$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5929485b-afad-302c-a942-a09777de9aeb.roa File: 5929485b-afad-302c-a942-a09777de9aeb.roa (raw, json) Hash identifier: 6cUjC8otn4WiOeSDLDCI8A/T6kb+eO6o/BzNBgMOvZc= Subject key identifier: BF:59:1B:B4:17:33:89:C0:F6:DB:8F:19:4A:08:85:D9:FD:F3:3F:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E8F54FF4D489FEFC96B3C7700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5929485b-afad-302c-a942-a09777de9aeb.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.35.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:ff:4d:48:9f:ef:c9:6b:3c:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=d68fe432-a87c-4405-b5c2-2266eb261296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:58:4f:05:c7:18:ea:2c:89:a0:85:15:78: b7:2b:55:48:87:76:0b:84:d6:17:15:6d:34:6e:84: 4a:99:24:32:41:04:07:25:8e:ae:0e:8b:09:a9:04: 33:64:9d:28:a5:ea:02:4a:e1:3e:dc:66:28:18:ab: 06:f3:05:4b:2a:55:23:03:74:3a:2a:92:6d:e2:3d: 6b:62:6e:e6:00:6d:00:43:6b:b1:e4:35:9a:1e:81: 60:1a:23:09:5d:aa:21:79:e4:fe:8f:52:db:a5:52: 50:0a:94:43:6e:40:37:31:2f:a1:64:07:8a:83:85: 3b:62:af:f9:94:1b:03:21:3a:06:41:dc:53:29:6d: 38:58:35:4e:7b:bf:8a:4b:00:35:16:1f:41:c8:db: 70:46:b7:e5:6c:d1:cb:38:8e:29:af:d5:8c:90:fc: 62:a6:18:4b:6e:f0:1e:58:99:da:b9:69:5c:3e:9a: 0e:1f:1a:97:a7:e9:19:a5:91:2f:07:84:29:8c:95: 63:3c:75:c2:c3:64:9d:55:04:8e:44:98:25:61:bb: 3e:c9:61:03:f2:e7:14:6b:9d:e6:c4:99:c1:19:b8: b9:70:8f:ef:58:2d:2f:fc:02:5e:5e:0c:d1:54:2a: 58:98:06:27:8f:c3:a6:a3:5e:de:67:cc:c9:05:d2: 52:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:1B:B4:17:33:89:C0:F6:DB:8F:19:4A:08:85:D9:FD:F3:3F:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5929485b-afad-302c-a942-a09777de9aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:83:27:8c:db:11:0f:2a:7f:af:2e:d8:71:8d:cf:24:93:38: 1b:7f:11:2a:00:ea:7a:8e:3d:13:cd:4f:8a:0e:09:a5:59:25: 50:28:a3:f8:44:f7:9d:8c:fe:cc:0e:3b:47:e9:56:14:c0:36: cd:10:1c:14:6f:e5:d5:c6:df:4a:14:62:cf:9f:f8:9a:a8:3b: 63:86:b6:7d:46:5e:92:2b:c1:d7:c8:a2:a6:f7:6e:0d:94:bd: 59:90:83:71:c5:8e:e4:be:45:a4:1c:29:7e:b6:02:e9:89:dc: da:17:36:70:d7:99:4c:de:27:75:07:dc:06:45:d7:78:a8:d5: 0a:7b:60:68:23:8d:8f:92:b3:9f:5d:72:84:b9:c2:de:31:6e: bf:03:5d:e5:bb:36:6e:83:0c:8c:22:a1:41:a6:d0:fc:50:7f: 84:8b:79:df:17:1e:a0:43:0b:7e:fd:d5:bd:2b:33:57:55:39: 81:a8:26:9e:e7:35:b2:f8:ce:93:a9:74:8c:5b:df:1c:42:3a: 1d:6d:6e:05:6e:9c:29:3d:06:ea:87:82:d0:c8:6d:8e:35:64: 84:49:a9:3f:e6:df:b4:5c:f0:9b:88:dc:17:09:6b:fc:78:33: 04:4a:ae:fa:be:74:46:01:96:8c:a0:45:af:57:13:23:3f:f8: ea:2e:33:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVP9NSJ/vyWs8dwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZDY4ZmU0MzItYTg3Yy00NDA1LWI1YzItMjI2NmViMjYxMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoBYTwXHGOosiaCFFXi3K1VIh3YLhNYXFW00 boRKmSQyQQQHJY6uDosJqQQzZJ0opeoCSuE+3GYoGKsG8wVLKlUjA3Q6KpJt4j1r Ym7mAG0AQ2ux5DWaHoFgGiMJXaoheeT+j1LbpVJQCpRDbkA3MS+hZAeKg4U7Yq/5 lBsDIToGQdxTKW04WDVOe7+KSwA1Fh9ByNtwRrflbNHLOI4pr9WMkPxiphhLbvAe WJnauWlcPpoOHxqXp+kZpZEvB4QpjJVjPHXCw2SdVQSORJglYbs+yWED8ucUa53m xJnBGbi5cI/vWC0v/AJeXgzRVCpYmAYnj8Omo17eZ8zJBdJSUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9ZG7QXM4nA9tuPGUoIhdn98z//MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTkyOTQ4NWItYWZhZC0z MDJjLWE5NDItYTA5Nzc3ZGU5YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyP0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGDJ4zbEQ8qf68u2HGNzySTOBt/ESoA6nqOPRPNT4oOCaVZJVAoo/hE 952M/swOO0fpVhTANs0QHBRv5dXG30oUYs+f+JqoO2OGtn1GXpIrwdfIoqb3bg2U vVmQg3HFjuS+RaQcKX62AumJ3NoXNnDXmUzeJ3UH3AZF13io1Qp7YGgjjY+Ss59d coS5wt4xbr8DXeW7Nm6DDIwioUGm0PxQf4SLed8XHqBDC3791b0rM1dVOYGoJp7n NbL4zpOpdIxb3xxCOh1tbgVunCk9BuqHgtDIbY41ZIRJqT/m37Rc8JuI3BcJa/x4 MwRKrvq+dEYBloygRa9XEyM/+OouM5M= -----END CERTIFICATE-----Generated at Tue Jul 21 21:40:45 2026 by rpki-client