:8b:a9:d3:9e:ae:c6:30:14:80:3c: ca:e7:85:b8:ad:52:3f:7b:0f:1e:28:39:89:79:a4:4b:66:31: ba:51:73:c1:39:48:15:42:c3:5b:ec:b1:4b:2b:ab:17:64:dd: 84:77:ed:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NOv/BbGu42r04r4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YjdkZGI2NmQtNTFmOC00MDU0LWExMGMtYzJjODY4YmY3MzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz8iwj4QSU0k66zZQrYcmGr2e1Gl5k87lyA1 TvPr7ucrBuJIfA6bjXC3n1RV3JWUFSAG0O3xbqq3bdNT2HdhkdkRyMMegFPt3qM4 ORXYajTRqEzEZQqyi00uC5P2UXIGLa3KJDx/gCGYDWAPdOVGCQHIwipUEHPzrDEu qCOyiK/ivvK90coshV6h+OXHdgDBuNhHL82nd9li+qYX+NeKL0n7bMr4/Tx9oCDu 7YV/TuMFY1KHqGHvTqwUKAYrzQjnCaYLm2bP1/jgd/B8+t2j3ueZLTEJbB6KldNO vD68l/J1qjtgDPhL/j0C1T0nENjf1GC+mKWAoKu9jPPK+rQUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgc0bQpECtoTpdTyJ03HkL2MH72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTZjOTYyNDYtNmJmNy0z MDMyLTg5YTUtOWFlYzZlYjBkYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9mLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbWZLrkBj8wXIyZaS8iEtYCCBktzPeh2atz7jD5mjlCL8O1YVcQZvxt mlj6AsxUnp+lXDGDr0upV6+gTfwN1smK6adkdsD28R73iWOzyJ5svGvl1QQHa9jq OhWELkLE8pzyXMsjCtJvqhj/49i+Of8nIYbqxfozovofzkU5G9CnZe2jjcOj6Me4 qiVSwqEQ46/OBLchSLxr4EknlSnj4QzEPkXhgUH9X4L5mVwrBna3nO2jeBC5eyLT wA9uAAIVtWemQxZDThCqY12Hd3Jri6nTnq7GMBSAPMrnhbitUj97Dx4oOYl5pEtm MbpRc8E5SBVCw1vssUsrqxdk3YR37f0= -----END CERTIFICATE-----Generated at Tue Jul 21 21:49:43 2026 by rpki-client