$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d92819e4-effa-3729-9533-50f48d0149da.roa File: d92819e4-effa-3729-9533-50f48d0149da.roa (raw, json) Hash identifier: ku/btvHozxeUluNIS8pWm11tDSkJewPXEEwTxEDG7bw= Subject key identifier: 47:DC:AB:C7:C9:F0:66:8D:05:D3:85:CB:61:B2:AF:DA:2D:62:77:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7E94F6376758F3D0F0A00000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d92819e4-effa-3729-9533-50f48d0149da.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 172.235.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f6:37:67:58:f3:d0:f0:a0:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=a61af387-6ac4-4644-beeb-ff0b59fac989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:0a:3e:ce:85:6a:52:90:61:10:7e:db:a8: b6:4c:82:43:ac:1b:3b:e3:5a:65:aa:97:f7:f3:ec: 9e:17:e4:5f:6e:01:1d:07:d2:78:5c:87:ce:3d:6c: 64:6d:7c:2f:49:f1:cf:42:9b:e5:fc:89:03:19:c1: d8:eb:9f:bd:c5:34:11:bb:5c:75:a6:64:88:f7:4d: 0e:27:52:cb:91:d1:00:dc:82:98:07:4b:60:31:99: ae:9a:36:24:87:78:3a:e8:63:22:b2:ba:0f:d4:ea: 52:7c:d8:d4:31:ad:f2:8f:9c:b4:5f:18:23:de:f6: e0:6c:ad:b4:3f:2d:93:33:16:86:98:7d:1d:5f:37: fb:a1:2f:58:42:1a:b2:94:2d:0e:2d:33:3c:1e:df: 4e:ec:51:e9:d4:1b:df:26:a6:5d:9e:44:82:80:72: 83:a4:a9:23:db:ea:a8:3c:b1:70:cd:39:6e:5c:bf: 12:9a:d4:30:9e:38:7f:e2:01:ac:b8:cf:e5:51:00: 86:8a:8c:2c:4d:0f:08:30:3a:ad:32:58:80:52:76: 35:ca:8f:58:f2:60:4f:56:91:1c:a3:e8:2a:99:63: 2a:f3:58:91:e4:91:5c:62:e0:58:f4:64:63:9b:17: 36:fe:42:93:ee:de:89:74:cb:a8:89:2a:e8:0d:45: f7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:AB:C7:C9:F0:66:8D:05:D3:85:CB:61:B2:AF:DA:2D:62:77:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d92819e4-effa-3729-9533-50f48d0149da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d3:ec:95:8e:72:2e:72:90:7e:27:40:26:4b:67:46:26:30: 9d:b8:e4:cd:8d:48:78:2c:3a:ce:f4:99:9f:8a:30:41:50:bc: 69:91:bd:5d:36:c3:ff:30:f5:c6:3c:52:81:a0:b5:fe:ec:b7: d1:1d:47:f4:f3:88:a1:27:9d:ba:ac:b3:50:dc:d1:c9:ed:f5: 5e:5f:33:8a:be:e3:16:a8:99:8d:c7:98:89:7a:0a:56:0e:9c: 71:05:ea:0f:08:06:3b:0a:ca:e6:e0:ad:55:7a:c2:1f:08:30: 5c:85:58:01:7e:a7:6b:32:67:96:c2:f8:e7:1d:ec:de:45:95: b5:c3:a4:73:6d:cc:a5:b7:1e:cf:82:7d:25:05:5f:14:0d:49: d9:d9:12:81:f1:fe:cb:73:29:26:f6:4d:17:59:db:af:e4:ab: d5:69:e8:37:00:d8:a2:54:5f:a4:bf:97:f4:47:89:33:de:ab: 6e:3e:70:f6:09:f6:d5:5d:bd:bb:21:fa:73:04:07:7c:7a:80: 9a:ce:22:66:b9:fb:94:73:2d:5c:44:39:d2:21:56:e7:98:cd: cf:4a:c8:5f:69:42:35:5e:a8:7e:c9:11:f9:de:e0:cf:ce:91: 86:38:aa:ab:e3:50:d5:d0:22:eb:af:27:e9:87:c1:d4:55:af: 73:67:d9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPY3Z1jz0PCgAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk YTYxYWYzODctNmFjNC00NjQ0LWJlZWItZmYwYjU5ZmFjOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRUKPs6FalKQYRB+26i2TIJDrBs741plqpf3 8+yeF+RfbgEdB9J4XIfOPWxkbXwvSfHPQpvl/IkDGcHY65+9xTQRu1x1pmSI900O J1LLkdEA3IKYB0tgMZmumjYkh3g66GMisroP1OpSfNjUMa3yj5y0Xxgj3vbgbK20 Py2TMxaGmH0dXzf7oS9YQhqylC0OLTM8Ht9O7FHp1BvfJqZdnkSCgHKDpKkj2+qo PLFwzTluXL8SmtQwnjh/4gGsuM/lUQCGiowsTQ8IMDqtMliAUnY1yo9Y8mBPVpEc o+gqmWMq81iR5JFcYuBY9GRjmxc2/kKT7t6JdMuoiSroDUX39QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfcq8fJ8GaNBdOFy2Gyr9otYnfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDkyODE5ZTQtZWZmYS0z NzI5LTk1MzMtNTBmNDhkMDE0OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTT7JWOci5ykH4nQCZLZ0YmMJ245M2NSHgsOs70mZ+KMEFQvGmRvV02 w/8w9cY8UoGgtf7st9EdR/TziKEnnbqss1Dc0cnt9V5fM4q+4xaomY3HmIl6ClYO nHEF6g8IBjsKyubgrVV6wh8IMFyFWAF+p2syZ5bC+Ocd7N5FlbXDpHNtzKW3Hs+C fSUFXxQNSdnZEoHx/stzKSb2TRdZ26/kq9Vp6DcA2KJUX6S/l/RHiTPeq24+cPYJ 9tVdvbsh+nMEB3x6gJrOIma5+5RzLVxEOdIhVueYzc9KyF9pQjVeqH7JEfne4M/O kYY4qqvjUNXQIuuvJ+mHwdRVr3Nn2RI= -----END CERTIFICATE-----Generated at Tue Jul 21 21:50:08 2026 by rpki-client