$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ffeb7dd-f695-360d-bef8-615dc87f0881.roa File: 0ffeb7dd-f695-360d-bef8-615dc87f0881.roa (raw, json) Hash identifier: B4mPMetEmHXr8dTge86tQ4vzROhGhzSkG5E+v6UFPgU= Subject key identifier: B5:1C:08:66:90:BF:96:22:92:C8:B8:BA:86:70:8A:6C:E3:37:79:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E561A07667766413D1896F300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ffeb7dd-f695-360d-bef8-615dc87f0881.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 55836 IP address blocks: 23.64.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:1a:07:66:77:66:41:3d:18:96:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=3d03b522-3854-47aa-b03c-4a6f8780a1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:aa:bc:ed:83:54:80:02:4a:d2:0a:22:1e:69: d0:ff:da:ed:53:1a:6a:11:94:3c:bc:ea:0b:57:e3: 63:6a:98:d7:62:a4:ef:34:1c:ab:f6:82:6e:a5:7f: ba:87:24:fb:67:74:91:87:66:f1:b2:65:7b:cd:f9: 95:ac:47:9b:10:a4:48:be:17:a8:5b:6a:ec:86:9e: d4:8c:c6:fc:cb:fd:85:bb:57:fb:e7:e7:b4:d7:c0: cf:1f:40:72:1c:10:0f:ab:4d:f9:43:c2:59:74:6a: e6:54:41:d1:bc:1e:dc:a7:e7:cb:be:1f:ab:ca:38: 81:a9:bb:a6:0e:bf:81:36:77:19:ec:ee:4b:bb:b8: e3:b7:93:cc:5f:10:78:53:e2:37:29:40:01:19:1d: 2f:fc:f0:f3:f3:5c:81:6f:3b:6b:e0:bf:85:a6:ab: f9:c1:89:00:9f:92:b2:5e:2a:56:50:53:4a:d1:85: 6b:b2:97:bc:83:7c:b7:24:a6:cd:37:af:07:85:10: d1:b8:df:ca:31:d0:22:9f:b9:e5:c8:9f:bf:28:98: 8c:22:64:8a:82:19:0d:8d:ba:62:1d:64:f3:a8:6d: ec:f7:dd:dc:e1:82:cb:93:1d:05:ff:fe:5f:a3:e6: 24:d0:09:be:6c:2e:1c:63:ee:48:fc:f9:f1:42:69: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1C:08:66:90:BF:96:22:92:C8:B8:BA:86:70:8A:6C:E3:37:79:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ffeb7dd-f695-360d-bef8-615dc87f0881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ff:a6:4d:df:66:79:a6:7a:59:70:9b:97:ed:a3:34:de:b8: a8:5e:76:1d:82:ca:90:9e:5d:b1:9c:00:2e:2f:83:6c:1a:4f: 6d:29:7d:b5:ee:8d:11:de:fc:3b:21:fa:21:a6:b6:48:df:c5: 6a:01:a3:97:bd:e8:19:d5:8c:d1:d1:6e:48:a3:2a:e7:a5:49: b1:bb:68:bd:f6:cf:34:08:00:b7:68:e6:70:ff:83:d9:45:21: 99:13:e8:dc:f8:ea:d5:41:76:02:ac:f3:7e:56:68:15:af:cb: ce:c4:c4:60:76:84:22:89:34:25:6b:54:47:39:4e:cc:18:4b: 98:7c:b7:83:03:0c:1d:2b:fa:ea:98:c6:6d:e9:0a:8e:fd:0c: be:a1:1f:ad:33:27:1d:5c:b7:21:66:85:14:7a:73:d7:1e:1f: 1d:77:07:07:15:a3:18:fc:13:4a:40:f0:48:c7:f1:cf:53:e2: 9e:5d:f2:f7:ca:0e:b0:74:80:c9:71:66:30:6b:d8:36:57:f2: f9:26:44:a1:77:7d:e6:b5:21:78:28:8d:b0:84:46:e5:6f:c2: 5c:55:1c:af:06:26:ef:90:c6:8e:5b:4d:04:65:2e:1d:c7:ba: 48:32:04:7b:86:b4:ed:b9:7a:af:e8:62:0a:09:cb:34:b7:de: 5e:89:8d:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGgdmd2ZBPRiW8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk M2QwM2I1MjItMzg1NC00N2FhLWIwM2MtNGE2Zjg3ODBhMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6q87YNUgAJK0goiHmnQ/9rtUxpqEZQ8vOoL V+NjapjXYqTvNByr9oJupX+6hyT7Z3SRh2bxsmV7zfmVrEebEKRIvheoW2rshp7U jMb8y/2Fu1f75+e018DPH0ByHBAPq035Q8JZdGrmVEHRvB7cp+fLvh+ryjiBqbum Dr+BNncZ7O5Lu7jjt5PMXxB4U+I3KUABGR0v/PDz81yBbztr4L+Fpqv5wYkAn5Ky XipWUFNK0YVrspe8g3y3JKbNN68HhRDRuN/KMdAin7nlyJ+/KJiMImSKghkNjbpi HWTzqG3s993c4YLLkx0F//5fo+Yk0Am+bC4cY+5I/PnxQmnbuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUcCGaQv5Yiksi4uoZwimzjN3k4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGZmZWI3ZGQtZjY5NS0z NjBkLWJlZjgtNjE1ZGM4N2YwODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0CMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn/pk3fZnmmellwm5ftozTeuKhedh2CypCeXbGcAC4vg2waT20pfbXu jRHe/Dsh+iGmtkjfxWoBo5e96BnVjNHRbkijKuelSbG7aL32zzQIALdo5nD/g9lF IZkT6Nz46tVBdgKs835WaBWvy87ExGB2hCKJNCVrVEc5TswYS5h8t4MDDB0r+uqY xm3pCo79DL6hH60zJx1ctyFmhRR6c9ceHx13BwcVoxj8E0pA8EjH8c9T4p5d8vfK DrB0gMlxZjBr2DZX8vkmRKF3fea1IXgojbCERuVvwlxVHK8GJu+Qxo5bTQRlLh3H ukgyBHuGtO25eq/oYgoJyzS33l6JjTs= -----END CERTIFICATE-----Generated at Tue Jul 21 20:44:51 2026 by rpki-client