$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76c1d4c7-6064-3024-864f-e47606ba333b.roa File: 76c1d4c7-6064-3024-864f-e47606ba333b.roa (raw, json) Hash identifier: rCuojpAvBffjMuS61LiW6CCaxk5gBHzWJO5ZzoQo6V0= Subject key identifier: EF:BF:FE:4C:96:4F:11:60:74:66:F0:32:AB:29:13:4C:59:20:94:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E61455F61C8263DE1A71CAE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76c1d4c7-6064-3024-864f-e47606ba333b.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 16625 IP address blocks: 23.209.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:45:5f:61:c8:26:3d:e1:a7:1c:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=1e0f3d80-dd86-4c7a-9cc0-190ae966d098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:41:0e:cc:f0:6b:ef:39:ae:78:d2:77:03:10: 50:1c:b0:a4:f5:da:4b:5d:99:f6:4d:01:b0:d8:96: 96:3d:c3:ea:a5:1f:93:04:be:49:9c:39:05:1b:50: b1:dd:79:66:42:7f:4f:83:c0:f0:84:62:35:eb:76: 04:e9:7c:74:5f:35:4b:2b:cd:0a:ba:b9:35:a1:62: 2a:19:c1:f0:6c:86:e6:cc:da:d9:2a:1c:3d:87:68: ef:ac:2e:e5:f5:e3:83:a4:8e:24:0e:49:84:0e:06: b7:62:7d:64:e2:19:cc:59:6d:67:4c:d6:fd:d8:55: bd:d1:d9:a5:23:98:11:52:cf:82:86:0f:83:ff:91: 77:62:72:9e:f7:71:71:64:fa:e7:c8:dd:67:14:8c: 4a:64:25:d9:8f:ff:9f:bb:62:5a:80:9f:15:6c:3e: b9:76:f2:f6:2e:97:81:2d:86:9c:82:2a:ae:c6:91: ff:ce:1a:02:88:1d:85:a8:09:05:fc:0e:78:5b:39: 1a:b3:fa:0f:5a:9e:0f:14:de:3d:23:82:aa:50:8a: 6d:50:07:04:98:94:3e:aa:aa:42:1d:fe:07:dd:8e: d7:26:79:84:31:c1:c1:95:c7:46:4b:c3:43:d9:2a: f5:1f:e2:4d:0f:6c:13:b4:aa:03:e1:36:42:a8:68: 22:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BF:FE:4C:96:4F:11:60:74:66:F0:32:AB:29:13:4C:59:20:94:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/76c1d4c7-6064-3024-864f-e47606ba333b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5b:dc:63:55:e4:f6:1c:a5:d5:cb:42:16:58:b7:0b:06:ac: 25:25:78:ff:16:4c:45:62:6d:fa:5b:4c:eb:a5:1f:c6:f2:9c: 88:98:e1:e8:0e:d2:c4:73:2d:59:46:e2:d2:e2:b5:37:cb:c0: 69:fc:71:61:5f:4e:91:b5:13:a7:02:20:2d:9d:85:23:7a:39: 8e:d4:8d:9f:09:76:cd:92:c5:7f:0c:30:c9:44:33:13:3a:53: c0:72:d4:93:6a:29:0a:d0:2c:3b:26:71:57:b9:73:0b:b4:15: 1f:dc:1b:8e:04:aa:43:51:af:8a:bf:a7:bc:d2:a4:d1:40:b6: da:63:6d:69:8b:69:82:eb:c5:bd:f7:17:8b:34:36:9d:dc:e0: 54:fc:23:b0:e7:64:83:43:f8:56:7e:ea:60:5b:a4:d8:a6:80: c3:5b:cd:19:23:f8:e9:ba:a6:b5:8d:41:b8:a2:36:9e:42:91: c1:04:e4:2b:b2:36:e5:a1:51:bb:e5:c0:05:a2:54:6f:5c:58: 0d:9f:f3:a2:c0:8b:69:f4:00:4f:9c:a8:c9:3c:51:2e:b2:29: 90:cc:ee:ea:1b:1e:20:3b:74:52:77:cb:49:7e:83:c5:93:c5: e3:2b:6c:75:04:bf:66:5b:77:e4:4f:8f:d0:e9:13:1b:17:0e: dd:d8:8a:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRV9hyCY94accrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk MWUwZjNkODAtZGQ4Ni00YzdhLTljYzAtMTkwYWU5NjZkMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUEOzPBr7zmueNJ3AxBQHLCk9dpLXZn2TQGw 2JaWPcPqpR+TBL5JnDkFG1Cx3XlmQn9Pg8DwhGI163YE6Xx0XzVLK80Kurk1oWIq GcHwbIbmzNrZKhw9h2jvrC7l9eODpI4kDkmEDga3Yn1k4hnMWW1nTNb92FW90dml I5gRUs+Chg+D/5F3YnKe93FxZPrnyN1nFIxKZCXZj/+fu2JagJ8VbD65dvL2LpeB LYacgiquxpH/zhoCiB2FqAkF/A54Wzkas/oPWp4PFN49I4KqUIptUAcEmJQ+qqpC Hf4H3Y7XJnmEMcHBlcdGS8ND2Sr1H+JND2wTtKoD4TZCqGgitwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+//kyWTxFgdGbwMqspE0xZIJT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzZjMWQ0YzctNjA2NC0z MDI0LTg2NGYtZTQ3NjA2YmEzMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9HMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhb3GNV5PYcpdXLQhZYtwsGrCUleP8WTEVibfpbTOulH8bynIiY4egO 0sRzLVlG4tLitTfLwGn8cWFfTpG1E6cCIC2dhSN6OY7UjZ8Jds2SxX8MMMlEMxM6 U8By1JNqKQrQLDsmcVe5cwu0FR/cG44EqkNRr4q/p7zSpNFAttpjbWmLaYLrxb33 F4s0Np3c4FT8I7DnZIND+FZ+6mBbpNimgMNbzRkj+Om6prWNQbiiNp5CkcEE5Cuy NuWhUbvlwAWiVG9cWA2f86LAi2n0AE+cqMk8US6yKZDM7uobHiA7dFJ3y0l+g8WT xeMrbHUEv2Zbd+RPj9DpExsXDt3Yijk= -----END CERTIFICATE-----Generated at Tue Jul 21 20:00:01 2026 by rpki-client