$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d63d0ad-90fb-3480-a652-05e948f050a1.roa File: 8d63d0ad-90fb-3480-a652-05e948f050a1.roa (raw, json) Hash identifier: 9jKc47V1aBL2UqYE42SBeBbJL9nopDrW1ATaUC7ak/Q= Subject key identifier: FC:5A:ED:6D:39:B9:DC:A1:58:6A:28:BC:8C:9C:AD:6A:50:98:5B:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E376475E468C0034810AB1500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d63d0ad-90fb-3480-a652-05e948f050a1.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 21342 IP address blocks: 23.36.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:75:e4:68:c0:03:48:10:ab:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=4031e33d-3aa3-46e1-9169-f1a089382f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:97:9b:ab:8d:8f:25:02:44:76:5a:5e:b2: 4a:fe:d4:08:56:94:c3:49:86:d6:1c:25:e5:35:20: 08:71:70:f9:47:f8:07:7c:af:30:58:1f:39:65:23: c9:bf:96:76:9b:ca:57:5a:42:b3:61:9f:58:bb:95: af:93:1d:04:bc:00:08:74:07:73:ec:5d:77:40:c5: 17:8f:78:8e:d6:b9:71:c8:1b:c7:62:51:ca:bc:76: e4:d6:18:64:e8:2c:99:59:66:3b:e7:43:11:49:a3: b7:fd:b9:64:2c:9e:af:17:1a:32:d0:c7:97:42:84: fe:d9:88:dd:fa:87:96:44:c6:90:7c:da:c7:da:3f: 6d:37:30:ca:0c:2e:8a:57:aa:f9:b5:0d:3e:2b:b4: 02:36:e5:21:81:95:7f:d8:f6:79:14:61:6f:16:e9: 66:99:7c:b0:0d:8e:a1:7e:9b:11:4b:79:af:1d:f8: fb:91:31:a3:7f:23:ef:a2:d5:fb:cf:1b:68:aa:ea: 33:47:d9:81:2b:ee:1b:b0:53:d7:f0:ad:32:da:31: 43:90:ec:02:f2:b1:71:48:18:63:f2:4d:b5:6c:fa: 98:0d:2e:df:53:36:db:25:64:11:d1:a8:92:34:b5: 97:54:28:0e:75:92:4f:8b:73:73:a7:a2:5f:f9:c3: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5A:ED:6D:39:B9:DC:A1:58:6A:28:BC:8C:9C:AD:6A:50:98:5B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d63d0ad-90fb-3480-a652-05e948f050a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d7:50:48:39:6d:2f:9c:f7:cd:f6:bd:b5:e3:df:45:f8:e0: da:87:03:f4:1f:7d:40:f7:67:b9:94:16:21:bc:ae:73:1f:9d: 82:cc:f6:6c:fd:0b:3e:f0:ff:0e:71:63:fd:d5:51:76:fe:81: 8b:dc:f7:41:27:6b:a3:83:dc:79:d4:33:61:6d:2c:f8:e5:25: e4:f0:ef:0f:29:54:62:6d:81:f9:63:3d:3a:c8:d9:88:99:32: aa:53:eb:fd:41:aa:3c:3f:52:e7:8b:b6:2e:33:87:db:4b:34: 0d:5a:f6:b9:51:54:3c:91:29:1f:56:96:a1:9b:34:0d:bb:04: 4e:63:ca:16:90:98:6f:df:35:b1:0d:4b:83:bc:64:03:35:0a: 7f:1e:9a:bd:0a:3a:38:ee:c4:17:ac:44:7f:21:f6:d4:ab:58: 55:b6:ce:ca:07:62:7d:73:e4:68:8c:02:f7:39:fa:ef:00:74: 80:3f:54:2a:a1:3b:b0:ac:d1:27:87:bc:3d:d4:53:fb:8e:a9: 2c:93:6e:8e:d1:da:d1:d0:f9:ef:4d:c0:11:de:30:70:d3:d1: 74:13:50:37:af:60:4e:8b:07:0d:4f:a7:d9:4c:07:57:34:60: f6:9c:ff:72:3c:0a:cd:cd:85:a8:51:cb:f6:d4:da:b9:bf:b6: c3:67:a0:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZHXkaMADSBCrFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk NDAzMWUzM2QtM2FhMy00NmUxLTkxNjktZjFhMDg5MzgyZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4CXm6uNjyUCRHZaXrJK/tQIVpTDSYbWHCXl NSAIcXD5R/gHfK8wWB85ZSPJv5Z2m8pXWkKzYZ9Yu5Wvkx0EvAAIdAdz7F13QMUX j3iO1rlxyBvHYlHKvHbk1hhk6CyZWWY750MRSaO3/blkLJ6vFxoy0MeXQoT+2Yjd +oeWRMaQfNrH2j9tNzDKDC6KV6r5tQ0+K7QCNuUhgZV/2PZ5FGFvFulmmXywDY6h fpsRS3mvHfj7kTGjfyPvotX7zxtoquozR9mBK+4bsFPX8K0y2jFDkOwC8rFxSBhj 8k21bPqYDS7fUzbbJWQR0aiSNLWXVCgOdZJPi3Nzp6Jf+cO2bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxa7W05udyhWGoovIycrWpQmFu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ2M2QwYWQtOTBmYi0z NDgwLWE2NTItMDVlOTQ4ZjA1MGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXXUEg5bS+c9832vbXj30X44NqHA/QffUD3Z7mUFiG8rnMfnYLM9mz9 Cz7w/w5xY/3VUXb+gYvc90Ena6OD3HnUM2FtLPjlJeTw7w8pVGJtgfljPTrI2YiZ MqpT6/1Bqjw/UueLti4zh9tLNA1a9rlRVDyRKR9WlqGbNA27BE5jyhaQmG/fNbEN S4O8ZAM1Cn8emr0KOjjuxBesRH8h9tSrWFW2zsoHYn1z5GiMAvc5+u8AdIA/VCqh O7Cs0SeHvD3UU/uOqSyTbo7R2tHQ+e9NwBHeMHDT0XQTUDevYE6LBw1Pp9lMB1c0 YPac/3I8Cs3NhahRy/bU2rm/tsNnoOU= -----END CERTIFICATE-----Generated at Tue Jul 21 21:46:13 2026 by rpki-client