$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f54d138-cd53-31ee-81b7-7feebdac4437.roa File: 4f54d138-cd53-31ee-81b7-7feebdac4437.roa (raw, json) Hash identifier: As3atVYTCLJfGE1dLB7LZVhpuq6LjKXFTb7BmI1ZLx4= Subject key identifier: B1:18:68:DA:34:D3:AE:4E:4C:37:BC:38:63:F0:24:FB:16:1E:C9:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E6C6F6BF15F6D3229F0C31A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f54d138-cd53-31ee-81b7-7feebdac4437.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 63949 IP address blocks: 172.235.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:6b:f1:5f:6d:32:29:f0:c3:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=64c68225-3b95-42b7-9529-8449facf9f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:98:08:f2:a2:7b:0f:7c:30:48:d6:b6:24:35: ac:8e:b9:ad:0e:dd:e4:92:b1:b6:c5:93:c6:22:aa: de:a6:17:ee:dc:0a:fb:6f:eb:02:d6:e0:05:bf:76: 3f:33:57:31:1b:06:b4:12:e7:54:f4:0e:62:d8:12: 89:44:03:cb:76:10:00:0e:24:77:31:46:1d:04:05: 10:f7:a4:f8:d8:ad:d0:ce:fd:52:02:c0:9d:e7:0a: 63:17:19:8d:68:89:c7:97:87:78:4a:02:89:f6:63: 7d:5f:33:30:a8:a7:88:d1:76:2f:fc:62:cb:9b:70: b5:fd:98:bc:ff:5c:9b:5c:dc:22:be:d9:f6:26:0d: b2:5b:21:b6:fb:e4:7f:7a:88:86:90:de:62:c1:d2: 8f:1b:48:a7:e0:74:90:c7:bc:ec:e0:df:f4:50:ea: 9e:89:43:96:d8:7b:3b:78:7d:d0:e8:bc:d4:56:fa: 66:a9:b7:41:42:f8:7d:f2:35:52:7f:71:bd:47:e8: 3b:f0:d4:6c:ea:70:a1:d5:bf:97:be:6b:7d:e4:ef: 25:ae:a9:47:c0:77:c9:8b:8b:53:bf:61:64:7e:b1: a4:0b:c9:b2:8c:24:95:03:ba:73:4e:9d:6a:20:b1: 66:c0:cf:dc:b3:ac:e5:5f:05:fe:6d:e8:13:78:52: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:18:68:DA:34:D3:AE:4E:4C:37:BC:38:63:F0:24:FB:16:1E:C9:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f54d138-cd53-31ee-81b7-7feebdac4437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a6:0b:f8:05:bb:79:0a:75:d8:b1:3d:97:00:a9:58:b6:01: c1:33:11:b4:68:e4:e0:f7:22:2f:f1:03:bc:61:cb:2b:79:41: 9c:c8:3d:84:29:f6:d7:67:1d:d2:c9:30:e5:db:3b:8f:c9:8e: 2e:2d:2d:0d:f0:21:40:22:39:ab:11:01:b8:f1:e4:33:dd:eb: 34:36:f9:f6:f4:ac:eb:a6:4b:c7:e6:72:4d:8c:1c:bc:38:56: a1:91:f8:0f:b5:f6:cb:1a:22:83:fe:96:9e:8e:40:63:4d:6b: a7:85:46:8f:13:54:16:ea:ca:f2:51:92:45:84:36:7e:fd:57: b6:ff:79:1f:aa:d2:78:a0:d0:34:aa:a0:ff:10:b2:34:2a:6d: 00:81:89:c1:f9:4e:0d:1d:95:5b:b4:db:bc:c4:48:d3:d2:54: 5c:bc:e0:79:51:f9:cc:36:ad:8b:80:b6:0e:e0:9f:55:d5:33: f0:99:d5:90:ad:97:aa:d3:50:48:57:61:ff:22:ed:34:ae:66: f1:d1:da:11:dc:ad:68:6a:83:8f:ef:5f:ce:06:84:c8:d2:79: 62:4d:52:e3:37:23:23:af:fd:18:ad:ed:3f:61:48:8b:ae:21: a8:f3:b4:d9:d7:a5:15:60:8b:a2:41:c7:57:2f:37:21:0a:da: 15:cb:e1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2vxX20yKfDDGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk NjRjNjgyMjUtM2I5NS00MmI3LTk1MjktODQ0OWZhY2Y5ZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5gI8qJ7D3wwSNa2JDWsjrmtDt3kkrG2xZPG Iqrephfu3Ar7b+sC1uAFv3Y/M1cxGwa0EudU9A5i2BKJRAPLdhAADiR3MUYdBAUQ 96T42K3Qzv1SAsCd5wpjFxmNaInHl4d4SgKJ9mN9XzMwqKeI0XYv/GLLm3C1/Zi8 /1ybXNwivtn2Jg2yWyG2++R/eoiGkN5iwdKPG0in4HSQx7zs4N/0UOqeiUOW2Hs7 eH3Q6LzUVvpmqbdBQvh98jVSf3G9R+g78NRs6nCh1b+Xvmt95O8lrqlHwHfJi4tT v2FkfrGkC8myjCSVA7pzTp1qILFmwM/cs6zlXwX+begTeFIACwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEYaNo0065OTDe8OGPwJPsWHslBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY1NGQxMzgtY2Q1My0z MWVlLTgxYjctN2ZlZWJkYWM0NDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIemC/gFu3kKddixPZcAqVi2AcEzEbRo5OD3Ii/xA7xhyyt5QZzIPYQp 9tdnHdLJMOXbO4/Jji4tLQ3wIUAiOasRAbjx5DPd6zQ2+fb0rOumS8fmck2MHLw4 VqGR+A+19ssaIoP+lp6OQGNNa6eFRo8TVBbqyvJRkkWENn79V7b/eR+q0nig0DSq oP8QsjQqbQCBicH5Tg0dlVu027zESNPSVFy84HlR+cw2rYuAtg7gn1XVM/CZ1ZCt l6rTUEhXYf8i7TSuZvHR2hHcrWhqg4/vX84GhMjSeWJNUuM3IyOv/Rit7T9hSIuu IajztNnXpRVgi6JBx1cvNyEK2hXL4aA= -----END CERTIFICATE-----Generated at Tue Jul 21 21:28:53 2026 by rpki-client