$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa File: a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa (raw, json) Hash identifier: AqESFRldvlhg8Ug17cy8X4Slz37aEnxbMuejQfi8PAo= Subject key identifier: 6E:64:06:21:C4:18:4A:37:6C:C3:B6:7F:99:CB:B2:10:4B:C5:00:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E7E94FA95346F0BB86BE0FE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 3786 IP address blocks: 23.35.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:fa:95:34:6f:0b:b8:6b:e0:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=f08fa801-5df4-45a9-84df-5a51abc8bf30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:7d:db:9c:20:4f:f9:7c:15:b1:7a:0c:dc: 21:97:2d:93:b0:67:27:c3:4b:9a:01:a3:65:22:79: 8c:e7:6e:af:aa:02:9c:ad:db:d9:a0:75:0d:5e:5b: 02:58:a6:53:ac:c0:08:98:e2:d6:13:b1:d7:ba:21: 03:e1:43:fd:f7:49:04:0f:6d:b8:18:a9:95:cc:88: 87:b4:47:07:12:0f:38:ab:28:78:2e:aa:48:6e:b4: a6:e9:3a:59:b7:86:61:4d:4e:38:a4:b4:29:bd:a9: ad:41:dc:0e:55:05:62:4b:26:4e:dc:17:98:79:3c: db:f5:05:55:d8:5b:1c:72:17:bf:c5:69:b9:4c:18: ae:ce:75:92:27:c7:a5:9b:d7:1e:cb:d1:81:f6:c9: 65:69:3a:4d:28:27:b9:c3:f1:10:58:62:a8:e5:a6: 69:69:ee:93:5d:b9:c8:8f:6b:be:38:0d:c5:64:ee: 58:49:ff:99:ac:2f:9b:3a:a8:9b:23:67:c9:d3:a2: d1:7b:64:3b:5e:cb:3d:1e:af:63:6e:8b:a1:fe:63: 7d:f0:0b:71:df:c9:92:dc:31:ad:13:85:ec:34:ef: c0:c7:e8:9a:d1:0c:2c:d5:b3:c0:11:21:5d:51:fb: 5a:5f:b7:66:ab:4e:5f:90:d6:38:32:9f:20:d7:88: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:64:06:21:C4:18:4A:37:6C:C3:B6:7F:99:CB:B2:10:4B:C5:00:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0cdf082-babd-36ab-8ea0-ae4ff0f7d111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:98:a9:79:c3:a1:bb:05:d3:2d:6a:b0:6b:a6:ba:28:d3:98: 0a:5e:14:a6:cf:34:0e:c7:36:16:4b:df:38:bc:dd:4b:01:3c: e4:4f:06:f2:eb:bd:97:56:92:bb:c7:a8:a8:c1:1b:39:eb:ee: e4:91:90:3d:b3:a6:5f:c8:d5:cc:fb:b3:56:6d:62:3e:bc:40: ba:55:0f:21:44:22:01:c4:ee:a7:f7:11:12:7e:b0:65:4b:26: 61:69:fc:62:20:81:fa:58:14:ed:83:8e:e8:73:45:b2:43:04: 1c:b8:e1:02:d3:e0:36:71:3d:79:df:47:d0:19:60:cb:aa:e9: d6:b8:1e:4c:0b:ad:3a:f4:62:ba:8b:48:81:df:f9:77:a7:a1: 9b:e1:98:3b:fa:01:26:63:4f:05:4d:2b:9a:90:24:7c:0a:c1: 87:26:f5:34:cc:d8:a1:81:0b:2d:bd:d9:fb:7f:76:82:fe:ac: 21:83:80:f9:c3:1a:6a:cb:01:a2:61:af:cc:6e:79:33:23:18: b2:21:cf:e2:41:91:6e:66:84:49:bb:2e:3e:e9:9d:6c:7c:73: c0:2b:e2:86:db:d4:51:87:8e:02:60:3e:67:28:6c:90:e8:ff: 17:8c:ae:61:97:4f:4a:61:33:ed:67:50:a4:41:c4:85:c9:57: de:e3:dc:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPqVNG8LuGvg/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZjA4ZmE4MDEtNWRmNC00NWE5LTg0ZGYtNWE1MWFiYzhiZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjN925wgT/l8FbF6DNwhly2TsGcnw0uaAaNl InmM526vqgKcrdvZoHUNXlsCWKZTrMAImOLWE7HXuiED4UP990kED224GKmVzIiH tEcHEg84qyh4LqpIbrSm6TpZt4ZhTU44pLQpvamtQdwOVQViSyZO3BeYeTzb9QVV 2Fscche/xWm5TBiuznWSJ8elm9cey9GB9sllaTpNKCe5w/EQWGKo5aZpae6TXbnI j2u+OA3FZO5YSf+ZrC+bOqibI2fJ06LRe2Q7Xss9Hq9jbouh/mN98Atx38mS3DGt E4XsNO/Ax+ia0Qws1bPAESFdUftaX7dmq05fkNY4Mp8g14hexwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5kBiHEGEo3bMO2f5nLshBLxQC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBjZGYwODItYmFiZC0z NmFiLThlYTAtYWU0ZmYwZjdkMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+YqXnDobsF0y1qsGumuijTmApeFKbPNA7HNhZL3zi83UsBPORPBvLr vZdWkrvHqKjBGznr7uSRkD2zpl/I1cz7s1ZtYj68QLpVDyFEIgHE7qf3ERJ+sGVL JmFp/GIggfpYFO2DjuhzRbJDBBy44QLT4DZxPXnfR9AZYMuq6da4HkwLrTr0YrqL SIHf+XenoZvhmDv6ASZjTwVNK5qQJHwKwYcm9TTM2KGBCy292ft/doL+rCGDgPnD GmrLAaJhr8xueTMjGLIhz+JBkW5mhEm7Lj7pnWx8c8Ar4obb1FGHjgJgPmcobJDo /xeMrmGXT0phM+1nUKRBxIXJV97j3AE= -----END CERTIFICATE-----Generated at Tue Jul 21 21:43:42 2026 by rpki-client