$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa File: a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa (raw, json) Hash identifier: dSHO2WQRi6MAuz4U0wFEave6jF0PETYhDPcabRkY9kY= Subject key identifier: 42:1D:A6:BD:BD:9D:5D:0D:F0:A0:FE:D6:88:15:28:90:F9:B3:B8:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E482481634199A3005162C900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 24319 IP address blocks: 23.67.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:81:63:41:99:a3:00:51:62:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=aa05d6ba-1f1d-496c-ac0f-4774145fa59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:98:63:a4:22:e6:2f:ba:18:a5:97:e8:f4:69: 5c:80:0e:02:70:df:bc:88:7a:cf:ad:42:71:24:32: 68:01:ab:10:5c:eb:e1:a2:27:2f:da:c7:dc:9c:4e: 34:f8:ec:03:da:5a:2c:64:83:96:86:94:00:55:d2: d7:d1:a1:c6:df:3e:42:bc:1a:bb:29:1a:13:63:08: 1b:39:65:1c:a0:c9:f4:94:ed:60:7c:fb:74:04:3d: 62:d2:23:6b:49:e3:42:26:f2:38:a8:32:32:44:d1: 2d:5a:f7:ec:e7:a8:7f:5e:f4:b0:24:79:fb:76:27: b2:1c:6b:7b:a7:3b:8c:c9:76:1e:a6:88:60:6d:1a: 0e:64:4e:b8:fd:59:44:4b:6d:b5:da:38:a7:57:19: 8c:98:2c:35:1a:3a:d4:5a:c9:12:8e:a5:4f:38:7b: c0:e0:3c:bd:a9:2e:af:0e:53:1b:42:eb:f8:8a:ba: 32:31:92:b6:a4:00:80:44:05:15:f1:65:4c:fe:e9: 1e:cf:47:70:4c:9a:ca:2d:b2:65:81:9f:8d:c2:a9: 48:5f:e2:0c:4e:b0:b9:9a:f8:d4:dd:f7:50:c8:a8: 5f:b9:cc:4f:5a:d4:8d:71:6a:d1:7b:dd:43:e7:bc: 20:1b:be:8e:0a:6a:06:fb:ef:82:21:0d:2a:a3:c3: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1D:A6:BD:BD:9D:5D:0D:F0:A0:FE:D6:88:15:28:90:F9:B3:B8:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b0:55:a1:0c:5b:b5:23:79:d7:bc:bb:1a:3b:a3:e5:2b:90: db:97:2f:24:23:11:11:46:95:d9:59:d4:a2:a2:f2:9f:0c:07: 35:ca:21:f6:cc:1a:59:7a:b7:3e:7f:a9:06:c0:85:c1:7c:79: 1c:8a:40:5c:8e:d1:76:11:78:ec:64:03:69:b8:c5:a6:3a:64: 3c:ba:1a:a3:67:1f:3d:ae:68:6e:7b:37:3a:e4:93:bc:ad:64: 4e:0a:f8:79:33:9b:d9:ba:79:73:21:4d:4d:a3:28:ff:2c:ab: 3b:5b:8e:54:2b:ab:8a:bb:92:c3:a0:70:49:2a:8e:b4:46:a9: 6e:e5:64:ef:d4:31:61:02:44:d2:c7:cc:8f:48:c5:bf:a6:bc: 10:ce:1c:74:11:32:38:6c:ff:a4:22:cb:17:d8:3b:16:21:59: d2:49:ed:c9:a1:5f:75:e6:52:5f:e5:0a:c8:df:f8:b3:34:61: 1e:44:7d:44:5d:a9:5c:4d:f9:f2:82:1a:33:67:8d:5d:15:71: 41:0d:a4:db:f9:95:58:41:2a:f9:5a:9c:34:9c:ae:06:82:4c: 88:01:b8:0f:98:0a:fe:ce:79:07:6a:29:87:05:d9:87:21:a8: f1:ed:32:9f:9f:c8:fd:f4:59:38:d0:c8:50:4c:9e:6b:47:48: 9a:15:7d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIFjQZmjAFFiyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk YWEwNWQ2YmEtMWYxZC00OTZjLWFjMGYtNDc3NDE0NWZhNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJhjpCLmL7oYpZfo9GlcgA4CcN+8iHrPrUJx JDJoAasQXOvhoicv2sfcnE40+OwD2losZIOWhpQAVdLX0aHG3z5CvBq7KRoTYwgb OWUcoMn0lO1gfPt0BD1i0iNrSeNCJvI4qDIyRNEtWvfs56h/XvSwJHn7dieyHGt7 pzuMyXYepohgbRoOZE64/VlES2212jinVxmMmCw1GjrUWskSjqVPOHvA4Dy9qS6v DlMbQuv4iroyMZK2pACARAUV8WVM/ukez0dwTJrKLbJlgZ+NwqlIX+IMTrC5mvjU 3fdQyKhfucxPWtSNcWrRe91D57wgG76OCmoG+++CIQ0qo8PUwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIdpr29nV0N8KD+1ogVKJD5s7iaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg4ZDdmMDYtM2ZmNS0z NDk1LThiYjctNWUzMjllZDgxZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFewVaEMW7Ujede8uxo7o+UrkNuXLyQjERFGldlZ1KKi8p8MBzXKIfbM Gll6tz5/qQbAhcF8eRyKQFyO0XYReOxkA2m4xaY6ZDy6GqNnHz2uaG57Nzrkk7yt ZE4K+Hkzm9m6eXMhTU2jKP8sqztbjlQrq4q7ksOgcEkqjrRGqW7lZO/UMWECRNLH zI9Ixb+mvBDOHHQRMjhs/6QiyxfYOxYhWdJJ7cmhX3XmUl/lCsjf+LM0YR5EfURd qVxN+fKCGjNnjV0VcUENpNv5lVhBKvlanDScrgaCTIgBuA+YCv7OeQdqKYcF2Ych qPHtMp+fyP30WTjQyFBMnmtHSJoVfYY= -----END CERTIFICATE-----Generated at Tue Jul 21 21:45:02 2026 by rpki-client