$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43bf4eae-f71f-35d4-946a-071910f002df.roa File: 43bf4eae-f71f-35d4-946a-071910f002df.roa (raw, json) Hash identifier: sBAvItmrpj/Pm+ezmaHWfpyz7UIIsmh3V1YSaaGmRiQ= Subject key identifier: 85:93:29:94:B9:53:28:4E:5F:61:89:43:7A:2B:05:B8:81:E5:AA:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E3A2F6FF4D6A2DA6987EBB940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43bf4eae-f71f-35d4-946a-071910f002df.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.50.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:6f:f4:d6:a2:da:69:87:eb:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=5264f7ca-2f1e-4237-a63b-8de9786deb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:7c:3f:31:13:c3:e4:c9:d4:04:50:b5:74: 1c:59:dd:1a:e7:4a:d1:a5:1f:2b:9c:fd:2a:2e:8d: 1b:b5:05:15:97:22:cd:93:d9:16:23:80:aa:02:37: 95:56:83:0a:74:c6:02:69:e8:93:95:12:40:dd:27: 0f:21:77:4a:82:44:e9:1a:e2:43:5b:84:16:6d:6b: e3:b1:7c:06:c9:55:41:67:28:47:68:ff:8e:1c:b7: 9f:2a:94:af:47:64:40:78:62:a0:3b:87:21:1a:67: ec:91:88:be:24:89:56:80:54:15:25:3c:a7:3d:b8: eb:31:5a:c0:f6:fd:d0:fd:a0:06:9b:67:16:38:3b: 9e:1c:a2:76:69:b0:91:ee:6b:87:43:f0:7c:41:d8: cb:68:53:8c:fd:c2:82:10:80:d2:c1:70:2d:e6:cb: a4:50:0d:f5:bb:74:00:bb:5f:47:83:46:e4:09:73: 16:82:d4:5b:1f:b4:f4:c9:12:0a:bd:82:44:2f:86: 0c:ac:24:5a:89:6f:cd:f6:66:01:41:4a:cb:4d:bc: cb:8a:4b:36:57:d3:31:7a:89:01:61:b8:6e:98:9a: 33:58:d2:fc:50:7e:6e:d1:06:31:2c:37:f2:ac:0d: 65:b6:1d:5a:97:fe:82:29:65:d1:84:52:88:6c:f9: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:93:29:94:B9:53:28:4E:5F:61:89:43:7A:2B:05:B8:81:E5:AA:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43bf4eae-f71f-35d4-946a-071910f002df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a8:56:f7:92:1a:4b:6f:cf:9a:b0:cc:cc:d0:a1:5c:6f:14: da:61:22:bd:82:e1:27:c7:df:e1:ad:cb:35:be:79:8e:31:54: 92:e3:27:e4:7b:fb:c9:dc:6b:c4:30:6f:f3:2a:47:b4:6a:e2: ed:d7:95:2b:8e:16:59:f0:0d:fb:e5:0b:51:ad:01:14:a6:53: 49:9c:60:1b:50:5e:8f:d9:b6:f1:d3:17:85:4b:52:17:f2:6d: 9f:79:06:cd:06:fa:42:ff:12:55:bf:f3:9b:f0:a2:27:ed:3b: 05:98:2d:eb:a9:39:50:e4:5e:35:b8:43:24:bd:7c:79:5f:b1: 75:df:6a:57:64:15:5c:33:19:44:b3:9f:5f:ff:3b:f5:7b:36: 8c:41:4e:27:11:88:77:05:fd:b7:70:6a:a2:5e:a0:1a:6d:48: eb:58:00:6c:d2:9f:a9:16:a4:6d:c1:59:43:a3:05:25:6c:d1: 14:0a:35:0b:5c:a5:e0:b1:f7:b5:2e:77:64:62:97:c6:f9:45: 30:3d:3a:eb:a9:92:2d:9c:72:c0:4a:5f:6c:0d:a5:ae:be:94: 61:c7:dc:d6:74:97:b2:81:dd:0e:b8:f6:c9:51:25:d3:10:cf: 91:43:b1:c1:c9:42:f7:20:de:28:0a:3a:83:3f:01:01:34:e1: aa:64:96:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46L2/01qLaaYfruUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NTI2NGY3Y2EtMmYxZS00MjM3LWE2M2ItOGRlOTc4NmRlYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWB8PzETw+TJ1ARQtXQcWd0a50rRpR8rnP0q Lo0btQUVlyLNk9kWI4CqAjeVVoMKdMYCaeiTlRJA3ScPIXdKgkTpGuJDW4QWbWvj sXwGyVVBZyhHaP+OHLefKpSvR2RAeGKgO4chGmfskYi+JIlWgFQVJTynPbjrMVrA 9v3Q/aAGm2cWODueHKJ2abCR7muHQ/B8QdjLaFOM/cKCEIDSwXAt5sukUA31u3QA u19Hg0bkCXMWgtRbH7T0yRIKvYJEL4YMrCRaiW/N9mYBQUrLTbzLiks2V9MxeokB YbhumJozWNL8UH5u0QYxLDfyrA1lth1al/6CKWXRhFKIbPklKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWTKZS5UyhOX2GJQ3orBbiB5apiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNiZjRlYWUtZjcxZi0z NWQ0LTk0NmEtMDcxOTEwZjAwMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICoVveSGktvz5qwzMzQoVxvFNphIr2C4SfH3+GtyzW+eY4xVJLjJ+R7 +8nca8Qwb/MqR7Rq4u3XlSuOFlnwDfvlC1GtARSmU0mcYBtQXo/ZtvHTF4VLUhfy bZ95Bs0G+kL/ElW/85vwoiftOwWYLeupOVDkXjW4QyS9fHlfsXXfaldkFVwzGUSz n1//O/V7NoxBTicRiHcF/bdwaqJeoBptSOtYAGzSn6kWpG3BWUOjBSVs0RQKNQtc peCx97Uud2Ril8b5RTA9Ouupki2ccsBKX2wNpa6+lGHH3NZ0l7KB3Q649slRJdMQ z5FDscHJQvcg3igKOoM/AQE04apklt0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:01:03 2026 by rpki-client