$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa File: a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa (raw, json) Hash identifier: xoEegU67+4XFyjAIvKQj/Gl5dmjjJbgJE+9m7PcbVjo= Subject key identifier: F8:D9:85:8C:A3:5A:97:CA:01:C4:47:5F:03:BB:05:73:17:6F:04:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E6144BFD5B6C2B2F69A414E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 20940 IP address blocks: 23.76.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:bf:d5:b6:c2:b2:f6:9a:41:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=9c09f1ce-aa1f-49d6-b50c-7d5829dffe45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:db:10:22:2e:93:a2:15:6a:55:cf:38:95: ae:87:4c:d3:4c:4f:87:ef:c4:41:90:5b:d5:c0:dc: 7e:9b:4f:d4:66:b2:64:fe:30:65:58:86:f4:c4:57: 7e:aa:88:39:97:99:ef:47:96:72:a3:4d:d2:ae:c2: fd:5e:41:df:bf:35:5b:59:e9:8e:0f:33:4b:25:0d: 5b:e2:94:d9:dc:e8:18:40:47:33:7e:1a:bc:85:06: 4a:e3:8b:02:7a:b1:d5:3b:05:18:5d:da:7b:c7:8f: 0c:e5:82:96:6d:ca:37:04:33:66:c9:c4:5c:8e:c3: c4:6d:08:6a:a8:85:03:0b:17:81:6c:56:9e:80:f2: 61:42:4e:08:8e:c1:07:c8:4d:04:a4:2e:19:bb:34: fe:b9:80:13:29:b3:7b:9d:65:d2:8b:73:02:eb:25: 34:7d:f8:52:81:4b:70:7e:b5:d1:30:4b:79:49:f1: 51:ca:5c:c6:61:05:37:74:76:17:e2:ec:e0:b2:87: bb:02:91:c6:43:f4:d2:82:c4:04:3f:d4:75:fb:83: 5e:18:e1:a1:5b:c0:e8:2c:22:da:78:7a:cd:00:f2: 26:11:22:84:08:68:d4:e8:7a:17:60:09:65:b7:12: 8f:96:33:cc:f1:52:3a:35:26:a5:41:94:2e:b0:db: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D9:85:8C:A3:5A:97:CA:01:C4:47:5F:03:BB:05:73:17:6F:04:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a86e3783-e4be-3b78-8bc1-9e2b43a9b90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.76.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1e:d9:ab:98:92:5d:83:b2:97:c9:ad:c5:1d:82:f1:59:d4: f7:bc:64:73:71:c1:80:ef:d8:93:a8:f7:e5:c9:e9:1e:6b:57: 13:ca:0b:77:47:ad:bc:ca:3d:46:ed:cb:cb:f9:d0:28:89:48: 1c:ea:30:60:90:04:15:5a:9c:c8:0e:03:97:96:75:6a:30:6d: d2:58:36:db:a9:a2:8f:ef:98:d4:09:df:9a:06:95:6d:81:86: 13:f6:31:cc:cf:ce:d8:27:05:25:3e:60:9b:98:07:55:9a:ec: ec:11:5a:07:98:f9:ea:33:45:7d:5d:a3:9f:16:73:4f:36:bf: 74:c4:73:fb:f6:ef:64:b9:13:6c:50:e1:d0:ab:a4:20:21:d0: 94:e8:8b:9a:18:3f:f5:30:7e:9b:2e:af:af:b3:77:73:72:7d: 8f:e9:41:30:87:c8:35:4b:3d:38:b5:47:7b:c4:36:b9:9c:ed: f0:f2:0b:37:95:9e:ca:36:04:47:79:12:40:a4:da:00:92:5b: a9:1a:85:6b:b3:9a:02:24:6c:92:ca:db:0f:56:c9:c9:67:c5: f7:a6:74:d8:16:21:98:17:38:b9:ab:b9:7e:69:13:0a:49:c7: 45:4c:94:c8:e7:f3:4b:96:32:3f:c4:28:f0:fc:44:83:01:93: a7:ac:e7:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRL/VtsKy9ppBTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk OWMwOWYxY2UtYWExZi00OWQ2LWI1MGMtN2Q1ODI5ZGZmZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGbbECIuk6IValXPOJWuh0zTTE+H78RBkFvV wNx+m0/UZrJk/jBlWIb0xFd+qog5l5nvR5Zyo03SrsL9XkHfvzVbWemODzNLJQ1b 4pTZ3OgYQEczfhq8hQZK44sCerHVOwUYXdp7x48M5YKWbco3BDNmycRcjsPEbQhq qIUDCxeBbFaegPJhQk4IjsEHyE0EpC4ZuzT+uYATKbN7nWXSi3MC6yU0ffhSgUtw frXRMEt5SfFRylzGYQU3dHYX4uzgsoe7ApHGQ/TSgsQEP9R1+4NeGOGhW8DoLCLa eHrNAPImESKECGjU6HoXYAlltxKPljPM8VI6NSalQZQusNtX7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjZhYyjWpfKAcRHXwO7BXMXbwRpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg2ZTM3ODMtZTRiZS0z Yjc4LThiYzEtOWUyYjQzYTliOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0yTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMe2auYkl2DspfJrcUdgvFZ1Pe8ZHNxwYDv2JOo9+XJ6R5rVxPKC3dH rbzKPUbty8v50CiJSBzqMGCQBBVanMgOA5eWdWowbdJYNtupoo/vmNQJ35oGlW2B hhP2MczPztgnBSU+YJuYB1Wa7OwRWgeY+eozRX1do58Wc082v3TEc/v272S5E2xQ 4dCrpCAh0JToi5oYP/Uwfpsur6+zd3NyfY/pQTCHyDVLPTi1R3vENrmc7fDyCzeV nso2BEd5EkCk2gCSW6kahWuzmgIkbJLK2w9WyclnxfemdNgWIZgXOLmruX5pEwpJ x0VMlMjn80uWMj/EKPD8RIMBk6es55c= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:22 2026 by rpki-client