$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa File: 5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa (raw, json) Hash identifier: Bk8L8bLt85flaWPpH/fbOqR2UdzDJK1baR2Dkl0ISaE= Subject key identifier: FE:6D:AC:C1:D6:1B:0D:53:0B:A4:62:95:75:B1:F1:60:19:89:E0:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E8F54FAE98647D35676327B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.35.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:fa:e9:86:47:d3:56:76:32:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=aa4f8f82-42d4-4176-8dcc-dfa0f2c39d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bb:95:c5:33:3a:a3:ca:ad:dd:d0:f6:15:df: 54:ca:f9:88:1c:1c:3a:46:bf:38:0c:5e:04:e2:c8: 90:21:b7:e9:30:7a:90:6a:7a:3a:74:65:91:fb:e6: 1f:da:fb:d1:b7:95:50:45:51:50:24:99:83:00:84: 41:95:5c:b3:4c:dc:31:9c:8d:c9:61:1c:08:d9:0f: 32:e6:d2:ca:b0:87:18:d9:5f:74:f8:76:18:41:67: 53:7d:8c:d4:d2:d8:39:a1:cb:13:2c:a5:f3:ee:a4: ae:a0:1b:f9:a0:59:2a:96:ce:a8:9e:2a:d6:7d:67: aa:49:1b:37:4b:43:45:ba:1b:a2:98:c7:09:bc:a2: ec:73:ff:14:05:7c:6d:aa:b1:97:d4:33:66:8e:4e: 2e:2d:a9:bb:6f:c5:e5:43:63:5a:39:c7:83:2d:f3: 4f:da:c0:e1:cd:3b:21:ac:8a:ac:c0:0d:81:6e:95: 97:28:f9:c7:36:7e:54:a6:ef:a3:f1:7b:7a:24:41: e3:50:cf:fb:96:1b:06:78:64:31:dd:d4:b9:3e:2a: ad:c4:21:0f:f9:50:91:1a:bd:69:5b:4f:c6:c0:b7: f6:3b:5f:13:eb:e0:80:cd:e8:0d:c9:97:e4:89:db: f9:01:56:c4:21:cc:a4:b2:39:db:6b:32:f8:33:6e: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6D:AC:C1:D6:1B:0D:53:0B:A4:62:95:75:B1:F1:60:19:89:E0:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:15:7a:df:d8:62:dc:0f:82:0f:44:f0:e4:0a:e9:d5:bb:ef: 2f:f5:02:0f:cb:67:02:70:cb:74:78:1a:48:2f:bc:dc:cd:38: cf:90:af:57:f6:bf:50:34:c5:a5:bb:71:b8:9f:49:be:9f:36: 2f:10:4b:ab:81:ae:8d:cd:22:af:f3:8e:1f:6b:96:ab:1a:bd: d5:81:47:11:8e:f8:46:e9:25:28:72:be:d4:51:01:9f:e7:03: 77:5f:f9:21:c7:e5:dd:f5:40:ad:6d:fb:95:ea:84:07:f7:65: 97:02:a7:07:d6:c1:19:38:90:d4:68:f7:ed:b9:12:60:8b:63: a1:80:57:39:06:57:bd:ca:56:cd:9b:df:82:42:43:ac:d4:db: 53:dc:2b:1c:3e:02:67:0f:1c:c6:30:d0:6f:84:d7:2d:85:12: f4:69:76:53:3b:fd:0c:1a:a9:e8:ce:1c:23:e0:6c:2c:3b:e2: e8:b6:18:7a:5b:55:d8:23:d0:c4:dc:24:81:8e:44:79:4e:ad: 65:ac:e8:a6:9e:c8:31:94:60:35:b5:eb:27:fa:72:13:5b:5e: 26:32:d7:2f:45:ba:0f:ec:81:3d:32:4a:ce:eb:bf:38:86:88: a1:df:00:ff:25:b1:e4:31:db:10:da:03:4f:fc:35:d0:bc:a8: a4:cb:3d:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPrphkfTVnYye4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk YWE0ZjhmODItNDJkNC00MTc2LThkY2MtZGZhMGYyYzM5ZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbuVxTM6o8qt3dD2Fd9UyvmIHBw6Rr84DF4E 4siQIbfpMHqQano6dGWR++Yf2vvRt5VQRVFQJJmDAIRBlVyzTNwxnI3JYRwI2Q8y 5tLKsIcY2V90+HYYQWdTfYzU0tg5ocsTLKXz7qSuoBv5oFkqls6onirWfWeqSRs3 S0NFuhuimMcJvKLsc/8UBXxtqrGX1DNmjk4uLam7b8XlQ2NaOceDLfNP2sDhzTsh rIqswA2BbpWXKPnHNn5Upu+j8Xt6JEHjUM/7lhsGeGQx3dS5PiqtxCEP+VCRGr1p W0/GwLf2O18T6+CAzegNyZfkidv5AVbEIcyksjnbazL4M26eCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5trMHWGw1TC6RilXWx8WAZieDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ1MTE0ZWEtMjBiMS0z MjIzLTg0ZGUtZDlhNWQzY2ZhMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyNBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYVet/YYtwPgg9E8OQK6dW77y/1Ag/LZwJwy3R4GkgvvNzNOM+Qr1f2 v1A0xaW7cbifSb6fNi8QS6uBro3NIq/zjh9rlqsavdWBRxGO+EbpJShyvtRRAZ/n A3df+SHH5d31QK1t+5XqhAf3ZZcCpwfWwRk4kNRo9+25EmCLY6GAVzkGV73KVs2b 34JCQ6zU21PcKxw+AmcPHMYw0G+E1y2FEvRpdlM7/QwaqejOHCPgbCw74ui2GHpb Vdgj0MTcJIGORHlOrWWs6KaeyDGUYDW16yf6chNbXiYy1y9Fug/sgT0ySs7rvziG iKHfAP8lseQx2xDaA0/8NdC8qKTLPbw= -----END CERTIFICATE-----Generated at Tue Jul 21 20:42:26 2026 by rpki-client