$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa File: b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa (raw, json) Hash identifier: /Ma7HRFrUbdkKfcUngvQxQPHENtbGy7hzBhUwK02q+E= Subject key identifier: 9D:CF:E3:3E:1A:7E:6A:A9:D0:DC:1B:CB:C3:B7:35:83:CC:39:43:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E6144BEF42A45C8382C24BB70 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 20940 IP address blocks: 23.72.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:be:f4:2a:45:c8:38:2c:24:bb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=c806614c-2e1d-4b6e-a374-db597f666dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:07:26:85:55:99:18:61:37:4e:85:35:c2:8f: ed:59:91:f7:6e:1a:64:d1:cd:7f:37:15:29:01:b0: 92:4c:f2:b7:b8:fc:17:36:f2:be:b1:9f:8a:49:d3: 61:ee:24:d1:0a:09:6d:e8:79:ff:7c:05:eb:92:b0: 07:a2:f7:f3:e8:5c:13:7b:20:69:34:3b:c8:e4:a0: ef:c2:9b:42:85:e5:e3:12:29:17:91:cc:48:c9:5b: 39:3a:65:60:9c:22:56:c6:a6:c3:0e:5c:35:b0:44: cd:37:2f:10:69:93:99:dd:05:cc:14:2b:65:07:06: b4:d7:2a:60:c1:5e:62:47:3f:0e:ef:de:17:37:95: 19:24:45:07:c6:e3:55:d0:1f:72:ec:92:ba:ba:94: 2d:f2:ea:16:cb:8c:a8:ba:5c:84:24:83:e1:e3:e6: 36:72:f2:e5:91:66:e7:c4:b0:5d:05:89:c9:95:aa: 9a:8b:22:a0:02:75:ca:41:85:20:cf:d3:0f:86:f3: a7:b5:b9:4f:dd:4e:e1:5a:d3:5d:d6:bb:4b:fa:52: 3e:a6:76:34:0d:da:22:0c:72:d4:88:ca:7d:63:79: 00:5a:03:e8:14:81:3a:83:2b:a0:4c:a3:4c:2f:79: ce:9f:97:75:59:d5:0a:d7:af:7b:be:38:fe:91:82: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CF:E3:3E:1A:7E:6A:A9:D0:DC:1B:CB:C3:B7:35:83:CC:39:43:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:50:84:f0:1b:da:87:ba:ab:bd:dd:cf:05:04:40:31:a6:0d: ae:50:2f:5b:8f:e4:36:5b:d7:d3:26:9b:8e:1a:6c:0b:67:f3: d6:d1:5b:8d:59:b2:16:51:af:09:cf:36:cb:47:86:b3:34:14: a2:04:70:ff:89:ad:3e:bf:d0:80:27:a5:dc:e4:4e:f4:aa:67: 9e:28:cd:e3:0d:fa:09:02:26:65:53:71:71:d5:93:27:03:ba: e6:59:b3:63:43:89:29:4a:ae:60:ed:54:73:64:2a:17:04:f2: 90:18:6a:b4:d7:73:06:cf:d7:81:2d:d7:ab:ff:1e:df:6d:dc: f0:f6:25:2d:12:f7:28:81:a0:e5:08:1d:78:ea:7e:23:da:31: 3d:11:77:f5:a4:ea:c1:ed:1b:98:13:e9:32:8c:21:37:cd:13: c2:00:73:14:3e:6b:03:41:2d:80:9e:87:de:8f:71:70:13:c1: 83:91:4f:0b:fd:0a:e5:4d:27:45:f3:47:85:a1:75:c9:87:1d: 06:31:41:2a:67:e1:82:81:53:00:30:9b:44:b3:25:a2:cd:0b: fc:9e:19:fd:38:89:5c:83:67:f0:69:b4:8a:b1:a7:46:73:d6: b0:4a:e6:cf:ea:fe:75:64:b0:10:74:b5:4d:93:4d:42:83:01: 6a:9f:0f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRL70KkXIOCwku3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk YzgwNjYxNGMtMmUxZC00YjZlLWEzNzQtZGI1OTdmNjY2ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAcmhVWZGGE3ToU1wo/tWZH3bhpk0c1/NxUp AbCSTPK3uPwXNvK+sZ+KSdNh7iTRCglt6Hn/fAXrkrAHovfz6FwTeyBpNDvI5KDv wptCheXjEikXkcxIyVs5OmVgnCJWxqbDDlw1sETNNy8QaZOZ3QXMFCtlBwa01ypg wV5iRz8O794XN5UZJEUHxuNV0B9y7JK6upQt8uoWy4youlyEJIPh4+Y2cvLlkWbn xLBdBYnJlaqaiyKgAnXKQYUgz9MPhvOntblP3U7hWtNd1rtL+lI+pnY0DdoiDHLU iMp9Y3kAWgPoFIE6gyugTKNML3nOn5d1WdUK1697vjj+kYLrEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3P4z4afmqp0Nwby8O3NYPMOUNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjk0MjFhOGYtNjNhZi0z MWYyLWI5YjItYzlhYzFiMGI1YzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0j9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABQhPAb2oe6q73dzwUEQDGmDa5QL1uP5DZb19Mmm44abAtn89bRW41Z shZRrwnPNstHhrM0FKIEcP+JrT6/0IAnpdzkTvSqZ54ozeMN+gkCJmVTcXHVkycD uuZZs2NDiSlKrmDtVHNkKhcE8pAYarTXcwbP14Et16v/Ht9t3PD2JS0S9yiBoOUI HXjqfiPaMT0Rd/Wk6sHtG5gT6TKMITfNE8IAcxQ+awNBLYCeh96PcXATwYORTwv9 CuVNJ0XzR4WhdcmHHQYxQSpn4YKBUwAwm0SzJaLNC/yeGf04iVyDZ/BptIqxp0Zz 1rBK5s/q/nVksBB0tU2TTUKDAWqfD6A= -----END CERTIFICATE-----Generated at Tue Jul 21 21:49:38 2026 by rpki-client