$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6205d7c7-04d2-3546-ab1f-8783ca9fe430.roa File: 6205d7c7-04d2-3546-ab1f-8783ca9fe430.roa (raw, json) Hash identifier: OH5qp5NPdLFB3fAFKGUz9Zz+pBhJria6qiJYJrqsUs8= Subject key identifier: 66:4E:0D:46:76:72:14:25:D0:4A:61:43:45:05:1E:26:B2:94:67:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7FFA5444F01AA00A3B202100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6205d7c7-04d2-3546-ab1f-8783ca9fe430.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.1.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:54:44:f0:1a:a0:0a:3b:20:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=7d7cb70a-9640-4a06-bc6b-99844f78f634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:44:2a:11:f0:3b:12:91:80:2c:89:eb:de:f1: 91:0c:0b:65:c4:f6:05:42:a8:bd:b6:ae:51:e9:8c: 83:be:d1:bc:b4:7b:a0:a7:d5:5b:4b:d8:30:0d:e0: 2e:a4:45:52:4c:96:60:fe:01:03:0d:3c:2e:cb:18: fe:2d:08:99:f0:7d:fb:24:f9:19:7b:a9:42:c7:4b: 01:dd:bc:34:d4:57:54:7c:1b:ad:eb:67:c1:40:f6: cb:95:bd:a6:fa:d9:81:e0:6d:ee:31:6d:de:f5:78: 20:e7:d0:81:d5:e0:cd:9d:71:ec:da:5a:16:38:4a: bb:c5:44:68:35:d9:74:e2:1a:66:50:ec:29:b0:d1: 1a:fc:89:9b:43:7d:5b:6c:b8:bc:ce:d7:e6:ed:36: 1a:db:1f:f8:a7:22:69:cd:55:9b:14:c0:b8:bc:7e: 5e:05:99:8c:bd:a1:a0:8b:90:6c:2e:65:bf:41:b9: 58:92:2e:af:8d:2c:63:c0:02:f0:ea:df:f3:1a:55: e4:be:ac:b9:0f:4f:10:15:f5:cb:97:6d:73:47:2f: f5:e6:8d:12:a1:83:e0:2b:37:07:31:92:57:b0:05: f1:10:f9:75:50:e7:89:98:b2:87:c4:5d:b2:82:16: d2:3c:54:43:f0:26:5a:69:7a:b8:60:f1:19:20:ac: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4E:0D:46:76:72:14:25:D0:4A:61:43:45:05:1E:26:B2:94:67:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6205d7c7-04d2-3546-ab1f-8783ca9fe430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a3:1e:43:f0:5d:a0:08:99:c0:0c:6c:0d:c4:20:f2:d0:b5: 6b:5d:c8:c0:6a:ad:9e:ca:a4:67:77:a1:2d:7f:a7:c7:fa:c6: fb:16:46:82:5f:65:66:97:8e:9e:6e:41:93:e9:91:26:9c:d2: e7:a0:ca:bd:b4:b9:30:7a:50:63:e2:48:9f:b3:24:d3:40:42: 74:39:87:fa:9a:1d:cf:1a:a7:bf:90:d6:20:49:2b:ce:34:eb: 92:ad:38:80:a6:74:29:b7:ff:24:30:d1:ba:49:2a:b3:ca:84: 7a:30:3c:4e:b5:ce:c4:a5:ca:d6:b6:78:9e:42:33:7c:33:86: f6:89:de:44:f2:df:a4:c1:6f:92:18:6c:d9:62:dc:54:5f:35: 89:d5:7c:d7:6c:a6:0a:3b:6d:dd:96:ed:39:77:ef:80:2f:95: 7e:10:a0:4a:81:fc:bd:0e:5e:32:3c:96:a3:2b:a0:b9:32:d3: 80:43:8a:62:24:f7:57:26:1b:ad:08:28:ac:82:d3:e0:09:b5: 14:3d:20:ae:f7:71:2a:ac:e0:74:fd:35:0c:ec:1c:3b:28:e7: 29:b9:6a:62:d3:9e:1f:47:1d:b1:51:47:1c:5e:e5:d1:01:29: 2a:3c:cf:49:1b:f4:ff:aa:2d:27:04:cf:d9:9f:de:6b:69:87: 6e:5f:c2:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+lRE8BqgCjsgIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk N2Q3Y2I3MGEtOTY0MC00YTA2LWJjNmItOTk4NDRmNzhmNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkQqEfA7EpGALInr3vGRDAtlxPYFQqi9tq5R 6YyDvtG8tHugp9VbS9gwDeAupEVSTJZg/gEDDTwuyxj+LQiZ8H37JPkZe6lCx0sB 3bw01FdUfBut62fBQPbLlb2m+tmB4G3uMW3e9Xgg59CB1eDNnXHs2loWOEq7xURo Ndl04hpmUOwpsNEa/ImbQ31bbLi8ztfm7TYa2x/4pyJpzVWbFMC4vH5eBZmMvaGg i5BsLmW/QblYki6vjSxjwALw6t/zGlXkvqy5D08QFfXLl21zRy/15o0SoYPgKzcH MZJXsAXxEPl1UOeJmLKHxF2yghbSPFRD8CZaaXq4YPEZIKyiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZODUZ2chQl0EphQ0UFHiaylGcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjIwNWQ3YzctMDRkMi0z NTQ2LWFiMWYtODc4M2NhOWZlNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKjHkPwXaAImcAMbA3EIPLQtWtdyMBqrZ7KpGd3oS1/p8f6xvsWRoJf ZWaXjp5uQZPpkSac0uegyr20uTB6UGPiSJ+zJNNAQnQ5h/qaHc8ap7+Q1iBJK840 65KtOICmdCm3/yQw0bpJKrPKhHowPE61zsSlyta2eJ5CM3wzhvaJ3kTy36TBb5IY bNli3FRfNYnVfNdspgo7bd2W7Tl374AvlX4QoEqB/L0OXjI8lqMroLky04BDimIk 91cmG60IKKyC0+AJtRQ9IK73cSqs4HT9NQzsHDso5ym5amLTnh9HHbFRRxxe5dEB KSo8z0kb9P+qLScEz9mf3mtph25fwk8= -----END CERTIFICATE-----Generated at Tue Jul 21 20:45:49 2026 by rpki-client