$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fe3c537-8cdb-3c12-a52c-16a02e5e0147.roa File: 5fe3c537-8cdb-3c12-a52c-16a02e5e0147.roa (raw, json) Hash identifier: gHNN/iYH4C5JKnL2pkvYjPCRgwW/DT9uPtgbYW5qlQI= Subject key identifier: 65:C2:17:26:39:A4:15:B4:50:4B:72:F9:1E:A1:30:C7:17:22:AD:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E8DEFAEF437683F5B4EC90440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fe3c537-8cdb-3c12-a52c-16a02e5e0147.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.32.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:ae:f4:37:68:3f:5b:4e:c9:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=ab475ecd-6def-469b-aef3-2f46b2b73937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:10:4a:bf:67:24:ca:92:98:d9:34:b7:20: 7c:76:b8:7f:e6:94:17:25:71:a0:77:c5:70:81:fe: ee:a3:db:be:2c:4f:0a:f0:b6:f5:e8:ee:9f:7f:db: 79:8a:28:18:4d:a0:ea:98:4b:97:9b:3e:b4:d8:79: d7:61:e4:a0:a5:1c:0f:2b:a4:17:2d:a0:c5:d3:13: 0c:1a:fd:1d:e8:14:5d:56:8c:bc:6c:45:ea:0b:36: 2a:42:b3:93:48:e7:56:ed:74:ef:f4:0e:19:bc:23: db:ab:8e:3d:82:b8:3c:72:7a:cb:b2:45:23:30:1b: be:0b:53:92:62:90:53:89:06:75:ec:02:2f:97:f3: 9e:bc:6a:21:f7:5b:fc:a6:93:be:61:05:2b:db:7c: 0b:8d:67:67:df:d5:da:cf:df:73:f5:7e:51:a3:50: 00:d6:7c:77:03:4a:ff:e0:22:50:41:fd:80:f6:51: cb:24:d6:51:bf:e8:bd:72:2c:02:7f:3f:f2:0a:30: f3:f3:ff:18:4d:38:17:88:4b:92:0c:ba:c7:31:27: 6e:85:07:59:69:22:79:84:4a:98:c8:8e:6b:1b:00: 1e:86:0d:fd:77:1a:f6:88:af:82:58:f7:d9:cb:c2: 2a:42:3b:da:95:8b:0c:38:55:cc:3e:e4:90:cd:ff: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:17:26:39:A4:15:B4:50:4B:72:F9:1E:A1:30:C7:17:22:AD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fe3c537-8cdb-3c12-a52c-16a02e5e0147.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:05:49:57:9a:55:6b:68:f0:d8:05:89:c6:fe:85:52:92:51: b6:26:06:ac:e0:36:e3:ed:26:37:a2:2b:14:de:c9:2d:05:44: 28:02:57:8c:36:0f:9a:69:7a:70:3f:f7:9e:48:91:c8:44:a3: f4:e5:f4:2d:56:cf:ca:b2:12:72:2e:6f:f7:c4:74:28:fd:9b: d9:6a:73:e4:d5:e5:39:68:ad:54:9e:7e:3f:1d:60:31:7c:0c: 07:fd:6f:62:4a:d4:b0:d4:5a:4d:43:53:60:b6:7e:de:cd:a8: 49:fc:c8:ec:e0:7c:c1:d7:4f:c7:a9:44:d0:35:1e:1b:fa:b3: 49:ba:ea:55:04:b8:1f:8e:a4:a6:b5:1c:0f:b4:96:a9:ec:0f: 56:71:df:fe:23:33:fe:4c:17:aa:78:f4:88:96:55:50:3c:28: ed:a9:47:74:32:c3:ae:c5:05:fa:eb:07:21:5f:14:63:0e:0a: 54:b9:1b:ff:d6:28:48:a9:1b:bd:59:33:a2:6e:96:10:f5:da: fb:26:01:48:bf:0f:66:a2:5b:99:16:39:25:41:2b:a5:cf:d9: 93:d9:cf:e2:b8:a4:62:bb:14:58:df:85:1c:09:d7:b9:1b:0d: 4e:5c:bc:08:c6:c9:c8:a9:8d:19:5c:4d:51:4d:f6:ef:25:23: f1:5a:29:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N7670N2g/W07JBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk YWI0NzVlY2QtNmRlZi00NjliLWFlZjMtMmY0NmIyYjczOTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriQQSr9nJMqSmNk0tyB8drh/5pQXJXGgd8Vw gf7uo9u+LE8K8Lb16O6ff9t5iigYTaDqmEuXmz602HnXYeSgpRwPK6QXLaDF0xMM Gv0d6BRdVoy8bEXqCzYqQrOTSOdW7XTv9A4ZvCPbq449grg8cnrLskUjMBu+C1OS YpBTiQZ17AIvl/OevGoh91v8ppO+YQUr23wLjWdn39Xaz99z9X5Ro1AA1nx3A0r/ 4CJQQf2A9lHLJNZRv+i9ciwCfz/yCjDz8/8YTTgXiEuSDLrHMSduhQdZaSJ5hEqY yI5rGwAehg39dxr2iK+CWPfZy8IqQjvalYsMOFXMPuSQzf/yJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXCFyY5pBW0UEty+R6hMMcXIq1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZlM2M1MzctOGNkYi0z YzEyLWE1MmMtMTZhMDJlNWUwMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAFSVeaVWto8NgFicb+hVKSUbYmBqzgNuPtJjeiKxTeyS0FRCgCV4w2 D5ppenA/955IkchEo/Tl9C1Wz8qyEnIub/fEdCj9m9lqc+TV5TlorVSefj8dYDF8 DAf9b2JK1LDUWk1DU2C2ft7NqEn8yOzgfMHXT8epRNA1Hhv6s0m66lUEuB+OpKa1 HA+0lqnsD1Zx3/4jM/5MF6p49IiWVVA8KO2pR3Qyw67FBfrrByFfFGMOClS5G//W KEipG71ZM6JulhD12vsmAUi/D2aiW5kWOSVBK6XP2ZPZz+K4pGK7FFjfhRwJ17kb DU5cvAjGycipjRlcTVFN9u8lI/FaKUE= -----END CERTIFICATE-----Generated at Tue Jul 21 19:58:57 2026 by rpki-client