$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dac41a7a-cfab-3721-a80f-156c029935e7.roa File: dac41a7a-cfab-3721-a80f-156c029935e7.roa (raw, json) Hash identifier: EgmoRO9zv+rwBAvG2SlOrBhM3qThCYxDh0njrddTbV8= Subject key identifier: 19:4A:B9:61:2C:D0:BC:31:D0:5B:D4:08:04:0A:64:36:E9:A0:F0:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E8F54F796EE866F0D370009AC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dac41a7a-cfab-3721-a80f-156c029935e7.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:f7:96:ee:86:6f:0d:37:00:09:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=d1c63b27-0c80-452a-b174-e4cdbca11900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f8:ea:de:ad:dc:27:c3:d5:07:71:29:58:56: b1:24:f6:b6:65:11:b8:ee:e9:59:09:65:c0:e2:a6: 1c:10:87:dd:b1:72:72:ad:b9:38:27:0a:e0:b2:cc: 63:b0:1b:68:25:b3:2d:f9:3a:08:3d:73:f3:03:90: 49:f5:1f:44:5c:a6:72:f0:18:08:2c:37:c8:b8:66: 04:33:94:c7:f5:8b:c0:88:de:49:27:7e:00:76:20: 0d:14:bf:7c:c3:51:cb:32:aa:cc:ed:d8:49:bf:7a: 9d:06:de:62:60:47:ae:54:f6:b4:72:04:3f:ef:ea: a6:9e:27:52:31:48:cd:8b:7d:f8:3b:b2:e4:69:0c: 60:99:6c:3b:43:39:00:c4:67:f5:71:d0:3d:cc:de: ce:bb:88:38:77:fa:46:2e:58:22:1c:c1:b8:35:9e: 5f:e0:11:df:50:e3:f6:1a:7b:e8:1b:9c:9d:2c:e3: ae:34:28:c4:0b:f3:2d:ec:60:8e:21:29:f4:28:8c: 0d:6e:7a:24:ed:66:13:60:25:5c:3d:eb:c1:e8:aa: 87:3d:7f:0c:4e:4a:6f:df:d7:5a:55:12:8b:4a:ec: cb:b2:37:78:ad:9e:45:d7:5b:25:af:04:5e:84:4a: 6d:69:dc:2e:91:0b:c8:73:f5:0a:f7:5e:3e:13:83: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4A:B9:61:2C:D0:BC:31:D0:5B:D4:08:04:0A:64:36:E9:A0:F0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dac41a7a-cfab-3721-a80f-156c029935e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4d:dc:8f:93:f5:24:37:5b:ce:e8:84:52:fe:34:1c:fd:99: 15:98:82:2c:b6:a6:2b:47:92:cb:79:f7:37:29:32:e6:a8:74: 6f:76:41:35:8c:64:2c:7c:1b:d3:20:81:d2:1c:83:de:28:28: 22:73:d6:fa:ae:46:d4:31:07:6c:a4:4a:84:a0:c8:b0:4c:39: 7f:b6:04:04:91:0e:5d:5d:a5:c2:4b:c4:60:ee:f9:38:30:1c: 08:c0:53:98:ae:aa:7b:62:91:e6:59:d5:21:3e:cd:9d:07:7f: 6d:05:d1:a4:b6:13:4d:ff:8d:13:71:df:ba:c0:5b:b3:e0:f7: 13:e8:66:54:1d:8e:98:fd:de:c4:82:8d:68:7e:e7:12:87:5e: 09:e8:b4:8b:04:c6:a8:fb:e3:4f:28:8a:ad:22:8c:18:66:e2: 64:93:df:16:88:ec:4e:65:30:a6:60:d5:e6:76:fe:dc:3a:f7: 73:43:97:31:71:0d:ff:18:26:38:71:6d:c9:4f:e3:82:2b:34: e9:5f:11:f9:3c:5a:82:0a:48:94:43:25:78:ac:69:b9:9b:d6: 63:93:34:dc:08:f0:75:c9:3b:bf:71:32:42:67:05:81:20:1b: 97:89:62:95:ac:58:69:38:2e:22:02:0c:c0:d5:31:5a:34:42: 79:c4:03:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPeW7oZvDTcACawwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZDFjNjNiMjctMGM4MC00NTJhLWIxNzQtZTRjZGJjYTExOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vjq3q3cJ8PVB3EpWFaxJPa2ZRG47ulZCWXA 4qYcEIfdsXJyrbk4JwrgssxjsBtoJbMt+ToIPXPzA5BJ9R9EXKZy8BgILDfIuGYE M5TH9YvAiN5JJ34AdiANFL98w1HLMqrM7dhJv3qdBt5iYEeuVPa0cgQ/7+qmnidS MUjNi334O7LkaQxgmWw7QzkAxGf1cdA9zN7Ou4g4d/pGLlgiHMG4NZ5f4BHfUOP2 GnvoG5ydLOOuNCjEC/Mt7GCOISn0KIwNbnok7WYTYCVcPevB6KqHPX8MTkpv39da VRKLSuzLsjd4rZ5F11slrwRehEptadwukQvIc/UK914+E4MGowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlKuWEs0Lwx0FvUCAQKZDbpoPBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFjNDFhN2EtY2ZhYi0z NzIxLWE4MGYtMTU2YzAyOTkzNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZN3I+T9SQ3W87ohFL+NBz9mRWYgiy2pitHkst59zcpMuaodG92QTWM ZCx8G9MggdIcg94oKCJz1vquRtQxB2ykSoSgyLBMOX+2BASRDl1dpcJLxGDu+Tgw HAjAU5iuqntikeZZ1SE+zZ0Hf20F0aS2E03/jRNx37rAW7Pg9xPoZlQdjpj93sSC jWh+5xKHXgnotIsExqj7408oiq0ijBhm4mST3xaI7E5lMKZg1eZ2/tw693NDlzFx Df8YJjhxbclP44IrNOlfEfk8WoIKSJRDJXisabmb1mOTNNwI8HXJO79xMkJnBYEg G5eJYpWsWGk4LiICDMDVMVo0QnnEA/0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:53:57 2026 by rpki-client