$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa File: e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa (raw, json) Hash identifier: N8piZyoquW5c1Rz3g+gS+YGST2nJ+8yDrsgBrilC4KY= Subject key identifier: 20:CF:A8:DC:F6:E4:44:AA:15:79:1B:9F:1C:C5:0A:75:62:1B:FE:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E482485116B27547EB1602880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.1.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:85:11:6b:27:54:7e:b1:60:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=474661f8-cdc4-4a8f-beaa-0a6fd1f88d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:41:80:03:46:51:f1:24:54:8c:05:2a:bc:d7: 10:5f:b0:f6:a0:f0:d6:d9:6f:f3:68:41:e2:ac:19: e9:b7:aa:ff:6c:4b:21:33:6b:32:f6:e9:18:0d:c9: f9:36:e9:5a:da:32:dc:ca:97:24:01:9d:a1:8d:b6: 78:7c:82:fa:61:55:a8:97:2c:c3:82:de:40:54:71: c0:7c:d7:44:17:4f:4d:d5:a6:82:d8:8a:7b:7d:f7: 68:1e:5e:b3:b6:18:9f:d7:37:72:d6:fe:ac:f9:74: 98:21:f4:d7:4a:7e:e8:1d:62:51:80:ee:dc:b1:a2: 8e:54:98:23:70:e7:36:0c:2a:8d:ed:a8:ba:4d:d5: 4c:f0:04:9b:a2:a2:e7:be:b5:6f:82:cf:f6:22:49: a1:2d:f2:30:29:56:b8:2d:20:61:90:d3:20:ec:4f: fc:2e:82:c0:ec:7a:50:ce:e3:18:f5:f9:d7:bc:cc: ac:ed:d1:96:bd:f3:93:69:75:c7:69:61:25:fc:26: 42:72:07:1b:fc:2b:59:99:11:9b:ce:40:6b:e2:fe: 5a:b7:c5:eb:a2:52:93:73:99:84:53:13:c4:53:a9: 7a:7a:89:63:af:be:23:c1:1f:40:82:84:0e:92:68: 59:c5:98:71:27:a7:44:d4:8f:73:bc:e2:21:b3:f3: 32:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CF:A8:DC:F6:E4:44:AA:15:79:1B:9F:1C:C5:0A:75:62:1B:FE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:02:89:96:92:7c:a4:55:09:2f:54:3c:4a:52:4e:8f:33:44: 4d:e3:3b:37:a3:24:d9:d3:d6:63:f8:1e:33:c6:0f:e4:73:88: e4:0f:69:8f:f2:c1:0d:54:e8:48:d4:88:fb:01:21:66:07:88: 98:06:cc:45:3f:56:56:38:2d:89:db:f2:bb:24:b0:b8:e9:3b: f6:ef:07:1f:e8:a1:51:b3:a2:ab:df:da:31:e2:15:8e:5a:05: 0a:ce:84:01:af:7e:42:18:76:80:3c:55:b3:cf:07:f5:f9:8a: 03:63:81:83:d7:38:22:a3:4d:a3:b3:58:d6:80:12:e1:d4:0c: b1:a2:d2:a6:36:dc:da:77:32:c5:69:a2:da:0f:00:78:d6:80: 02:49:cc:28:b9:52:d0:89:6c:8a:eb:e2:03:a9:49:33:4e:27: ec:3b:32:15:34:4c:62:c8:07:72:7b:67:8f:af:2c:cd:c4:a2: d8:f4:89:4b:94:95:68:80:90:81:bd:ee:4f:9e:3b:db:ef:8e: 3c:a4:cb:76:c6:a0:1f:24:18:b8:f3:f2:79:36:77:cf:9d:2d: b8:36:6e:25:91:ed:22:de:5f:9c:d5:24:03:34:26:92:7b:a3: 62:47:52:f6:e8:73:e3:6f:8b:81:7a:9f:e7:c9:ac:e5:a5:f4: c7:d2:e3:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIURaydUfrFgKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk NDc0NjYxZjgtY2RjNC00YThmLWJlYWEtMGE2ZmQxZjg4ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUGAA0ZR8SRUjAUqvNcQX7D2oPDW2W/zaEHi rBnpt6r/bEshM2sy9ukYDcn5Nula2jLcypckAZ2hjbZ4fIL6YVWolyzDgt5AVHHA fNdEF09N1aaC2Ip7ffdoHl6zthif1zdy1v6s+XSYIfTXSn7oHWJRgO7csaKOVJgj cOc2DCqN7ai6TdVM8ASboqLnvrVvgs/2IkmhLfIwKVa4LSBhkNMg7E/8LoLA7HpQ zuMY9fnXvMys7dGWvfOTaXXHaWEl/CZCcgcb/CtZmRGbzkBr4v5at8XrolKTc5mE UxPEU6l6eoljr74jwR9AgoQOkmhZxZhxJ6dE1I9zvOIhs/MymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDPqNz25ESqFXkbnxzFCnViG/44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQzOGMxMmMtZWVkOS0z ZWRhLWE0ZDUtNGFkOTY3NDliZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwCiZaSfKRVCS9UPEpSTo8zRE3jOzejJNnT1mP4HjPGD+RziOQPaY/y wQ1U6EjUiPsBIWYHiJgGzEU/VlY4LYnb8rsksLjpO/bvBx/ooVGzoqvf2jHiFY5a BQrOhAGvfkIYdoA8VbPPB/X5igNjgYPXOCKjTaOzWNaAEuHUDLGi0qY23Np3MsVp otoPAHjWgAJJzCi5UtCJbIrr4gOpSTNOJ+w7MhU0TGLIB3J7Z4+vLM3Eotj0iUuU lWiAkIG97k+eO9vvjjyky3bGoB8kGLjz8nk2d8+dLbg2biWR7SLeX5zVJAM0JpJ7 o2JHUvboc+Nvi4F6n+fJrOWl9MfS47I= -----END CERTIFICATE-----Generated at Tue Jul 21 20:52:27 2026 by rpki-client