$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3145a232-20ec-30ef-8cbc-bb2f109c3425.roa File: 3145a232-20ec-30ef-8cbc-bb2f109c3425.roa (raw, json) Hash identifier: MqqBwX3F2hYNfA2Jlc3q8mbvrB6AxJQz9tpWC0PJ7E4= Subject key identifier: 04:AC:B7:42:88:67:26:D9:FE:2D:94:87:88:F5:2D:74:41:AA:B6:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4129D2E6D6C91258CC81ED20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3145a232-20ec-30ef-8cbc-bb2f109c3425.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 35994 IP address blocks: 23.217.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:d2:e6:d6:c9:12:58:cc:81:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=703b60e5-591c-4c2a-a19a-e5548efd7ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1c:23:f9:ab:e1:c7:88:87:c5:36:e0:01:2e: 35:48:d6:fa:01:ef:dc:91:87:f0:6d:6b:9d:70:e2: 9d:77:f8:09:f1:78:d6:44:f1:03:04:48:51:70:c7: 04:e9:69:94:05:59:fe:e4:bd:dc:c0:03:69:f1:7e: f2:f2:5a:c6:d3:28:18:15:ba:b2:ce:35:05:8f:43: 29:ec:7a:d3:1f:41:ea:08:b9:8f:67:e5:93:89:00: 71:0d:f9:da:81:11:88:17:b6:7f:72:a0:b9:15:78: 09:32:f8:3b:f0:3a:ba:7a:b0:f3:9e:3d:e0:ba:1f: 5a:ea:fd:11:71:e7:f5:25:8e:8f:0a:29:ca:cd:a3: 7e:5c:a5:d8:91:66:52:31:68:cb:1c:bb:59:96:da: 41:f1:61:e2:55:c9:0a:0c:15:9d:b5:da:a0:96:0c: c6:4c:91:9e:97:40:68:5d:94:9a:76:30:d1:f2:49: 9c:f6:b6:70:97:96:6a:5f:d6:9e:c1:1f:2f:0b:50: e5:ce:6e:12:68:e5:d6:3f:1b:29:65:14:d1:12:46: 30:45:2b:53:8d:08:fe:07:28:ec:89:3b:40:82:1b: c1:18:82:3f:9f:16:8f:8c:92:83:0c:26:98:74:b7: 01:d9:b4:67:92:03:ce:81:68:96:57:e2:a4:79:cb: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AC:B7:42:88:67:26:D9:FE:2D:94:87:88:F5:2D:74:41:AA:B6:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3145a232-20ec-30ef-8cbc-bb2f109c3425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:9f:7f:82:32:04:07:45:66:d6:95:3a:58:fd:1f:8f:4e:57: 11:d4:c3:4a:70:25:37:21:b6:72:fe:0f:b7:3f:04:aa:05:b8: 1c:3a:7b:6e:91:4c:c3:e3:a3:dc:34:d2:3b:c9:e7:94:0c:3f: d1:af:58:33:73:eb:cf:5f:1f:c7:86:00:68:42:34:a9:e9:de: 6f:97:53:69:54:86:fb:54:74:c9:4e:90:6f:60:2f:ab:73:52: c0:44:f9:54:04:f4:4d:fe:ec:4f:7b:6f:41:a3:d1:f9:8a:5b: 78:bd:a9:56:46:4d:0a:c9:2c:43:e2:68:15:2b:26:5d:02:75: 91:fa:a4:23:6b:0f:d9:95:61:50:0c:7f:96:c9:3d:1f:af:28: 7c:9f:80:83:8f:21:42:09:3b:04:fe:2b:9f:10:9a:63:c2:a3: 86:ca:48:9a:60:18:81:92:06:13:2e:c1:93:05:37:29:57:7f: e1:79:36:69:3e:3b:31:38:68:ee:c5:c2:44:26:d4:c5:36:cf: 21:7b:2d:a7:e6:1a:9d:9e:c9:df:55:74:b6:18:a0:87:db:b8: 5a:d5:e0:d2:0b:ca:6c:04:2d:26:33:38:4e:48:4a:45:29:6b: 2c:95:c5:e0:e3:ac:e6:5b:93:cd:f2:c6:b9:88:09:4c:e8:48: 35:1c:2c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdLm1skSWMyB7SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk NzAzYjYwZTUtNTkxYy00YzJhLWExOWEtZTU1NDhlZmQ3Y2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhwj+avhx4iHxTbgAS41SNb6Ae/ckYfwbWud cOKdd/gJ8XjWRPEDBEhRcMcE6WmUBVn+5L3cwANp8X7y8lrG0ygYFbqyzjUFj0Mp 7HrTH0HqCLmPZ+WTiQBxDfnagRGIF7Z/cqC5FXgJMvg78Dq6erDznj3guh9a6v0R cef1JY6PCinKzaN+XKXYkWZSMWjLHLtZltpB8WHiVckKDBWdtdqglgzGTJGel0Bo XZSadjDR8kmc9rZwl5ZqX9aewR8vC1Dlzm4SaOXWPxspZRTREkYwRStTjQj+Byjs iTtAghvBGII/nxaPjJKDDCaYdLcB2bRnkgPOgWiWV+KkecvBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASst0KIZybZ/i2Uh4j1LXRBqrbKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzE0NWEyMzItMjBlYy0z MGVmLThjYmMtYmIyZjEwOWMzNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqff4IyBAdFZtaVOlj9H49OVxHUw0pwJTchtnL+D7c/BKoFuBw6e26R TMPjo9w00jvJ55QMP9GvWDNz689fH8eGAGhCNKnp3m+XU2lUhvtUdMlOkG9gL6tz UsBE+VQE9E3+7E97b0Gj0fmKW3i9qVZGTQrJLEPiaBUrJl0CdZH6pCNrD9mVYVAM f5bJPR+vKHyfgIOPIUIJOwT+K58QmmPCo4bKSJpgGIGSBhMuwZMFNylXf+F5Nmk+ OzE4aO7FwkQm1MU2zyF7LafmGp2eyd9VdLYYoIfbuFrV4NILymwELSYzOE5ISkUp ayyVxeDjrOZbk83yxrmICUzoSDUcLMM= -----END CERTIFICATE-----Generated at Tue Jul 21 20:44:55 2026 by rpki-client