$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bd082a6-b69e-3779-a6c6-cd878d479060.roa File: 3bd082a6-b69e-3779-a6c6-cd878d479060.roa (raw, json) Hash identifier: z2Gry9DliOW0PTD8TkkjgL49d/CWpcxJRWLEQy4kkUc= Subject key identifier: D9:CB:30:74:C7:29:61:2E:81:3C:88:13:A1:ED:98:19:CD:F6:2E:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E66DA30125B2EEBE4F6A28F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bd082a6-b69e-3779-a6c6-cd878d479060.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16625 IP address blocks: 23.3.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:30:12:5b:2e:eb:e4:f6:a2:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=7a1a44dd-f19d-4b45-bc91-479b13908828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3f:54:35:b0:63:a9:4e:c9:c9:ca:63:bb:34: c8:df:fe:74:9c:ec:f0:18:ee:ac:61:0c:ed:85:7e: a6:28:92:08:4d:ec:56:0a:6e:b1:2c:10:0b:68:b5: d9:d9:75:3a:fa:45:e0:a4:8a:ec:79:b8:2a:70:73: ad:20:df:84:05:aa:cc:e0:b1:6d:a3:b3:e6:57:c2: 26:36:14:90:5c:41:2e:24:1c:ff:0e:f0:6a:90:15: 06:40:42:df:e4:61:30:3b:8e:fc:95:ee:47:02:7b: c6:a0:b3:24:b2:af:b4:3a:72:1c:32:38:36:96:84: 60:87:97:94:ac:2e:a1:b9:38:d2:59:1d:d7:4e:95: c1:fc:69:d4:46:99:a2:7e:69:39:8f:aa:47:e7:cd: 2e:d3:6e:26:58:ee:e3:b4:80:59:58:5f:95:6b:50: 28:93:d6:d4:ec:08:3b:d5:b3:47:62:cc:b8:a1:2d: 71:91:0d:b2:91:0e:19:a9:50:68:b7:48:4c:90:56: ed:59:16:06:1e:82:f8:64:ca:52:aa:36:94:8d:97: c0:92:c2:85:1e:0e:85:59:ed:71:1f:f9:71:20:96: 82:d8:f0:55:17:00:41:df:57:c8:54:75:11:5f:7e: c9:c4:12:be:17:3d:98:42:31:c2:bb:ef:6f:1c:8b: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:30:74:C7:29:61:2E:81:3C:88:13:A1:ED:98:19:CD:F6:2E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bd082a6-b69e-3779-a6c6-cd878d479060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:32:4f:e3:88:03:7f:ff:8b:56:8d:1d:e5:6c:5b:39:8e:78: a6:2c:df:fe:9f:07:12:4f:1d:f0:54:44:df:10:c8:07:dc:46: dc:51:70:e2:af:32:03:c1:4e:c1:71:6e:c2:31:9b:c8:a2:a0: 37:ae:22:c4:2b:65:77:4e:4e:42:c3:e7:95:1e:40:10:d0:c1: 67:aa:04:0c:df:cd:08:9e:14:ec:75:59:5f:a3:e3:71:5b:f0: d0:85:80:73:d8:04:fc:e6:25:09:c7:f9:32:39:3d:5e:42:17: de:ed:91:4c:29:7c:85:27:72:d0:6d:27:df:29:f2:83:cf:52: 24:66:1e:c4:17:4b:01:ff:25:1a:56:b8:ed:18:5c:a5:38:6f: d1:50:1d:24:f0:bb:e2:79:bb:22:24:d7:9b:39:c7:13:17:73: 8b:7b:e2:38:d6:8e:88:67:e3:36:5a:ad:ef:f4:5d:eb:7b:6a: ce:14:e1:b5:92:52:6d:f3:6c:0b:3e:e4:dd:01:c3:6c:e2:09: e0:ba:f1:29:c1:ab:92:7f:b1:67:80:15:42:6f:b1:68:1f:99: ae:ef:d2:52:f3:48:f9:75:9d:88:f7:4f:4d:cd:04:dc:66:d1: b0:e7:66:01:02:8e:5e:76:a9:53:df:f1:54:41:68:47:49:cb: 8e:96:ed:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2jASWy7r5PaijwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk N2ExYTQ0ZGQtZjE5ZC00YjQ1LWJjOTEtNDc5YjEzOTA4ODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j9UNbBjqU7JycpjuzTI3/50nOzwGO6sYQzt hX6mKJIITexWCm6xLBALaLXZ2XU6+kXgpIrsebgqcHOtIN+EBarM4LFto7PmV8Im NhSQXEEuJBz/DvBqkBUGQELf5GEwO478le5HAnvGoLMksq+0OnIcMjg2loRgh5eU rC6huTjSWR3XTpXB/GnURpmifmk5j6pH580u024mWO7jtIBZWF+Va1Aok9bU7Ag7 1bNHYsy4oS1xkQ2ykQ4ZqVBot0hMkFbtWRYGHoL4ZMpSqjaUjZfAksKFHg6FWe1x H/lxIJaC2PBVFwBB31fIVHURX37JxBK+Fz2YQjHCu+9vHIsLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnLMHTHKWEugTyIE6HtmBnN9i7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JkMDgyYTYtYjY5ZS0z Nzc5LWE2YzYtY2Q4NzhkNDc5MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUyT+OIA3//i1aNHeVsWzmOeKYs3/6fBxJPHfBURN8QyAfcRtxRcOKv MgPBTsFxbsIxm8iioDeuIsQrZXdOTkLD55UeQBDQwWeqBAzfzQieFOx1WV+j43Fb 8NCFgHPYBPzmJQnH+TI5PV5CF97tkUwpfIUnctBtJ98p8oPPUiRmHsQXSwH/JRpW uO0YXKU4b9FQHSTwu+J5uyIk15s5xxMXc4t74jjWjohn4zZare/0Xet7as4U4bWS Um3zbAs+5N0Bw2ziCeC68SnBq5J/sWeAFUJvsWgfma7v0lLzSPl1nYj3T03NBNxm 0bDnZgECjl52qVPf8VRBaEdJy46W7XU= -----END CERTIFICATE-----Generated at Tue Jul 21 20:42:28 2026 by rpki-client