$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f0c2673-439c-3ba2-b017-6d4d6527db1e.roa File: 8f0c2673-439c-3ba2-b017-6d4d6527db1e.roa (raw, json) Hash identifier: Epx1+/Xwv8eiKyFe1sMldjjCtFOxf6FsdvpsD2sDHYk= Subject key identifier: 56:13:24:CB:15:D2:84:FC:85:CA:A7:33:14:88:12:22:AF:AC:CA:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81A933A53EE71ABFD78AE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f0c2673-439c-3ba2-b017-6d4d6527db1e.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 16625 IP address blocks: 23.220.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 16 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:a9:33:a5:3e:e7:1a:bf:d7:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=95b163c4-5646-42bc-94aa-6d19723e3a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7d:88:1f:1a:48:5a:81:a5:e5:2b:8d:c1:2c: 21:09:77:51:d1:d8:64:dc:9a:e2:cc:f7:99:a9:2d: ed:d8:9a:b9:75:12:3a:0c:0b:bf:5d:51:54:bb:58: a5:d0:a5:90:58:20:76:6e:4e:cc:c2:5b:50:f4:1b: 47:a9:5c:aa:83:51:1a:39:b9:03:53:60:c1:24:3c: 8b:62:2a:86:2b:e4:f1:9c:d2:57:34:db:21:de:30: 1b:b7:83:56:57:20:cd:b3:e0:b5:af:14:db:b9:6f: 10:14:36:9b:b6:66:ae:f8:93:49:fd:cc:26:7a:b1: 9f:0b:d8:00:01:be:4b:fd:87:19:f7:4a:50:cd:88: f3:21:4b:ec:18:2e:a7:25:11:5b:b4:f1:bd:68:0f: 53:02:e8:db:9c:59:57:ec:4a:0c:af:31:e9:00:58: 4c:35:45:9a:9f:b2:2c:6a:40:ca:eb:80:5d:5a:5a: 92:a2:90:8c:2c:65:49:3b:0e:ce:5a:59:5c:f2:f1: 53:ce:21:4b:cd:63:9a:f6:c4:5f:ce:24:64:12:1f: 39:c9:8a:a3:cd:6b:6a:88:1e:32:ed:e1:bf:b8:19: a0:7f:1f:29:6b:ae:1c:db:9d:90:f7:c8:fc:5c:93: 35:de:7e:ed:d8:46:ad:82:bc:4f:ce:49:34:8b:ad: 74:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:13:24:CB:15:D2:84:FC:85:CA:A7:33:14:88:12:22:AF:AC:CA:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f0c2673-439c-3ba2-b017-6d4d6527db1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2c:6a:96:93:44:e7:8f:1f:f2:af:be:85:67:c3:26:0a:fa: df:cf:5a:05:9a:aa:22:46:fb:63:8f:7d:ff:14:f1:88:d7:ec: 01:2d:f4:bc:d1:82:b9:75:87:24:23:71:33:7d:fd:37:be:15: e9:d4:d5:85:df:2a:1f:10:2c:13:3e:0d:3c:88:66:37:42:04: 09:be:e3:fb:e0:5d:12:22:ed:bc:28:61:d5:35:95:9c:68:01: 84:c2:49:b6:14:32:3f:28:ef:d2:55:05:19:5b:63:62:40:da: eb:08:3f:78:30:19:df:50:14:60:0d:81:4c:a9:2e:17:30:90: 33:12:e1:9e:4a:b5:69:85:85:3d:93:cc:b2:6c:ab:46:69:6c: ba:21:e1:8e:8f:d8:50:6f:36:f6:08:c4:a8:20:c6:26:76:06: d2:19:5c:cc:06:20:87:c4:5e:12:0d:15:69:a4:94:dd:4d:13: 9a:98:6d:86:de:d2:74:e3:f1:2c:79:b0:88:0c:86:d2:33:90: 09:0c:48:9a:98:61:86:f6:c4:d5:3f:43:90:fa:ee:82:27:31: c0:90:6c:38:4d:7f:d6:55:f0:b2:27:c9:2c:af:7a:c7:75:77: be:b1:8a:ec:2d:3b:02:25:0b:85:ad:3a:0d:6f:a5:9f:b4:3c: ea:64:d1:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugakzpT7nGr/XiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk OTViMTYzYzQtNTY0Ni00MmJjLTk0YWEtNmQxOTcyM2UzYTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH2IHxpIWoGl5SuNwSwhCXdR0dhk3JrizPeZ qS3t2Jq5dRI6DAu/XVFUu1il0KWQWCB2bk7MwltQ9BtHqVyqg1EaObkDU2DBJDyL YiqGK+TxnNJXNNsh3jAbt4NWVyDNs+C1rxTbuW8QFDabtmau+JNJ/cwmerGfC9gA Ab5L/YcZ90pQzYjzIUvsGC6nJRFbtPG9aA9TAujbnFlX7EoMrzHpAFhMNUWan7Is akDK64BdWlqSopCMLGVJOw7OWllc8vFTziFLzWOa9sRfziRkEh85yYqjzWtqiB4y 7eG/uBmgfx8pa64c252Q98j8XJM13n7t2EatgrxPzkk0i6108QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYTJMsV0oT8hcqnMxSIEiKvrMrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGYwYzI2NzMtNDM5Yy0z YmEyLWIwMTctNmQ0ZDY1MjdkYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEsapaTROePH/KvvoVnwyYK+t/PWgWaqiJG+2OPff8U8YjX7AEt9LzR grl1hyQjcTN9/Te+FenU1YXfKh8QLBM+DTyIZjdCBAm+4/vgXRIi7bwoYdU1lZxo AYTCSbYUMj8o79JVBRlbY2JA2usIP3gwGd9QFGANgUypLhcwkDMS4Z5KtWmFhT2T zLJsq0ZpbLoh4Y6P2FBvNvYIxKggxiZ2BtIZXMwGIIfEXhINFWmklN1NE5qYbYbe 0nTj8Sx5sIgMhtIzkAkMSJqYYYb2xNU/Q5D67oInMcCQbDhNf9ZV8LInySyvesd1 d76xiuwtOwIlC4WtOg1vpZ+0POpk0Qc= -----END CERTIFICATE-----Generated at Sat Aug 15 08:44:31 2026 by rpki-client