$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc89e720-5e94-3dc5-a7a5-27fd0b5a7373.roa File: bc89e720-5e94-3dc5-a7a5-27fd0b5a7373.roa (raw, json) Hash identifier: ZLowuRzZlRpAyQ5trcSuAU0DhOLBgAON2VZTvgzA/30= Subject key identifier: AB:32:06:F3:FA:63:DA:ED:FB:6D:6B:38:6D:FE:FD:3B:C1:FF:6C:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E90BA525758539DA24C940112 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc89e720-5e94-3dc5-a7a5-27fd0b5a7373.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 20940 IP address blocks: 23.33.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:52:57:58:53:9d:a2:4c:94:01:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=2fb99bc3-e25d-4de9-a0b5-8f174de395d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:72:bf:6e:cd:c8:48:1f:a0:05:f2:f9:f7: 6e:2d:7b:15:96:2b:80:a7:d8:55:12:17:ee:07:27: 42:a7:73:6b:6c:ab:74:e2:b4:06:85:b7:d6:10:5c: bb:e3:db:dd:3b:14:af:07:85:7e:67:d5:74:f6:39: fa:7f:91:3f:70:f4:49:eb:cf:af:5f:18:1b:b5:05: ce:fc:e8:dd:e4:17:e5:78:2f:24:72:3e:73:cc:2e: 95:6b:81:19:6a:a8:77:0e:83:91:52:3f:fa:17:ad: 43:ed:14:93:85:c5:54:c2:28:f1:b3:1b:eb:47:1f: 81:49:29:17:a9:d6:00:8d:67:ff:63:2e:c8:7e:df: f6:27:a4:25:60:08:84:c6:bb:ee:7c:f6:76:ab:85: c5:2c:85:73:34:07:03:db:69:0f:7c:8e:6b:bf:b3: f4:39:7c:c1:f4:3a:06:b8:7a:a3:cc:55:f3:63:89: 36:3d:05:eb:d7:dd:ae:79:df:3e:68:b2:48:0c:32: 9b:fd:ed:60:47:1b:e1:87:50:6d:5b:8d:1c:4d:db: e1:e2:17:40:b3:66:2f:d4:85:b8:69:a3:4b:d3:f6: 6a:79:c7:95:86:26:e2:23:0f:6e:7e:15:98:ef:39: be:d8:ae:b1:e5:11:86:9c:d8:95:62:db:5d:b3:86: ed:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:06:F3:FA:63:DA:ED:FB:6D:6B:38:6D:FE:FD:3B:C1:FF:6C:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc89e720-5e94-3dc5-a7a5-27fd0b5a7373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:41:cc:9a:3b:87:7c:7e:01:3e:5c:d4:1c:55:09:f6:74:85: 9e:70:47:26:d5:f4:8b:bd:ee:61:ac:e8:8a:80:87:fd:6a:ce: 5b:0a:d0:d8:ad:d9:85:8f:34:89:b3:dc:fa:9a:62:d4:4a:a4: 53:9f:68:10:ec:e4:a5:a3:cb:99:0e:15:dd:72:56:c4:61:2f: 31:1a:45:0a:9e:62:70:86:ef:fe:90:44:16:79:c7:bc:46:68: 53:0a:04:50:1e:67:aa:cd:24:ce:7e:fc:87:c6:9d:5e:b3:ca: 9f:46:f9:e2:71:a8:59:8c:ad:65:80:5a:72:e7:1c:a1:f2:59: 80:da:97:58:27:94:1d:5d:85:0a:6d:91:c5:df:2c:23:26:d8: 13:fd:fa:f6:60:f6:f6:c8:2e:a6:28:14:d1:6c:70:74:56:bb: 3a:64:df:b6:db:b7:3a:e0:74:1c:ba:46:51:f2:55:31:66:03: a1:5f:03:f4:6a:46:4c:20:3a:33:76:97:0d:3d:00:02:3a:db: e1:43:d1:0a:b0:69:90:81:56:31:07:d3:d5:c4:62:1f:3f:92: 5a:5f:ad:69:49:16:52:dd:31:2d:13:f4:e4:50:ea:d4:51:34: 37:49:d9:ad:ec:fe:86:e7:39:d8:c8:c6:48:1e:6b:c7:ec:77: 94:c7:46:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QulJXWFOdokyUARIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk MmZiOTliYzMtZTI1ZC00ZGU5LWEwYjUtOGYxNzRkZTM5NWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo11yv27NyEgfoAXy+fduLXsVliuAp9hVEhfu BydCp3NrbKt04rQGhbfWEFy749vdOxSvB4V+Z9V09jn6f5E/cPRJ68+vXxgbtQXO /Ojd5BfleC8kcj5zzC6Va4EZaqh3DoORUj/6F61D7RSThcVUwijxsxvrRx+BSSkX qdYAjWf/Yy7Ift/2J6QlYAiExrvufPZ2q4XFLIVzNAcD22kPfI5rv7P0OXzB9DoG uHqjzFXzY4k2PQXr192ued8+aLJIDDKb/e1gRxvhh1BtW40cTdvh4hdAs2Yv1IW4 aaNL0/ZqeceVhibiIw9ufhWY7zm+2K6x5RGGnNiVYttds4btaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsyBvP6Y9rt+21rOG3+/TvB/2ybMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmM4OWU3MjAtNWU5NC0z ZGM1LWE3YTUtMjdmZDBiNWE3MzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFBzJo7h3x+AT5c1BxVCfZ0hZ5wRybV9Iu97mGs6IqAh/1qzlsK0Nit 2YWPNImz3PqaYtRKpFOfaBDs5KWjy5kOFd1yVsRhLzEaRQqeYnCG7/6QRBZ5x7xG aFMKBFAeZ6rNJM5+/IfGnV6zyp9G+eJxqFmMrWWAWnLnHKHyWYDal1gnlB1dhQpt kcXfLCMm2BP9+vZg9vbILqYoFNFscHRWuzpk37bbtzrgdBy6RlHyVTFmA6FfA/Rq RkwgOjN2lw09AAI62+FD0QqwaZCBVjEH09XEYh8/klpfrWlJFlLdMS0T9ORQ6tRR NDdJ2a3s/obnOdjIxkgea8fsd5THRq8= -----END CERTIFICATE-----Generated at Tue Jul 21 20:51:29 2026 by rpki-client