$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d5155de-c848-3c5f-be12-4e9e23dae679.roa File: 3d5155de-c848-3c5f-be12-4e9e23dae679.roa (raw, json) Hash identifier: obLjxgpz+KU+GGDpNhcEkEbii3kjN5L0Cx34H6VkkDA= Subject key identifier: AD:33:FF:55:FE:80:E9:B7:9C:C0:26:AE:FF:03:3D:E1:EB:8C:9D:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7634EBF3B12CE5E48F8CD500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d5155de-c848-3c5f-be12-4e9e23dae679.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 16625 IP address blocks: 23.211.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:eb:f3:b1:2c:e5:e4:8f:8c:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=bfe513ce-ae9d-4e98-aa71-dbc496a24b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:7d:bc:36:8a:89:b0:d7:41:5d:d7:a4:e7: 1e:20:b3:4c:df:bf:fb:d5:53:7a:4e:09:ed:28:a5: df:36:19:79:0e:c4:04:2f:75:3c:d4:84:bd:ed:e6: 8a:b1:58:dc:e4:1c:00:ea:ba:c3:6b:41:65:c9:f7: eb:02:db:05:52:47:2c:f2:f9:09:dd:19:e3:c9:ca: c2:06:2e:81:22:5d:78:70:6b:8a:18:e0:07:93:e1: 35:d2:4f:eb:5f:8d:38:4c:4b:7a:1a:e2:05:14:9c: ca:a0:f3:7f:d0:6d:fa:1d:ff:d3:0f:47:93:bd:b1: 14:40:c1:cc:ea:35:df:c2:64:9a:94:88:8b:80:55: 6c:22:8b:86:df:88:47:6e:66:f2:8b:a1:5e:91:81: 9d:3b:30:1c:98:43:2b:c9:24:0e:e6:8d:28:ed:a6: d4:46:7d:35:22:20:3a:7a:33:cf:64:6b:71:b9:7f: 33:6a:74:04:53:48:a0:ae:f4:a4:ba:b6:fb:7d:a6: a3:9c:67:1c:75:5a:16:f9:d9:42:37:71:90:cf:65: 73:e7:44:6d:f1:6f:8a:e6:fd:69:fb:38:c6:25:cb: 62:af:2d:ab:7b:05:42:d2:c1:31:0f:ee:3a:e7:3a: 34:d0:96:49:35:b0:8d:c0:8e:37:fe:36:a0:f9:47: 7f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:33:FF:55:FE:80:E9:B7:9C:C0:26:AE:FF:03:3D:E1:EB:8C:9D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d5155de-c848-3c5f-be12-4e9e23dae679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:71:61:c5:29:b8:61:dc:d1:f5:dc:b4:52:4a:f5:77:12:cf: 8c:95:c4:75:f5:1d:90:89:5a:69:9b:4f:9d:a9:4e:b7:9f:35: 61:52:79:66:eb:c3:0c:a3:86:a1:30:25:7e:95:14:90:0e:5d: 9d:1e:39:56:45:02:26:ef:be:5a:69:32:14:2d:01:89:df:e4: 21:f6:70:47:73:91:5f:0e:37:9f:79:6b:ea:b7:02:c1:23:a4: 8a:4e:1f:d8:d4:c8:9a:38:28:5d:f6:c0:da:7a:34:30:4b:dc: d9:4d:39:52:e1:4a:59:99:04:70:49:cb:a1:53:66:a5:cf:7b: 3c:dc:fa:3a:59:b1:6e:2e:31:2e:ee:87:3a:e1:18:5b:f8:d7: 7f:45:0f:c4:89:4b:41:7f:b7:71:89:e0:a9:95:ae:9d:3f:00: 9b:bc:47:5e:59:a9:0d:da:61:7a:05:65:6c:3c:37:64:29:33: e6:ec:df:1f:5f:ec:8a:d8:ce:a3:35:47:9a:a0:d8:d6:50:49: 31:4e:e0:a8:8a:cd:de:79:4d:7a:cd:cf:65:48:1b:62:85:1f: 26:f8:93:e0:e5:d7:08:a5:63:b4:27:b4:49:f0:a7:5d:d8:59: fb:51:9e:1a:4a:a6:5d:3f:9c:56:5e:7d:cc:74:1b:30:d7:8d: c7:77:ce:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NOvzsSzl5I+M1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YmZlNTEzY2UtYWU5ZC00ZTk4LWFhNzEtZGJjNDk2YTI0YjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8h9vDaKibDXQV3XpOceILNM37/71VN6Tgnt KKXfNhl5DsQEL3U81IS97eaKsVjc5BwA6rrDa0FlyffrAtsFUkcs8vkJ3RnjycrC Bi6BIl14cGuKGOAHk+E10k/rX404TEt6GuIFFJzKoPN/0G36Hf/TD0eTvbEUQMHM 6jXfwmSalIiLgFVsIouG34hHbmbyi6FekYGdOzAcmEMrySQO5o0o7abURn01IiA6 ejPPZGtxuX8zanQEU0igrvSkurb7faajnGccdVoW+dlCN3GQz2Vz50Rt8W+K5v1p +zjGJctiry2rewVC0sExD+465zo00JZJNbCNwI43/jag+Ud/RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0z/1X+gOm3nMAmrv8DPeHrjJ3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Q1MTU1ZGUtYzg0OC0z YzVmLWJlMTItNGU5ZTIzZGFlNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9PAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdxYcUpuGHc0fXctFJK9XcSz4yVxHX1HZCJWmmbT52pTrefNWFSeWbr wwyjhqEwJX6VFJAOXZ0eOVZFAibvvlppMhQtAYnf5CH2cEdzkV8ON595a+q3AsEj pIpOH9jUyJo4KF32wNp6NDBL3NlNOVLhSlmZBHBJy6FTZqXPezzc+jpZsW4uMS7u hzrhGFv4139FD8SJS0F/t3GJ4KmVrp0/AJu8R15ZqQ3aYXoFZWw8N2QpM+bs3x9f 7IrYzqM1R5qg2NZQSTFO4KiKzd55TXrNz2VIG2KFHyb4k+Dl1wilY7QntEnwp13Y WftRnhpKpl0/nFZefcx0GzDXjcd3zqA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:43 2026 by rpki-client