$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c9febaf-3999-3d20-bea6-6e80eae301f7.roa File: 0c9febaf-3999-3d20-bea6-6e80eae301f7.roa (raw, json) Hash identifier: AJIi0ZcHT1fbO3nd9f1Wn3WIR7yFNBjHivoMlyPhqy0= Subject key identifier: D6:43:93:99:E9:44:E0:0A:FB:25:79:02:5E:40:21:DA:60:54:A9:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E51E9F392287A4916F36BF580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c9febaf-3999-3d20-bea6-6e80eae301f7.roa Signing time: Sun 28 Jun 2026 09:00:11 +0000 ROA not before: Sun 28 Jun 2026 09:00:11 +0000 ROA not after: Sat 26 Sep 2026 09:00:11 +0000 asID: 35994 IP address blocks: 23.65.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:51:e9:f3:92:28:7a:49:16:f3:6b:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 28 09:00:11 2026 GMT Not After : Sep 26 09:00:11 2026 GMT Subject: CN=dce5456c-0e70-4bcf-9da8-b02cbd96470a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ff:0d:5f:f2:16:52:28:6c:43:25:94:51:d8: e5:f4:95:b0:ea:54:0c:11:e2:a5:03:97:f7:cf:04: 24:4c:c9:3b:8a:90:2b:e4:ae:7b:e6:b2:a2:f5:ca: 85:db:94:a0:05:6d:12:22:68:b1:dc:c4:05:f7:8b: c7:f4:53:4b:57:31:41:b9:16:44:0f:15:9d:a1:72: e3:26:46:c4:a3:6d:14:96:89:c1:40:8f:15:4e:33: e4:1a:64:b5:99:e5:84:4a:a4:b7:bb:7e:88:38:58: e2:80:37:f3:69:55:5b:ac:e0:43:f1:27:f3:28:b4: e3:a7:88:9c:f9:05:1b:72:77:62:19:91:95:89:6f: 12:82:66:9b:79:1d:37:e0:03:99:43:e1:ac:44:da: 4c:b6:82:03:d4:5e:41:32:90:cf:41:73:53:97:44: 0e:01:0a:b0:47:2b:6f:a4:a6:ac:32:f1:3b:1f:99: 8c:67:37:6e:75:85:ee:6d:ed:6d:d6:2c:98:b4:1a: 17:1e:cd:66:5f:2d:ce:55:ed:3d:43:27:e2:46:78: c8:42:4f:63:98:73:92:15:33:d1:7f:90:c8:8c:19: e2:4a:5a:07:e9:7b:8d:1a:3b:38:d5:79:34:42:f9: b1:12:52:f7:67:7a:a2:d0:dd:98:63:22:76:65:95: 15:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:43:93:99:E9:44:E0:0A:FB:25:79:02:5E:40:21:DA:60:54:A9:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c9febaf-3999-3d20-bea6-6e80eae301f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f2:56:b0:4c:a1:c0:60:3e:d8:ba:87:23:bf:7d:66:63:44: 0d:f3:ef:dc:0e:71:68:fe:74:5b:19:31:06:2e:e5:1a:9b:9c: 8f:0d:67:ae:a4:e1:7f:de:4f:96:f0:76:81:0b:81:4c:25:ae: 42:4e:43:78:c2:6a:49:55:57:de:05:59:fa:e1:86:a1:a7:61: a1:17:88:9c:4c:1c:fc:fa:4f:01:f8:b2:dc:00:aa:63:2a:b7: 39:bb:7a:3e:3f:97:ce:2f:b3:8c:f2:ce:45:24:e1:52:03:c9: 38:45:83:ef:5d:c0:37:b9:ac:a4:5c:72:47:b8:46:c5:09:11: 8a:22:b2:b2:cc:71:6c:4b:f8:af:94:11:d7:c1:0a:61:bb:71: 8e:a5:00:49:4a:c0:f0:7a:ed:72:69:b3:a5:1e:c8:16:33:c1: 3f:aa:e4:18:53:f1:43:e4:ab:e2:ee:11:be:93:bf:ce:a7:a6: 63:e8:45:a1:0a:ed:ae:3e:59:8e:48:f8:cb:49:34:c2:2d:1b: ca:6d:f3:76:07:e0:21:6c:a4:8b:07:78:42:41:59:1a:b1:25: 80:74:01:3f:ed:1b:a1:a7:69:8c:7d:ba:20:27:a5:d2:31:83: fc:82:b2:99:5c:49:f1:40:f5:15:ad:6a:31:ce:82:91:71:1a: 6a:c9:68:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5R6fOSKHpJFvNr9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyODA5MDAxMVoXDTI2MDkyNjA5MDAxMVowLzEtMCsGA1UEAxMk ZGNlNTQ1NmMtMGU3MC00YmNmLTlkYTgtYjAyY2JkOTY0NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/8NX/IWUihsQyWUUdjl9JWw6lQMEeKlA5f3 zwQkTMk7ipAr5K575rKi9cqF25SgBW0SImix3MQF94vH9FNLVzFBuRZEDxWdoXLj JkbEo20UlonBQI8VTjPkGmS1meWESqS3u36IOFjigDfzaVVbrOBD8SfzKLTjp4ic +QUbcndiGZGViW8SgmabeR034AOZQ+GsRNpMtoID1F5BMpDPQXNTl0QOAQqwRytv pKasMvE7H5mMZzdudYXube1t1iyYtBoXHs1mXy3OVe09QyfiRnjIQk9jmHOSFTPR f5DIjBniSloH6XuNGjs41Xk0QvmxElL3Z3qi0N2YYyJ2ZZUVDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZDk5npROAK+yV5Al5AIdpgVKmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM5ZmViYWYtMzk5OS0z ZDIwLWJlYTYtNmU4MGVhZTMwMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0G/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADryVrBMocBgPti6hyO/fWZjRA3z79wOcWj+dFsZMQYu5RqbnI8NZ66k 4X/eT5bwdoELgUwlrkJOQ3jCaklVV94FWfrhhqGnYaEXiJxMHPz6TwH4stwAqmMq tzm7ej4/l84vs4zyzkUk4VIDyThFg+9dwDe5rKRccke4RsUJEYoisrLMcWxL+K+U EdfBCmG7cY6lAElKwPB67XJps6UeyBYzwT+q5BhT8UPkq+LuEb6Tv86npmPoRaEK 7a4+WY5I+MtJNMItG8pt83YH4CFspIsHeEJBWRqxJYB0AT/tG6GnaYx9uiAnpdIx g/yCsplcSfFA9RWtajHOgpFxGmrJaGM= -----END CERTIFICATE-----Generated at Tue Jul 21 21:45:25 2026 by rpki-client