$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/829d7fa8-5b44-317c-8401-b9fa283117ef.roa File: 829d7fa8-5b44-317c-8401-b9fa283117ef.roa (raw, json) Hash identifier: dYYWMSHOXTyXdWTNIqU1mQ74Y4qvleJieSyKjpmYQUU= Subject key identifier: 88:44:1A:5F:A0:8E:C9:B4:63:0D:8A:E7:5C:57:D3:6C:AD:4A:12:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E5A4A2097E790534E14E1B0C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/829d7fa8-5b44-317c-8401-b9fa283117ef.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 16625 IP address blocks: 23.10.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:20:97:e7:90:53:4e:14:e1:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=561ba985-de97-407a-a863-534a1b0d4c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:6f:3d:97:dd:2c:ec:5b:88:75:20:b6:79: 39:57:bc:c4:a9:05:75:d0:de:1f:2a:3f:c0:2f:86: ff:a6:52:e5:64:6d:c7:97:15:07:90:cf:79:e3:ff: ad:a1:96:3a:8d:ac:2d:e2:51:6d:8e:2a:bf:60:fe: a0:93:55:22:c1:ae:68:0b:d8:8c:a5:49:ce:6d:5f: 32:98:27:59:f6:14:c1:30:da:2d:46:e4:a8:a3:f9: 0e:d9:6f:66:9f:84:35:85:ca:e6:fb:4d:49:f9:3b: c8:39:2e:2d:fc:d1:f6:3c:eb:38:47:07:6e:fd:9d: 03:69:c1:04:18:84:aa:d6:1e:e4:74:20:0e:c2:f0: 58:3e:50:72:8a:e5:7a:11:42:64:69:ab:8d:68:4b: ef:09:cf:1e:92:35:55:d1:2c:76:02:62:9f:29:9b: 88:f4:c6:90:02:24:f3:c5:57:fe:4a:bf:b1:e6:04: ff:8d:1c:59:5f:02:06:04:5c:a2:59:d6:10:db:24: fe:38:fa:bf:91:05:0a:50:cd:a5:c9:e0:96:ff:1a: 0a:f0:bd:9b:f5:21:23:c0:5d:e3:c2:d4:eb:b9:c4: f1:60:b1:a3:57:e9:2c:d4:8e:5b:eb:e9:f1:1d:13: 3d:7f:c0:94:cd:8e:18:f6:fd:84:a4:14:5e:99:9a: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:44:1A:5F:A0:8E:C9:B4:63:0D:8A:E7:5C:57:D3:6C:AD:4A:12:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/829d7fa8-5b44-317c-8401-b9fa283117ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.10.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9c:28:2a:7c:06:20:bb:1a:6d:c1:72:eb:27:1f:b2:7c:d8: d0:81:95:7e:b8:1c:2e:8f:76:db:f1:c9:51:a0:7d:a8:5d:9f: 7b:46:7e:b3:fd:90:8c:9d:b1:18:58:e1:7b:72:45:4c:e4:28: d5:77:25:7c:a5:2a:2c:38:3d:0a:8d:77:a1:cf:90:47:41:5f: 04:b2:54:3c:8b:29:61:f6:d2:21:bc:7b:df:78:0d:cf:6f:f4: e6:06:05:35:0d:80:6a:a4:ef:bb:18:d2:0b:97:8f:f6:26:a6: 2a:6a:c0:9b:b9:4d:32:9a:a2:83:f2:cc:07:89:cb:95:c9:dd: bd:71:30:6b:1d:8d:b5:7d:64:f1:91:d3:bb:63:26:6c:78:92: 68:c4:0f:f5:af:f2:7c:3e:b4:ed:e5:ee:43:b4:25:2f:5b:57: 86:bb:d5:9b:f0:91:c1:f0:0c:5b:b7:40:51:08:81:a3:5f:2c: 51:77:05:3e:60:4a:f1:80:a5:3d:c5:38:8e:16:58:05:c3:ca: 76:e7:30:f7:1d:ca:68:43:56:2f:76:31:a5:e4:cd:89:a8:5d: 46:b1:f7:e0:77:5c:0e:64:f1:20:3f:b5:33:e4:ef:0b:22:c0: 3d:70:f0:71:f7:6e:38:f8:2f:df:2d:ed:39:7d:6b:13:d6:d5: ad:05:13:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSiCX55BTThThsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk NTYxYmE5ODUtZGU5Ny00MDdhLWE4NjMtNTM0YTFiMGQ0YzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUpvPZfdLOxbiHUgtnk5V7zEqQV10N4fKj/A L4b/plLlZG3HlxUHkM954/+toZY6jawt4lFtjiq/YP6gk1Uiwa5oC9iMpUnObV8y mCdZ9hTBMNotRuSoo/kO2W9mn4Q1hcrm+01J+TvIOS4t/NH2POs4Rwdu/Z0DacEE GISq1h7kdCAOwvBYPlByiuV6EUJkaauNaEvvCc8ekjVV0Sx2AmKfKZuI9MaQAiTz xVf+Sr+x5gT/jRxZXwIGBFyiWdYQ2yT+OPq/kQUKUM2lyeCW/xoK8L2b9SEjwF3j wtTrucTxYLGjV+ks1I5b6+nxHRM9f8CUzY4Y9v2EpBRemZpbAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhEGl+gjsm0Yw2K51xX02ytShIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODI5ZDdmYTgtNWI0NC0z MTdjLTg0MDEtYjlmYTI4MzExN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEicKCp8BiC7Gm3BcusnH7J82NCBlX64HC6PdtvxyVGgfahdn3tGfrP9 kIydsRhY4XtyRUzkKNV3JXylKiw4PQqNd6HPkEdBXwSyVDyLKWH20iG8e994Dc9v 9OYGBTUNgGqk77sY0guXj/YmpipqwJu5TTKaooPyzAeJy5XJ3b1xMGsdjbV9ZPGR 07tjJmx4kmjED/Wv8nw+tO3l7kO0JS9bV4a71ZvwkcHwDFu3QFEIgaNfLFF3BT5g SvGApT3FOI4WWAXDynbnMPcdymhDVi92MaXkzYmoXUax9+B3XA5k8SA/tTPk7wsi wD1w8HH3bjj4L98t7Tl9axPW1a0FEyA= -----END CERTIFICATE-----Generated at Tue Jul 21 19:59:33 2026 by rpki-client