$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa File: dca916ca-ad90-3431-af73-4909a30fd958.roa (raw, json) Hash identifier: PJ44L6GbPfrOiYA71yQpS9xFEGaL0U/dcxvRjDnLv4Y= Subject key identifier: 89:EE:AB:6D:6E:F5:C3:DF:DB:35:43:46:66:E8:E9:39:17:74:CD:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E5619EACDE58AF4F9D6EC78C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.3.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:ea:cd:e5:8a:f4:f9:d6:ec:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=a451e5e9-1369-4b78-b5ca-75de4fda6dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:5d:ac:05:eb:53:a2:16:26:56:df:f9:32: 9e:1b:7d:3a:d5:66:c4:38:91:f5:d6:ae:bc:8a:27: 52:27:82:96:fb:a9:63:a8:75:24:6b:a3:90:4c:f8: 77:65:d9:ed:32:66:8b:7a:35:c5:02:e7:4d:29:62: 96:82:3a:dd:6b:61:1e:a9:35:78:f3:35:50:fa:56: f8:40:04:6c:48:8d:ca:e9:85:b4:07:6c:86:ec:41: d3:fe:de:4d:1e:45:91:02:67:5d:63:18:8e:17:c7: 39:f4:ce:53:5a:6f:07:17:af:2a:81:e9:19:7a:55: b4:a8:f4:1d:10:62:73:fa:b1:14:e0:69:df:09:cd: e6:4e:4f:17:98:2d:68:ab:cd:b5:e0:8a:d5:04:8d: 0b:7e:09:7a:00:47:d7:c2:d6:b8:37:80:e4:8c:92: ef:bf:cd:ec:c2:a4:2c:40:f2:f2:30:58:5d:be:c3: ef:a9:78:c8:59:cd:03:b4:9d:14:d1:99:3f:cf:79: ee:f8:f8:e1:44:6a:d8:44:9c:d7:d1:63:5a:a2:d5: b7:0f:e1:6d:e9:e1:71:cd:13:a9:72:56:95:44:85: c0:d6:ce:2d:b5:c7:cd:c5:13:55:95:f0:89:66:0e: 50:d2:cd:93:da:20:4b:83:45:1a:aa:e9:b1:9d:d3: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EE:AB:6D:6E:F5:C3:DF:DB:35:43:46:66:E8:E9:39:17:74:CD:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:62:cb:7d:ea:40:97:da:60:17:6d:97:17:1f:8b:23:f0:c9: 86:b0:63:6e:63:1c:88:48:53:40:68:fd:98:17:f2:3f:aa:b4: aa:77:b5:da:aa:85:79:af:24:06:91:d1:d3:33:ff:62:ce:9f: fa:c9:41:47:b3:98:9c:92:98:06:63:c9:c4:8d:18:54:3b:c3: 67:21:14:d4:43:1f:0b:40:ef:dd:d7:01:89:dd:01:db:5b:b2: aa:f7:45:0c:a5:cf:c0:df:96:5a:14:4c:71:69:ef:41:65:a1: 55:46:de:55:c7:77:09:9f:f7:4a:97:af:09:c5:bc:93:27:6d: 11:0c:7d:c3:0f:86:83:57:b7:98:42:fa:c0:fe:c8:b7:5b:71: 16:f5:8c:c1:56:6e:51:1f:a2:39:55:40:0a:fe:bd:6b:f2:4c: a0:5d:88:4f:d1:31:26:22:e9:e1:e1:88:34:da:68:77:a7:d1: 10:fb:f0:0c:0d:70:d5:6f:52:de:09:12:cd:48:a2:a9:ca:48: 5c:7a:7e:07:22:98:b6:a4:96:89:e0:34:3d:ec:06:a0:2c:20: 12:a2:df:da:12:05:70:ca:fe:63:82:16:9b:85:5e:d7:96:3d: 93:1e:41:c2:a0:fb:bc:fa:85:7e:c0:25:5a:4f:ad:55:73:f5: 3d:e9:ad:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGerN5Yr0+dbseMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk YTQ1MWU1ZTktMTM2OS00Yjc4LWI1Y2EtNzVkZTRmZGE2ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEldrAXrU6IWJlbf+TKeG3061WbEOJH11q68 iidSJ4KW+6ljqHUka6OQTPh3ZdntMmaLejXFAudNKWKWgjrda2EeqTV48zVQ+lb4 QARsSI3K6YW0B2yG7EHT/t5NHkWRAmddYxiOF8c59M5TWm8HF68qgekZelW0qPQd EGJz+rEU4GnfCc3mTk8XmC1oq8214IrVBI0Lfgl6AEfXwta4N4DkjJLvv83swqQs QPLyMFhdvsPvqXjIWc0DtJ0U0Zk/z3nu+PjhRGrYRJzX0WNaotW3D+Ft6eFxzROp claVRIXA1s4ttcfNxRNVlfCJZg5Q0s2T2iBLg0UaqumxndPUjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInuq21u9cPf2zVDRmbo6TkXdM2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGNhOTE2Y2EtYWQ5MC0z NDMxLWFmNzMtNDkwOWEzMGZkOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9iy33qQJfaYBdtlxcfiyPwyYawY25jHIhIU0Bo/ZgX8j+qtKp3tdqq hXmvJAaR0dMz/2LOn/rJQUezmJySmAZjycSNGFQ7w2chFNRDHwtA793XAYndAdtb sqr3RQylz8DflloUTHFp70FloVVG3lXHdwmf90qXrwnFvJMnbREMfcMPhoNXt5hC +sD+yLdbcRb1jMFWblEfojlVQAr+vWvyTKBdiE/RMSYi6eHhiDTaaHen0RD78AwN cNVvUt4JEs1IoqnKSFx6fgcimLaklongND3sBqAsIBKi39oSBXDK/mOCFpuFXteW PZMeQcKg+7z6hX7AJVpPrVVz9T3prf0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:54:07 2026 by rpki-client