$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a7ee6d4-bad1-3637-8970-40cb476ad10c.roa File: 0a7ee6d4-bad1-3637-8970-40cb476ad10c.roa (raw, json) Hash identifier: cEd2cVkOUXpXvE0VOAnij1LYvpzOWKON5ElN1v/tw7E= Subject key identifier: BE:88:7C:2D:21:C0:BA:4D:95:0C:A1:86:D4:87:1F:CF:8F:7C:FA:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E8F54FA971BEDE6AEF0D58B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a7ee6d4-bad1-3637-8970-40cb476ad10c.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.34.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:fa:97:1b:ed:e6:ae:f0:d5:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=e3a46ba3-7974-4892-b09a-267a5c8dc6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:82:26:f5:14:d6:1e:16:87:59:98:a9:d2: 20:21:5b:8c:2f:17:28:42:d8:b4:e8:4f:63:9b:eb: f7:00:88:00:15:12:90:e9:dd:bd:9b:d5:51:7b:e2: 69:d9:a3:da:2b:fd:58:b3:8c:36:c3:a2:61:1b:71: 9b:b6:a5:21:af:dd:90:56:77:79:6b:4d:95:37:fb: 7c:19:79:ef:36:ae:cf:75:fb:50:ea:32:9f:05:ba: 40:c0:a8:99:25:a3:1d:f6:22:8f:26:84:1e:b6:7e: a3:1b:39:10:02:1d:07:33:49:54:63:7f:3c:00:ba: 1b:c7:50:c3:02:2e:f8:06:60:c2:de:a8:06:7f:cd: bf:87:4e:37:79:22:9f:28:80:3b:81:5f:61:b2:ab: d5:b7:a4:36:39:7f:a4:3a:de:dc:64:e8:28:de:7b: 7f:fd:50:40:58:e9:54:98:55:03:c9:63:62:ca:84: 96:ff:ec:4d:72:4f:16:de:4a:91:84:c1:54:8e:59: 51:6f:45:3b:0f:38:41:35:bb:a3:51:c9:64:02:e6: 2b:52:02:06:bd:66:0c:df:23:15:d0:59:e7:95:d8: fe:b7:d0:f7:8f:9f:27:b9:c7:a1:16:76:12:7c:3f: 9a:f0:8a:89:f1:79:7e:ca:0c:3e:21:a0:5e:0e:8b: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:7C:2D:21:C0:BA:4D:95:0C:A1:86:D4:87:1F:CF:8F:7C:FA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a7ee6d4-bad1-3637-8970-40cb476ad10c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:f9:91:68:89:73:05:5d:05:ab:90:98:0d:5e:58:27:b1:a6: d4:c1:df:7e:de:bf:1b:c4:b8:f6:c6:fa:da:bc:df:43:0c:f8: d7:f4:80:ae:9e:bf:98:06:06:71:a8:7b:0c:5b:57:9c:6a:8c: f1:e4:72:8e:98:a1:09:9d:8e:77:b4:e8:48:69:2a:dc:21:1c: 29:a2:c7:0c:4f:32:43:84:b9:d5:2f:07:3f:7c:90:1b:4b:a7: 07:44:84:29:af:5d:49:db:ca:c2:36:f8:b3:9d:92:59:7b:d8: 34:63:2f:5c:35:90:3e:60:58:4a:86:14:6f:49:9a:9b:2d:11: 8d:f4:34:9c:26:ff:ac:17:08:75:f8:79:07:7a:3f:c6:20:ce: b9:33:c0:48:ba:40:d5:bf:3b:97:9b:96:7a:56:21:56:2c:13: 2d:e6:21:64:f1:3d:f4:29:86:5b:32:19:72:be:a5:42:cb:69: 6e:af:3d:61:66:fd:c5:7d:23:09:11:1b:02:98:ae:2b:25:3d: 0d:93:6c:42:31:5f:d9:54:50:21:1e:7a:15:14:70:42:87:9c: e7:fe:71:4e:1b:26:2c:47:dc:35:79:06:e7:4f:aa:da:dd:fb: 08:2b:f9:dc:48:e3:c4:40:85:23:12:6c:fa:07:cc:bb:47:d2: f6:e7:6b:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPqXG+3mrvDVi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZTNhNDZiYTMtNzk3NC00ODkyLWIwOWEtMjY3YTVjOGRjNmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIWCJvUU1h4Wh1mYqdIgIVuMLxcoQti06E9j m+v3AIgAFRKQ6d29m9VRe+Jp2aPaK/1Ys4w2w6JhG3GbtqUhr92QVnd5a02VN/t8 GXnvNq7PdftQ6jKfBbpAwKiZJaMd9iKPJoQetn6jGzkQAh0HM0lUY388ALobx1DD Ai74BmDC3qgGf82/h043eSKfKIA7gV9hsqvVt6Q2OX+kOt7cZOgo3nt//VBAWOlU mFUDyWNiyoSW/+xNck8W3kqRhMFUjllRb0U7DzhBNbujUclkAuYrUgIGvWYM3yMV 0Fnnldj+t9D3j58nucehFnYSfD+a8IqJ8Xl+ygw+IaBeDovgdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6IfC0hwLpNlQyhhtSHH8+PfPqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE3ZWU2ZDQtYmFkMS0z NjM3LTg5NzAtNDBjYjQ3NmFkMTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyLxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD5kWiJcwVdBauQmA1eWCexptTB337evxvEuPbG+tq830MM+Nf0gK6e v5gGBnGoewxbV5xqjPHkco6YoQmdjne06EhpKtwhHCmixwxPMkOEudUvBz98kBtL pwdEhCmvXUnbysI2+LOdkll72DRjL1w1kD5gWEqGFG9JmpstEY30NJwm/6wXCHX4 eQd6P8YgzrkzwEi6QNW/O5eblnpWIVYsEy3mIWTxPfQphlsyGXK+pULLaW6vPWFm /cV9IwkRGwKYrislPQ2TbEIxX9lUUCEeehUUcEKHnOf+cU4bJixH3DV5BudPqtrd +wgr+dxI48RAhSMSbPoHzLtH0vbna/w= -----END CERTIFICATE-----Generated at Tue Jul 21 20:48:04 2026 by rpki-client