$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa File: 215471b5-2100-3f40-ae75-911f05bd076e.roa (raw, json) Hash identifier: HSoJWkqoPIicD4QFHvGi/0Oc9DhrRZXANATrAnU3uak= Subject key identifier: FC:60:34:4C:AD:E2:98:71:B8:1B:3A:77:DB:13:87:AB:1A:C7:A7:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E66DA2521563D1B50217DA180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 20940 IP address blocks: 23.10.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:25:21:56:3d:1b:50:21:7d:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=f3d3b927-5a58-4d8d-8a10-f2e1be3044ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:38:74:2c:19:84:62:97:30:5f:35:90:13:e3: 4f:65:9a:c6:b7:95:e2:11:fa:29:34:e9:e1:33:94: 66:45:eb:e0:49:d3:c4:41:94:24:e0:53:e1:88:3b: 4b:e5:57:57:00:10:2c:df:87:31:6d:58:a2:82:79: 80:b1:9e:67:a9:59:b1:d3:a7:c1:7d:bb:4d:0f:45: ff:79:fc:09:3b:80:d2:5a:b1:50:36:61:e4:0a:e8: 1d:7c:47:ce:32:12:a7:e5:24:dc:d7:ea:ab:10:64: 20:20:35:f8:65:7a:69:74:40:e3:ea:bd:d3:e1:12: 10:80:d0:fe:62:6e:40:81:f0:1e:c5:60:2f:77:45: 49:9b:74:d5:81:b9:5f:c1:33:18:ee:8c:f0:92:f7: 57:3d:bf:13:17:27:02:91:49:c6:f9:7e:40:2c:87: 79:ae:6e:86:b5:7c:95:12:c8:ec:58:e5:c7:f8:6a: 80:bf:5f:f6:48:01:53:e4:f7:16:7a:3b:e8:91:1d: 0b:9d:aa:e8:70:b8:47:c0:f7:58:43:05:af:6f:2e: 44:01:68:df:75:c5:74:fb:2f:17:0b:34:06:b9:0f: c0:6c:6e:39:78:09:62:41:cb:cc:85:29:47:ad:95: 70:ac:94:29:fb:c1:8c:d5:8d:11:4a:f0:46:75:0d: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:60:34:4C:AD:E2:98:71:B8:1B:3A:77:DB:13:87:AB:1A:C7:A7:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.10.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:22:84:ef:e7:4d:93:79:01:b8:58:86:7b:11:ec:4d:de:d0: b6:4e:03:3b:a5:9b:ad:a2:e7:e5:74:c2:51:69:62:89:cb:ec: c4:5f:3e:f3:ea:fa:af:ca:4a:06:69:45:d9:81:2c:cd:fa:ff: a9:15:1f:ab:93:36:b0:80:58:67:8c:ab:1a:bc:08:86:48:62: e2:ef:a4:f0:66:c5:c3:80:9b:5b:a6:ef:4a:12:5f:ee:1d:b4: 3e:03:4a:33:64:c5:3a:f6:cc:02:23:9d:6c:c0:1b:3e:bc:cd: 28:ab:6c:98:25:ab:1f:42:04:d7:85:3a:6a:c8:29:da:4b:eb: 30:65:e5:49:72:d2:a9:c2:43:ac:e7:42:7f:8b:86:92:f3:43: f0:4e:66:2b:fb:d4:aa:5c:94:44:74:24:aa:99:b5:b6:4f:79: 0c:55:5b:13:f1:05:32:eb:0f:6a:27:46:cf:cd:8a:8e:80:5d: 0f:5a:50:a5:59:7f:63:b6:ca:64:00:81:9c:a4:e1:02:6d:67: 9a:e8:92:7f:dc:14:ba:5b:c6:0d:dd:60:6e:c9:4e:bf:59:98: 20:7b:a2:a8:70:05:0c:f5:4a:57:42:49:42:df:1d:24:93:29: be:dc:72:c1:a0:35:a4:b6:3d:be:ae:0e:33:fd:53:e1:9b:d9: 22:d8:9f:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2iUhVj0bUCF9oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZjNkM2I5MjctNWE1OC00ZDhkLThhMTAtZjJlMWJlMzA0NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Dh0LBmEYpcwXzWQE+NPZZrGt5XiEfopNOnh M5RmRevgSdPEQZQk4FPhiDtL5VdXABAs34cxbViignmAsZ5nqVmx06fBfbtND0X/ efwJO4DSWrFQNmHkCugdfEfOMhKn5STc1+qrEGQgIDX4ZXppdEDj6r3T4RIQgND+ Ym5AgfAexWAvd0VJm3TVgblfwTMY7ozwkvdXPb8TFycCkUnG+X5ALId5rm6GtXyV EsjsWOXH+GqAv1/2SAFT5PcWejvokR0LnarocLhHwPdYQwWvby5EAWjfdcV0+y8X CzQGuQ/AbG45eAliQcvMhSlHrZVwrJQp+8GM1Y0RSvBGdQ1TTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxgNEyt4phxuBs6d9sTh6sax6cEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE1NDcxYjUtMjEwMC0z ZjQwLWFlNzUtOTExZjA1YmQwNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8ihO/nTZN5AbhYhnsR7E3e0LZOAzulm62i5+V0wlFpYonL7MRfPvPq +q/KSgZpRdmBLM36/6kVH6uTNrCAWGeMqxq8CIZIYuLvpPBmxcOAm1um70oSX+4d tD4DSjNkxTr2zAIjnWzAGz68zSirbJglqx9CBNeFOmrIKdpL6zBl5Uly0qnCQ6zn Qn+LhpLzQ/BOZiv71KpclER0JKqZtbZPeQxVWxPxBTLrD2onRs/Nio6AXQ9aUKVZ f2O2ymQAgZyk4QJtZ5rokn/cFLpbxg3dYG7JTr9ZmCB7oqhwBQz1SldCSULfHSST Kb7ccsGgNaS2Pb6uDjP9U+Gb2SLYn5Q= -----END CERTIFICATE-----Generated at Tue Jul 21 20:47:51 2026 by rpki-client