$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c873fa7-d27a-3a98-a8c1-cf7928a2b174.roa File: 2c873fa7-d27a-3a98-a8c1-cf7928a2b174.roa (raw, json) Hash identifier: FaERpIfiw1veIXQR77txs9X/dFKGQJlJes97ZFQyL9s= Subject key identifier: 02:EC:34:B7:4B:E0:FD:5E:D4:55:0F:DE:89:26:C3:2B:AD:B2:FD:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E82EB6B6264F425F2B387C300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c873fa7-d27a-3a98-a8c1-cf7928a2b174.roa Signing time: Wed 15 Jul 2026 22:17:56 +0000 ROA not before: Wed 15 Jul 2026 22:17:56 +0000 ROA not after: Tue 13 Oct 2026 22:17:56 +0000 asID: 33905 IP address blocks: 23.11.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:82:eb:6b:62:64:f4:25:f2:b3:87:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 15 22:17:56 2026 GMT Not After : Oct 13 22:17:56 2026 GMT Subject: CN=c11a6be9-c45c-4f3f-a175-d175a878d4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:47:f7:b2:c5:c9:86:6a:e5:55:b6:7b:e5: 5d:a7:e3:f7:67:b2:0c:e8:1b:92:da:26:67:69:95: 10:35:5a:8a:63:8a:a5:c3:a9:8c:73:84:e1:b8:35: e5:c1:2d:ab:36:34:0f:63:ff:2f:d0:f0:92:ac:d5: 72:63:da:d2:52:d8:fd:0c:ee:5e:a8:cc:4c:7c:53: 63:54:a6:d0:69:2c:8b:ad:17:d0:dd:35:64:b2:97: 38:26:09:97:ca:5a:43:b4:a6:34:bd:5c:ed:61:a3: 3e:3c:9d:97:92:c9:a0:6a:96:51:c9:12:a3:58:9f: 0f:48:ed:94:c7:f2:41:df:7a:3b:cc:8e:19:5a:70: 9c:8f:8b:b7:be:ba:21:81:35:11:53:52:a6:ca:39: 0c:73:4d:37:4b:fa:eb:c7:c9:66:43:4c:f9:ad:cf: a9:10:15:c6:bc:c3:02:b1:f7:47:98:11:9b:84:dc: af:51:8e:53:93:62:00:10:1f:56:91:69:7d:6a:c1: f6:75:37:fc:25:ed:6e:a9:dc:6b:87:f3:4a:3e:05: de:cb:a8:5d:7e:2c:8e:a2:36:42:ae:9c:3d:cf:83: 2a:78:04:42:80:39:7b:67:f3:d5:e1:5e:2b:ff:c7: 0e:ee:42:f7:a6:78:c6:9e:9d:7e:de:ec:5f:29:84: 9a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EC:34:B7:4B:E0:FD:5E:D4:55:0F:DE:89:26:C3:2B:AD:B2:FD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c873fa7-d27a-3a98-a8c1-cf7928a2b174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9b:a6:8f:4d:52:53:e2:f7:81:ff:87:28:60:fb:d8:8a:4c: ab:08:3c:ba:fb:00:b7:72:8a:0c:e8:eb:25:4c:2b:d1:2a:eb: 57:6c:45:59:9f:c3:33:f3:5b:e0:7c:87:9c:64:9f:2d:09:0b: 8b:f5:cb:b0:f6:ee:08:20:94:ce:4c:c6:d2:c9:35:ae:2f:a8: 96:43:ca:5f:64:c9:5a:41:ae:39:13:4d:e5:4f:ff:a2:51:2f: 93:9f:2e:21:a2:36:5c:66:54:f6:49:75:c4:6b:f3:5b:c4:4f: e9:01:7b:58:eb:3b:0c:e5:96:d8:88:71:95:ef:b8:23:ad:ce: df:2a:fc:73:47:7f:16:87:c8:21:ed:cb:c6:68:8c:25:d6:01: e0:02:ae:2f:b7:37:b4:98:f5:7a:c2:a3:35:1a:56:0a:e8:c7: 1f:0a:1c:66:a2:66:fd:33:f2:c8:f9:a0:24:80:e8:b3:4f:50: 21:f6:bf:34:01:5a:2f:69:59:89:43:60:4c:99:96:d4:22:a0: fa:be:54:2f:bc:12:a1:a1:d7:b0:88:29:e4:c4:14:ef:21:7d: 70:df:aa:14:89:e3:f8:2a:66:4d:5d:be:61:62:6f:f9:50:78: b4:7f:17:88:a3:44:97:9d:c2:e4:1e:68:91:3f:18:eb:84:c0: 49:9b:86:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6C62tiZPQl8rOHwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxNTIyMTc1NloXDTI2MTAxMzIyMTc1NlowLzEtMCsGA1UEAxMk YzExYTZiZTktYzQ1Yy00ZjNmLWExNzUtZDE3NWE4NzhkNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8hH97LFyYZq5VW2e+Vdp+P3Z7IM6BuS2iZn aZUQNVqKY4qlw6mMc4ThuDXlwS2rNjQPY/8v0PCSrNVyY9rSUtj9DO5eqMxMfFNj VKbQaSyLrRfQ3TVkspc4JgmXylpDtKY0vVztYaM+PJ2XksmgapZRyRKjWJ8PSO2U x/JB33o7zI4ZWnCcj4u3vrohgTURU1KmyjkMc003S/rrx8lmQ0z5rc+pEBXGvMMC sfdHmBGbhNyvUY5Tk2IAEB9WkWl9asH2dTf8Je1uqdxrh/NKPgXey6hdfiyOojZC rpw9z4MqeARCgDl7Z/PV4V4r/8cO7kL3pnjGnp1+3uxfKYSaawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALsNLdL4P1e1FUP3okmwyutsv3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM4NzNmYTctZDI3YS0z YTk4LWE4YzEtY2Y3OTI4YTJiMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImbpo9NUlPi94H/hyhg+9iKTKsIPLr7ALdyigzo6yVMK9Eq61dsRVmf wzPzW+B8h5xkny0JC4v1y7D27ggglM5MxtLJNa4vqJZDyl9kyVpBrjkTTeVP/6JR L5OfLiGiNlxmVPZJdcRr81vET+kBe1jrOwzlltiIcZXvuCOtzt8q/HNHfxaHyCHt y8ZojCXWAeACri+3N7SY9XrCozUaVgroxx8KHGaiZv0z8sj5oCSA6LNPUCH2vzQB Wi9pWYlDYEyZltQioPq+VC+8EqGh17CIKeTEFO8hfXDfqhSJ4/gqZk1dvmFib/lQ eLR/F4ijRJedwuQeaJE/GOuEwEmbhhM= -----END CERTIFICATE-----Generated at Tue Jul 21 19:57:50 2026 by rpki-client