$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa File: 606a4411-5047-3e42-9ccf-b65d55d53a12.roa (raw, json) Hash identifier: IbYzkHigRlbZfOtlE7/gfjv+4AkvNj2fzM31Iy3v7iY= Subject key identifier: 9D:28:1C:09:6D:7B:F1:3D:6B:64:44:B4:F7:51:69:F4:6A:35:C6:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E561A0946C4C59A715945E780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 55644 IP address blocks: 23.40.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:1a:09:46:c4:c5:9a:71:59:45:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=ea537f12-9773-4632-ab11-929f910ce88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:14:42:04:c9:85:57:23:11:d8:fd:f6:48: b5:41:ad:2f:a9:ad:92:f7:cf:38:cd:f3:54:44:a0: f3:be:3d:10:a7:58:62:99:37:32:9a:4b:5b:0d:a9: 94:0d:1a:d3:ab:b1:ec:c0:b0:69:24:34:8e:3b:39: e8:02:8b:02:90:e9:03:a4:4c:bf:fe:a6:74:67:80: 50:85:ca:41:49:b0:b2:e4:3a:36:c8:41:60:4c:6c: bb:8f:5d:bd:b4:48:13:32:73:67:b1:96:45:ed:b3: ea:7a:b7:ec:92:bc:b4:7e:f5:57:4c:79:c8:f7:69: f0:a7:df:36:1d:5e:1f:d7:81:a5:dc:92:43:f8:14: 7f:50:ed:66:bd:49:e6:25:56:96:96:3b:a1:41:af: 4a:fa:61:29:9d:55:69:a0:24:38:ca:c2:39:ee:7a: 61:95:f4:40:e9:e6:96:b1:5d:d3:6c:9f:68:34:76: 09:ec:80:7f:d8:9a:86:58:a8:38:6d:67:3e:0e:52: 96:93:c3:d6:6c:67:03:d3:ea:ae:1f:30:6b:aa:6d: 51:e8:17:b1:ae:61:7f:d1:5b:f7:78:ab:18:7a:a0: 8c:56:52:ef:2d:9d:b3:01:82:ee:1e:86:ae:af:c9: 0e:3b:7d:11:0b:d4:6a:9e:14:d9:2d:3d:0e:af:07: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:28:1C:09:6D:7B:F1:3D:6B:64:44:B4:F7:51:69:F4:6A:35:C6:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:0e:be:fb:a2:db:1a:9e:59:5a:78:5d:9d:91:d4:e6:e4:63: 19:e4:c1:5c:73:bc:7d:41:51:ba:9b:d9:4d:93:11:d4:ac:7b: d1:86:8c:95:70:16:0f:78:3e:bb:3f:95:68:2d:93:2c:45:2d: bc:73:2c:a7:54:46:6d:0a:21:90:98:15:4e:73:fc:51:23:dc: c6:e4:a8:7e:03:8a:c5:07:6a:7b:e6:2d:59:72:11:f9:ef:ff: 19:b1:ad:53:76:7c:e2:8a:f6:6d:b4:2f:b6:a1:46:90:74:a8: b6:60:a8:dc:ab:46:57:e3:fd:77:65:d0:a0:ea:26:b0:9c:4b: 44:4d:2f:72:b1:b5:01:41:31:30:ee:d4:cd:7d:67:61:4f:e2: f8:2c:05:06:5d:b5:56:83:91:f9:0a:66:d4:bc:44:83:5a:57: fe:8d:61:ea:21:2c:b5:6d:ab:94:e1:97:11:ad:ef:31:9e:0a: bc:53:34:19:91:18:a3:17:c1:54:e6:c0:81:96:35:91:c6:08: 6d:e9:22:f8:d9:59:ae:c8:d5:d3:e0:c3:c0:ed:5f:60:1a:1e: 3a:09:53:41:5a:52:2a:57:a7:fb:9a:70:a0:26:0e:91:29:c1: ca:0b:4d:78:d6:de:6e:8c:99:16:cf:5d:18:f7:3c:db:3b:33: 00:ad:60:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGglGxMWacVlF54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk ZWE1MzdmMTItOTc3My00NjMyLWFiMTEtOTI5ZjkxMGNlODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqsUQgTJhVcjEdj99ki1Qa0vqa2S9884zfNU RKDzvj0Qp1himTcymktbDamUDRrTq7HswLBpJDSOOznoAosCkOkDpEy//qZ0Z4BQ hcpBSbCy5Do2yEFgTGy7j129tEgTMnNnsZZF7bPqerfskry0fvVXTHnI92nwp982 HV4f14Gl3JJD+BR/UO1mvUnmJVaWljuhQa9K+mEpnVVpoCQ4ysI57nphlfRA6eaW sV3TbJ9oNHYJ7IB/2JqGWKg4bWc+DlKWk8PWbGcD0+quHzBrqm1R6BexrmF/0Vv3 eKsYeqCMVlLvLZ2zAYLuHoaur8kOO30RC9RqnhTZLT0Orwe/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0oHAlte/E9a2REtPdRafRqNcY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjA2YTQ0MTEtNTA0Ny0z ZTQyLTljY2YtYjY1ZDU1ZDUzYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIOvvui2xqeWVp4XZ2R1ObkYxnkwVxzvH1BUbqb2U2TEdSse9GGjJVw Fg94Prs/lWgtkyxFLbxzLKdURm0KIZCYFU5z/FEj3MbkqH4DisUHanvmLVlyEfnv /xmxrVN2fOKK9m20L7ahRpB0qLZgqNyrRlfj/Xdl0KDqJrCcS0RNL3KxtQFBMTDu 1M19Z2FP4vgsBQZdtVaDkfkKZtS8RINaV/6NYeohLLVtq5ThlxGt7zGeCrxTNBmR GKMXwVTmwIGWNZHGCG3pIvjZWa7I1dPgw8DtX2AaHjoJU0FaUipXp/uacKAmDpEp wcoLTXjW3m6MmRbPXRj3PNs7MwCtYKA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:00:52 2026 by rpki-client