$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa File: cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa (raw, json) Hash identifier: Bm8mM+pqPpN26bDql/bQODxyyXwqsOQ8xDT+lt8lXx0= Subject key identifier: 4C:33:3A:71:3B:D1:91:37:1C:87:1F:72:F4:13:D7:12:9A:0A:62:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4129D21D2D3280C74D389760 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 35994 IP address blocks: 23.77.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:d2:1d:2d:32:80:c7:4d:38:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=d13bca23-d383-44e6-8d3a-e4e17e1839fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:20:9c:33:15:bf:03:90:a5:ab:d0:47:91: f6:82:a2:65:4f:12:e2:5e:7e:2e:c9:6d:5a:b7:c1: 8d:3f:2a:24:0f:19:5a:e8:6e:26:a3:0f:ff:6d:07: c6:19:d0:64:fa:5c:5c:ed:db:17:39:e5:85:ef:c7: 05:da:34:f4:23:36:95:40:9a:f2:c2:f5:62:95:95: a1:94:21:97:55:33:de:75:1c:a7:de:6d:68:4c:bd: 8f:92:73:7e:0e:10:1f:c6:9d:f3:50:67:9a:9e:60: a1:cb:e1:03:b8:1d:ba:11:ae:aa:cd:51:66:74:ff: 83:0c:54:c0:35:78:5b:b6:2b:47:e3:63:05:98:63: 33:5e:87:a0:f1:6e:cc:ec:19:93:8a:83:67:81:c0: f6:e0:ac:af:41:f2:70:8d:c2:34:06:da:b4:1d:03: e5:c9:e2:f1:30:ff:7a:e7:f7:16:eb:d2:ba:4b:53: 46:6e:bf:e3:8a:2e:55:3d:4d:fd:a8:7f:4a:a1:0f: 37:ab:de:f4:b9:3a:b3:24:be:6a:1e:86:14:ad:09: eb:a8:a3:23:50:25:fa:45:c6:68:ec:0e:74:06:5d: 6e:b2:a7:3f:09:f1:71:43:2e:0c:56:cf:2c:12:b3: bc:d5:c4:53:ad:6a:a8:30:18:fe:b4:09:0b:c4:cf: fe:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:33:3A:71:3B:D1:91:37:1C:87:1F:72:F4:13:D7:12:9A:0A:62:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.77.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c5:c2:5c:7f:0d:d2:41:6f:00:a1:6b:17:75:2d:63:eb:a0: 5e:b4:b8:57:27:8c:0c:85:0e:c9:3e:79:ee:1e:ca:8d:32:64: f2:72:eb:5d:b9:7e:73:39:6b:be:50:c6:14:b4:5a:27:11:65: c8:fb:5b:72:1c:5d:c6:a1:49:71:5e:75:00:4f:12:e0:cc:7d: 12:67:e0:48:d7:87:38:82:54:e5:75:a3:b0:5b:66:36:60:2c: d5:5c:9b:f5:3b:67:db:c2:24:82:b3:0c:0e:ad:7c:d5:cd:22: 94:8e:c8:be:92:35:fc:e2:40:7b:82:49:f1:13:bd:12:c3:9a: ac:d1:9a:42:79:cc:18:60:4f:67:f4:7c:09:9b:49:c6:84:b7: c4:6b:43:4e:0d:55:af:90:18:a4:ca:59:72:cd:ed:15:4f:84: ff:d2:fd:76:80:bd:97:4b:e8:c7:5f:24:96:70:38:df:55:a1: 8b:d6:4e:95:4a:82:02:9d:3b:ae:78:64:9e:f4:bb:fe:93:c2: 94:52:53:db:0e:8a:45:0b:59:d9:90:4c:15:06:8b:59:47:0d: f7:66:d2:d8:77:64:b2:ca:6e:8f:7b:55:b4:e8:dc:9a:5e:20: ae:eb:ce:35:ee:b6:b6:1b:48:67:51:42:77:1b:dd:f2:35:a2: 77:7f:68:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdIdLTKAx004l2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ZDEzYmNhMjMtZDM4My00NGU2LThkM2EtZTRlMTdlMTgzOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOwgnDMVvwOQpavQR5H2gqJlTxLiXn4uyW1a t8GNPyokDxla6G4mow//bQfGGdBk+lxc7dsXOeWF78cF2jT0IzaVQJrywvVilZWh lCGXVTPedRyn3m1oTL2PknN+DhAfxp3zUGeanmChy+EDuB26Ea6qzVFmdP+DDFTA NXhbtitH42MFmGMzXoeg8W7M7BmTioNngcD24KyvQfJwjcI0Btq0HQPlyeLxMP96 5/cW69K6S1NGbr/jii5VPU39qH9KoQ83q970uTqzJL5qHoYUrQnrqKMjUCX6RcZo 7A50Bl1usqc/CfFxQy4MVs8sErO81cRTrWqoMBj+tAkLxM/+qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwzOnE70ZE3HIcfcvQT1xKaCmIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2M5YmYxN2QtZWQwZC0z OTNhLTgxZWMtMWY3YTNiMjI4NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF02rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHFwlx/DdJBbwChaxd1LWProF60uFcnjAyFDsk+ee4eyo0yZPJy6125 fnM5a75QxhS0WicRZcj7W3IcXcahSXFedQBPEuDMfRJn4EjXhziCVOV1o7BbZjZg LNVcm/U7Z9vCJIKzDA6tfNXNIpSOyL6SNfziQHuCSfETvRLDmqzRmkJ5zBhgT2f0 fAmbScaEt8RrQ04NVa+QGKTKWXLN7RVPhP/S/XaAvZdL6MdfJJZwON9VoYvWTpVK ggKdO654ZJ70u/6TwpRSU9sOikULWdmQTBUGi1lHDfdm0th3ZLLKbo97VbTo3Jpe IK7rzjXutrYbSGdRQncb3fI1ond/aAQ= -----END CERTIFICATE-----Generated at Tue Jul 21 21:45:32 2026 by rpki-client