$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d9bc60b-7648-3379-9ae0-5a30e6bf6a96.roa File: 0d9bc60b-7648-3379-9ae0-5a30e6bf6a96.roa (raw, json) Hash identifier: /LtYHElU7SNZw+vtYqS2KoX/yNg5Oh1LI69uC+nJt44= Subject key identifier: 96:68:CC:91:FC:70:15:86:37:C8:09:A7:EE:CD:21:F9:38:4F:40:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E6145104BF04813753C63CE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d9bc60b-7648-3379-9ae0-5a30e6bf6a96.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 20940 IP address blocks: 23.72.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:10:4b:f0:48:13:75:3c:63:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=5ed73069-ab03-4464-88a4-d208667c11d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:ed:24:81:13:65:e6:48:6a:51:bf:0a:96: 56:c5:27:9f:23:1d:e3:2c:4c:0d:d4:84:c9:62:b6: 4b:2b:85:d1:91:e6:7c:cd:b5:80:69:70:17:ca:d2: 9f:c3:88:e0:41:05:b1:7a:a6:2d:eb:d5:5a:d6:18: 1b:fa:59:64:20:09:27:a1:3c:8d:ba:2e:c0:4e:69: c1:dc:8f:e8:a1:ed:d0:c4:f2:d4:0d:08:5b:95:3d: ae:8f:22:66:45:1e:58:99:ed:70:83:bf:4b:79:47: 7f:36:0b:58:45:79:a6:6e:2a:ce:3c:65:ff:83:14: c6:15:c6:3d:71:08:43:4a:f0:a5:cc:b5:03:96:55: e7:50:12:45:1b:5a:e5:da:35:b3:b1:ea:45:ab:57: bb:e4:e4:76:ae:e7:a5:40:bd:9e:8a:32:d6:1b:1f: 76:b5:2f:d0:eb:eb:e4:10:dd:a3:33:d9:86:28:b1: 8f:97:22:10:70:c6:f4:02:b8:4e:e5:a3:fa:3a:63: 1e:8a:30:7a:85:4e:24:02:b0:c5:3c:da:01:47:dc: 5c:9b:15:9f:37:7e:27:f2:cc:db:95:88:c7:a5:02: 7a:06:36:51:9d:9e:14:65:fa:5c:00:fa:c0:80:01: 68:f2:a1:e2:61:18:34:53:00:16:d1:6e:82:1b:c8: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:68:CC:91:FC:70:15:86:37:C8:09:A7:EE:CD:21:F9:38:4F:40:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d9bc60b-7648-3379-9ae0-5a30e6bf6a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ca:e3:34:7a:4b:cf:70:c1:a8:f2:9a:d2:fa:df:c4:9c:6c: 6f:b4:62:4b:96:fb:07:52:93:f8:17:54:8d:c1:45:75:46:b1: eb:6d:a6:4d:df:bf:40:33:74:b8:99:80:df:29:d7:3e:bb:62: d5:1b:01:86:d5:59:f5:f7:36:f1:5c:73:42:63:88:f7:56:a5: 8d:6b:2a:fd:05:69:2e:00:64:10:e2:09:7a:f2:9a:5f:d4:54: ab:f7:71:c6:16:ca:53:48:cb:66:c8:12:30:4f:eb:6d:7a:40: 79:fe:35:5d:c9:e9:d0:ee:97:27:11:b6:cb:56:71:95:d5:41: 93:0f:2a:0f:5e:66:12:10:85:c7:3f:ae:7c:fe:aa:99:61:8c: b2:f4:22:1b:47:64:76:9b:96:6c:d0:c8:27:30:41:1e:64:8c: 3c:d7:3d:68:8f:1e:ae:40:c7:5a:1c:fc:cf:b3:b8:c5:09:a5: cc:e1:e0:91:c9:67:72:80:bc:f0:d7:4c:0d:14:dd:5f:14:66: 61:b1:4c:81:0e:a2:c4:17:86:8f:e7:58:4b:59:c9:b1:ae:40: ac:8a:2f:a1:ae:ec:39:94:ec:fb:e3:47:58:7e:f9:d0:8e:6c: f7:9c:a8:c6:e7:e5:91:11:f7:57:4d:02:12:76:93:04:69:db: 0a:1e:09:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRRBL8EgTdTxjzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk NWVkNzMwNjktYWIwMy00NDY0LTg4YTQtZDIwODY2N2MxMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+7tJIETZeZIalG/CpZWxSefIx3jLEwN1ITJ YrZLK4XRkeZ8zbWAaXAXytKfw4jgQQWxeqYt69Va1hgb+llkIAknoTyNui7ATmnB 3I/ooe3QxPLUDQhblT2ujyJmRR5Yme1wg79LeUd/NgtYRXmmbirOPGX/gxTGFcY9 cQhDSvClzLUDllXnUBJFG1rl2jWzsepFq1e75OR2ruelQL2eijLWGx92tS/Q6+vk EN2jM9mGKLGPlyIQcMb0ArhO5aP6OmMeijB6hU4kArDFPNoBR9xcmxWfN34n8szb lYjHpQJ6BjZRnZ4UZfpcAPrAgAFo8qHiYRg0UwAW0W6CG8j6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZozJH8cBWGN8gJp+7NIfk4T0DIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGQ5YmM2MGItNzY0OC0z Mzc5LTlhZTAtNWEzMGU2YmY2YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0j4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7K4zR6S89wwajymtL638ScbG+0YkuW+wdSk/gXVI3BRXVGsettpk3f v0AzdLiZgN8p1z67YtUbAYbVWfX3NvFcc0JjiPdWpY1rKv0FaS4AZBDiCXryml/U VKv3ccYWylNIy2bIEjBP6216QHn+NV3J6dDulycRtstWcZXVQZMPKg9eZhIQhcc/ rnz+qplhjLL0IhtHZHablmzQyCcwQR5kjDzXPWiPHq5Ax1oc/M+zuMUJpczh4JHJ Z3KAvPDXTA0U3V8UZmGxTIEOosQXho/nWEtZybGuQKyKL6Gu7DmU7PvjR1h++dCO bPecqMbn5ZER91dNAhJ2kwRp2woeCQY= -----END CERTIFICATE-----Generated at Tue Jul 21 20:42:24 2026 by rpki-client