$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3659b5e7-04b1-36bb-a14c-8f71b879a094.roa File: 3659b5e7-04b1-36bb-a14c-8f71b879a094.roa (raw, json) Hash identifier: PmDmcS3k4b6CCMq3PyYEYhQr9vR5Zh7sX1BA01UK7w0= Subject key identifier: 3E:ED:89:E1:1A:8A:E1:E2:E6:F0:39:B7:30:44:E4:AB:00:E8:64:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E8DEFB01642CAD74B3D6E3700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3659b5e7-04b1-36bb-a14c-8f71b879a094.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.32.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:b0:16:42:ca:d7:4b:3d:6e:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=6a3a84a9-a518-456c-9df7-a281a8c888f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:f4:5d:35:b3:ec:19:23:24:5b:f4:28:1f: b0:15:9f:53:48:be:03:61:65:fe:d7:d0:05:ec:22: 36:32:ca:9e:43:df:f6:61:95:fb:2a:5c:14:e1:26: a2:c3:50:78:7e:6c:85:d0:e0:24:5e:2b:46:4b:b9: 45:1b:2f:bb:b8:6d:df:0a:fd:5c:95:19:0b:cb:8d: b3:36:69:0d:50:eb:e6:7b:8c:bc:da:ef:c6:ec:54: 4c:54:64:28:fc:64:98:3c:bb:0f:d3:8f:2e:11:c1: e8:b2:3f:49:8c:c3:2b:bf:1d:a0:00:ee:af:8f:fd: 58:ec:37:96:a9:fa:43:2b:14:94:bd:3a:58:80:12: 75:15:a2:42:26:41:95:85:62:4f:70:81:bb:c5:da: 15:d4:b0:f4:30:8c:8c:62:33:3d:55:da:87:4f:89: ba:5b:4a:de:cd:07:4d:5e:cc:37:cd:81:60:74:7d: 2b:92:e7:21:96:79:a9:ca:05:01:c6:d6:ef:cb:44: f4:aa:1a:57:b1:72:26:ad:49:58:79:4f:31:ec:53: 44:53:f0:de:10:3f:c8:92:39:c2:ce:d2:10:14:07: e3:24:1c:e1:b8:5a:71:ab:2b:69:de:87:de:de:0c: aa:ff:9b:a1:13:0f:c1:f2:fa:d4:c1:99:63:c8:a2: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:ED:89:E1:1A:8A:E1:E2:E6:F0:39:B7:30:44:E4:AB:00:E8:64:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3659b5e7-04b1-36bb-a14c-8f71b879a094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:04:ae:d8:ba:ea:83:f9:ce:50:c2:dd:1f:97:81:49:ef:3f: 28:6a:db:e6:47:7f:34:ef:63:f0:aa:63:b5:10:d2:d2:be:bf: 12:ec:14:da:3e:dd:d4:c3:a7:74:50:92:63:13:3a:d3:fe:88: db:f3:6c:e5:b0:85:54:03:8c:d7:ea:19:e0:1e:b2:7e:91:0b: cb:86:25:ad:af:56:6a:da:00:4b:dd:45:62:aa:76:15:e5:1d: 11:40:8b:82:48:6d:cd:ec:c7:03:b1:29:b5:c8:6a:84:b9:cd: 84:5a:60:eb:2e:64:e5:fd:34:c9:98:0d:03:a2:66:c1:f8:13: f8:1b:8e:c2:87:5a:6d:ec:24:51:f1:c3:50:f2:cf:d2:03:18: a3:7f:01:bc:fe:5c:e4:6a:3a:17:60:3a:71:5f:2f:3b:ec:25: 2e:b3:85:61:65:10:d5:55:2f:35:44:92:18:1c:38:43:50:11: 3b:70:8a:c6:05:b6:41:3d:45:05:be:4e:52:44:3f:03:1f:51: 94:04:48:77:50:32:17:7b:8e:5a:ed:18:14:1f:ea:8d:16:8c: 82:b1:2d:72:b3:45:c3:d7:a1:81:be:80:11:47:9b:f2:14:8b: 23:d9:af:39:8b:8f:37:c6:1f:27:11:44:0a:2d:fa:44:d3:33: 31:5b:17:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N77AWQsrXSz1uNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk NmEzYTg0YTktYTUxOC00NTZjLTlkZjctYTI4MWE4Yzg4OGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2P0XTWz7BkjJFv0KB+wFZ9TSL4DYWX+19AF 7CI2MsqeQ9/2YZX7KlwU4Saiw1B4fmyF0OAkXitGS7lFGy+7uG3fCv1clRkLy42z NmkNUOvme4y82u/G7FRMVGQo/GSYPLsP048uEcHosj9JjMMrvx2gAO6vj/1Y7DeW qfpDKxSUvTpYgBJ1FaJCJkGVhWJPcIG7xdoV1LD0MIyMYjM9VdqHT4m6W0rezQdN Xsw3zYFgdH0rkuchlnmpygUBxtbvy0T0qhpXsXImrUlYeU8x7FNEU/DeED/IkjnC ztIQFAfjJBzhuFpxqytp3ofe3gyq/5uhEw/B8vrUwZljyKI23wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7tieEaiuHi5vA5tzBE5KsA6GQzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY1OWI1ZTctMDRiMS0z NmJiLWExNGMtOGY3MWI4NzlhMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Erti66oP5zlDC3R+XgUnvPyhq2+ZHfzTvY/CqY7UQ0tK+vxLsFNo+ 3dTDp3RQkmMTOtP+iNvzbOWwhVQDjNfqGeAesn6RC8uGJa2vVmraAEvdRWKqdhXl HRFAi4JIbc3sxwOxKbXIaoS5zYRaYOsuZOX9NMmYDQOiZsH4E/gbjsKHWm3sJFHx w1Dyz9IDGKN/Abz+XORqOhdgOnFfLzvsJS6zhWFlENVVLzVEkhgcOENQETtwisYF tkE9RQW+TlJEPwMfUZQESHdQMhd7jlrtGBQf6o0WjIKxLXKzRcPXoYG+gBFHm/IU iyPZrzmLjzfGHycRRAot+kTTMzFbF8s= -----END CERTIFICATE-----Generated at Tue Jul 21 19:59:00 2026 by rpki-client