$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/508a8dbf-d713-3c5d-b7e5-bff7c2b315f0.roa File: 508a8dbf-d713-3c5d-b7e5-bff7c2b315f0.roa (raw, json) Hash identifier: E0pMY5pYygqFMK7wTd2jzv6i03QZjbxfs4iYvfOrIDk= Subject key identifier: 69:92:20:AD:F9:25:8A:C6:FC:60:E7:61:3C:F5:43:EB:18:F8:1C:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E921FA855AD2CF4A9604909C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/508a8dbf-d713-3c5d-b7e5-bff7c2b315f0.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 25019 IP address blocks: 23.215.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:a8:55:ad:2c:f4:a9:60:49:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=def2b5f1-4420-4724-83d8-f229bd07fdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:b8:08:4c:0e:95:8e:5b:40:fd:c1:2c:bd: 4d:1a:31:7f:09:3d:0f:96:b4:56:c2:76:01:6c:43: 47:5c:af:cd:a4:4d:59:a0:d2:61:46:22:60:f5:2d: 79:bd:b8:4a:9b:dd:b7:34:7f:df:90:fd:d1:b2:cb: fa:c8:a3:07:9d:ba:bd:c1:87:ea:5d:be:bb:53:2e: 31:e8:9b:d1:81:a5:aa:5c:40:e1:ca:51:e0:8b:6a: f4:ef:ca:e0:9c:e9:ca:38:98:85:a8:4d:d0:50:40: 90:12:81:fd:93:60:fe:48:0b:74:4c:95:7f:92:3e: c0:53:cf:27:51:c1:5a:51:29:8a:cd:c4:5f:d8:25: 27:a7:92:1e:cc:a2:24:94:44:af:eb:17:da:ec:65: 24:54:8e:4c:0e:86:a8:f0:0e:8d:42:42:36:f7:c4: ad:d8:25:f9:df:a5:a8:15:06:a8:97:98:f9:cb:29: ba:12:e0:87:d7:f4:53:50:32:60:1d:2d:4c:11:7f: 86:08:61:c4:40:40:20:a8:0a:2f:48:7b:9d:87:37: ef:65:bc:6e:2d:3f:50:35:50:db:35:74:bc:b7:8d: d6:34:1c:89:ee:97:6b:b1:77:20:2d:26:5f:3d:29: 14:11:04:eb:98:24:d6:ad:a1:df:06:1e:78:74:e7: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:92:20:AD:F9:25:8A:C6:FC:60:E7:61:3C:F5:43:EB:18:F8:1C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/508a8dbf-d713-3c5d-b7e5-bff7c2b315f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c3:72:da:6a:49:e6:4c:dd:fc:6f:25:1a:45:0c:14:9e:fa: 8d:6c:b0:c7:a9:31:e1:b7:67:d0:a3:12:ac:89:21:3d:d2:4b: 75:7d:a5:a6:14:ae:5b:d8:78:21:6a:40:6c:30:ea:81:a2:fe: 83:d0:9f:72:77:0a:38:87:4e:b2:9e:57:cb:c7:1d:9e:d6:83: 3f:64:b5:c2:eb:41:af:68:09:ca:2c:3f:5e:8a:c2:81:ea:ab: f7:2f:a4:e7:34:d2:8a:d6:31:fd:6b:d3:8d:2b:59:c0:f8:b7: 6d:25:3f:6a:15:f3:e5:62:f7:a5:6b:4c:14:c1:c4:34:15:09: 4a:08:53:45:be:bd:96:c3:e1:6c:2d:12:8d:46:b4:8b:44:38: 6c:67:05:02:fc:05:e9:46:56:a5:10:22:5f:70:6c:5c:c4:e4: df:87:e8:41:c9:bb:bf:45:55:f3:96:6d:c6:1a:ec:03:a3:31: cb:30:5b:3a:ac:86:eb:32:76:7f:11:f0:61:0b:39:20:4b:9d: 71:fa:b0:d4:7a:51:01:3f:e5:ed:f7:28:03:1d:65:60:a4:66: 06:82:3e:33:23:15:d0:56:7a:90:c6:f8:a8:16:e9:25:cb:d1: b8:31:fa:eb:7d:ce:c2:58:16:4e:f0:21:fa:a5:aa:5f:a4:7d: ef:64:0b:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6hVrSz0qWBJCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk ZGVmMmI1ZjEtNDQyMC00NzI0LTgzZDgtZjIyOWJkMDdmZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCC4CEwOlY5bQP3BLL1NGjF/CT0PlrRWwnYB bENHXK/NpE1ZoNJhRiJg9S15vbhKm923NH/fkP3Rssv6yKMHnbq9wYfqXb67Uy4x 6JvRgaWqXEDhylHgi2r078rgnOnKOJiFqE3QUECQEoH9k2D+SAt0TJV/kj7AU88n UcFaUSmKzcRf2CUnp5IezKIklESv6xfa7GUkVI5MDoao8A6NQkI298St2CX536Wo FQaol5j5yym6EuCH1/RTUDJgHS1MEX+GCGHEQEAgqAovSHudhzfvZbxuLT9QNVDb NXS8t43WNByJ7pdrsXcgLSZfPSkUEQTrmCTWraHfBh54dOdkAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmSIK35JYrG/GDnYTz1Q+sY+BzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTA4YThkYmYtZDcxMy0z YzVkLWI3ZTUtYmZmN2MyYjMxNWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7DctpqSeZM3fxvJRpFDBSe+o1ssMepMeG3Z9CjEqyJIT3SS3V9paYU rlvYeCFqQGww6oGi/oPQn3J3CjiHTrKeV8vHHZ7Wgz9ktcLrQa9oCcosP16KwoHq q/cvpOc00orWMf1r040rWcD4t20lP2oV8+Vi96VrTBTBxDQVCUoIU0W+vZbD4Wwt Eo1GtItEOGxnBQL8BelGVqUQIl9wbFzE5N+H6EHJu79FVfOWbcYa7AOjMcswWzqs husydn8R8GELOSBLnXH6sNR6UQE/5e33KAMdZWCkZgaCPjMjFdBWepDG+KgW6SXL 0bgx+ut9zsJYFk7wIfqlql+kfe9kCwQ= -----END CERTIFICATE-----Generated at Tue Jul 21 21:32:15 2026 by rpki-client