$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3894599d-9bff-3c80-b4ba-eaf95a111aac.roa File: 3894599d-9bff-3c80-b4ba-eaf95a111aac.roa (raw, json) Hash identifier: 4d8u5O4UY2AL1EQpskz+a6E3qD2VSbbNl4fFkScsAyQ= Subject key identifier: C3:8F:CE:2B:1F:BE:BA:34:2C:96:82:65:7E:74:05:4A:F1:7B:23:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E66DA2FEFA245347642FF1B60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3894599d-9bff-3c80-b4ba-eaf95a111aac.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16625 IP address blocks: 23.2.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:2f:ef:a2:45:34:76:42:ff:1b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=2724eee2-8d45-40f7-8d47-9591e932783c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9b:0d:6a:f6:e2:79:09:74:a6:28:78:ae:4c: bf:b4:36:3b:a2:89:ab:b9:64:0a:c2:39:e8:16:e7: c2:cc:3b:d9:c3:64:9a:d8:cd:0d:98:ae:c1:55:b2: d9:33:a3:bc:97:71:5b:e9:38:f6:26:63:32:bc:8f: f2:09:95:a2:74:2e:27:4d:8b:0f:f9:af:c5:97:4e: 99:c5:d9:fb:d6:91:38:58:55:b3:3c:dd:65:a5:0e: 0a:0e:78:09:10:2a:14:93:8b:69:07:ed:5e:4b:f5: e0:9a:4d:cd:7c:22:af:69:79:f0:f6:1c:9f:66:c0: 0c:fc:94:88:3f:7c:a2:1e:f1:b8:08:df:ed:0d:64: 84:b0:6d:08:31:d5:15:5f:aa:27:72:02:0b:34:f2: c2:1a:67:79:0b:c0:94:b4:31:59:00:12:e1:b4:03: 6d:94:92:39:cb:dc:7b:fb:82:ff:4b:7d:e0:14:b2: fc:b2:d0:5d:4b:16:9b:2d:0f:73:72:64:9d:2c:4c: a9:ca:3d:b6:05:4e:42:7c:bd:02:75:96:db:d3:ed: 12:90:90:34:9e:40:a9:8f:70:fc:17:32:95:90:e6: fa:a9:4d:5d:b4:82:e9:2c:4d:01:dc:9c:b9:c5:84: de:89:2b:bd:34:09:91:42:26:a6:09:e8:84:41:01: af:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8F:CE:2B:1F:BE:BA:34:2C:96:82:65:7E:74:05:4A:F1:7B:23:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3894599d-9bff-3c80-b4ba-eaf95a111aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:22:d4:21:48:ba:0a:86:30:2f:7b:39:b3:4c:f9:cd:b8:ad: dc:9e:c9:34:42:51:9e:03:9c:e3:c6:73:66:30:4f:f9:06:ea: c1:ee:37:5b:70:1c:e2:1e:07:f9:2b:31:3d:e5:28:ad:71:d5: c8:51:98:e3:bf:88:cb:ef:8d:dc:10:d9:bb:1b:dc:e0:c4:86: d9:e3:7a:e2:6e:df:ea:54:ea:01:c3:63:5b:16:ee:49:2e:95: 38:7b:01:60:4f:24:f8:58:91:1e:dc:ae:22:62:3c:1a:b2:63: c5:a6:b7:b0:4b:d2:bf:29:33:73:4f:60:b6:b5:96:57:bf:36: 0e:17:7a:f6:1b:e4:e0:38:cf:18:5e:9c:57:95:94:62:f2:9b: bc:ef:dd:de:43:e4:ab:4f:3f:2b:8d:97:c3:77:e3:60:ef:67: 41:a2:13:d7:a1:2f:c1:df:90:ee:74:b3:c3:e5:23:4b:43:9f: 7e:26:9b:7c:15:52:36:16:82:4e:20:c5:cd:3e:f0:77:b5:6e: 8c:54:88:df:bc:7b:6d:c2:da:2f:98:cb:56:97:b9:21:b0:09: d7:92:0e:e7:3c:9a:fa:80:41:66:0b:5c:12:ff:6c:7b:dd:2a: 42:78:0b:b9:4e:a6:fa:2b:73:6a:8c:df:8c:cd:e5:f3:16:00: f9:57:f8:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2i/vokU0dkL/G2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MjcyNGVlZTItOGQ0NS00MGY3LThkNDctOTU5MWU5MzI3ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJsNavbieQl0pih4rky/tDY7oomruWQKwjno FufCzDvZw2Sa2M0NmK7BVbLZM6O8l3Fb6Tj2JmMyvI/yCZWidC4nTYsP+a/Fl06Z xdn71pE4WFWzPN1lpQ4KDngJECoUk4tpB+1eS/Xgmk3NfCKvaXnw9hyfZsAM/JSI P3yiHvG4CN/tDWSEsG0IMdUVX6oncgILNPLCGmd5C8CUtDFZABLhtANtlJI5y9x7 +4L/S33gFLL8stBdSxabLQ9zcmSdLEypyj22BU5CfL0CdZbb0+0SkJA0nkCpj3D8 FzKVkOb6qU1dtILpLE0B3Jy5xYTeiSu9NAmRQiamCeiEQQGv2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOPzisfvro0LJaCZX50BUrxeyPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzg5NDU5OWQtOWJmZi0z YzgwLWI0YmEtZWFmOTVhMTExYWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMi1CFIugqGMC97ObNM+c24rdyeyTRCUZ4DnOPGc2YwT/kG6sHuN1tw HOIeB/krMT3lKK1x1chRmOO/iMvvjdwQ2bsb3ODEhtnjeuJu3+pU6gHDY1sW7kku lTh7AWBPJPhYkR7criJiPBqyY8Wmt7BL0r8pM3NPYLa1lle/Ng4XevYb5OA4zxhe nFeVlGLym7zv3d5D5KtPPyuNl8N342DvZ0GiE9ehL8HfkO50s8PlI0tDn34mm3wV UjYWgk4gxc0+8He1boxUiN+8e23C2i+Yy1aXuSGwCdeSDuc8mvqAQWYLXBL/bHvd KkJ4C7lOpvorc2qM34zN5fMWAPlX+JQ= -----END CERTIFICATE-----Generated at Tue Jul 21 20:35:16 2026 by rpki-client