$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa File: 5fd12087-5523-3229-876f-88f686d794a9.roa (raw, json) Hash identifier: WS2YUfNoA6yTzhyGnFWeANHEGGBkHXtykX3QZkAK7lQ= Subject key identifier: 81:C9:66:F3:9C:EE:8C:B1:E4:F7:D5:DD:62:65:A0:C8:84:43:01:20 Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Certificate serial: 010D0C9F4328584EA7889A25C505CE092B49CB80 Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32507 IP address blocks: 23.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:9a:25:c5:05:ce:09:2b:49:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7bf74572-cb50-464e-9127-561fb4e13e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:cd:c2:fc:bd:28:28:54:8d:cf:b7:06:4b: 65:00:59:68:d6:1d:4d:95:f0:08:88:ed:0f:88:17: bf:61:a9:ac:2f:41:ba:a3:10:ea:a9:1f:97:29:e7: 13:a0:bc:71:cd:db:8b:33:f3:1f:c6:7e:71:11:fc: da:9d:0c:2b:31:4a:78:9e:a6:8e:2a:8b:9e:82:52: b3:a8:a2:3b:78:15:a8:bf:82:61:96:25:17:15:ab: 06:6d:94:4a:6b:e1:21:8a:d9:03:ee:fb:c4:38:09: 4d:ee:8f:af:00:b9:ae:0a:99:b6:e5:7e:69:ed:3c: 8e:cd:6a:cd:c3:67:6d:59:66:6f:ce:96:4d:2d:5d: d6:72:4c:de:63:09:bd:9d:e1:5b:2b:a0:7a:f3:f7: cb:a1:2d:3e:7b:7e:09:1e:38:de:b3:e2:24:b0:c3: 03:ab:1a:70:f2:66:ae:ef:d6:41:60:8f:64:85:11: 1d:a5:3d:b8:7f:30:9e:40:eb:21:d3:48:8d:1c:ee: 7f:19:bc:35:5d:d3:96:22:e4:86:df:9e:a4:cb:4a: b2:f2:00:c1:60:49:a0:f6:d7:31:e1:84:83:25:01: 69:5d:b8:a4:a0:1d:8b:be:5c:1f:f9:7c:b7:d6:df: 01:77:dd:a2:5d:b8:08:08:aa:bf:5e:92:3e:6c:53: bc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C9:66:F3:9C:EE:8C:B1:E4:F7:D5:DD:62:65:A0:C8:84:43:01:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl X509v3 Authority Key Identifier: keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer sbgp-ipAddrBlock: critical IPv4: 23.186.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:2b:a3:c8:ef:ed:c9:2a:19:56:5a:90:b5:f9:c2:2f:41:34: 2a:5c:10:90:19:8f:32:68:1c:4a:47:8b:a4:86:d5:0c:06:4e: bc:72:16:42:2a:49:b5:20:88:e9:23:71:d0:b9:a2:ff:b1:e8: fd:a1:c0:bb:dc:65:44:16:a7:87:4e:71:e6:4b:8c:e3:e7:15: 6d:41:4c:6c:48:8d:d3:88:6f:04:30:26:af:1d:c1:76:8c:49: c6:73:4c:d5:b7:5a:c3:16:6c:76:e2:6e:05:fb:4a:ef:6c:da: 52:f0:c6:df:50:44:df:8f:a4:7c:0c:57:7c:67:fc:9a:2f:a3: fd:44:f6:f3:5e:fc:6f:c5:e8:d0:1e:87:80:2d:08:fd:c2:15: 41:c5:3e:e7:c9:3f:37:d9:f8:7d:0d:33:72:38:39:91:43:d6: 7e:c4:ab:50:27:ec:92:88:8a:e1:1d:ad:74:32:5c:c3:67:dc: e1:4f:d6:e3:a6:3a:48:fd:9b:81:3e:24:d6:14:bb:3f:34:8b: 02:f0:52:e0:6a:23:36:2f:e8:46:43:0f:f6:39:d9:4a:cf:2c: 3d:a2:57:2c:b2:89:d2:82:b7:fb:03:f9:41:90:9f:7d:ea:9d: ea:51:95:ec:ad:f0:6f:d8:86:a1:87:56:6d:65:cc:7e:b7:0a: 08:ab:2c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJolxQXOCStJy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5 N2RhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2JmNzQ1NzItY2I1MC00NjRlLTkxMjctNTYxZmI0ZTEzZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPjNwvy9KChUjc+3BktlAFlo1h1NlfAIiO0P iBe/YamsL0G6oxDqqR+XKecToLxxzduLM/Mfxn5xEfzanQwrMUp4nqaOKoueglKz qKI7eBWov4JhliUXFasGbZRKa+EhitkD7vvEOAlN7o+vALmuCpm25X5p7TyOzWrN w2dtWWZvzpZNLV3WckzeYwm9neFbK6B68/fLoS0+e34JHjjes+IksMMDqxpw8mau 79ZBYI9khREdpT24fzCeQOsh00iNHO5/Gbw1XdOWIuSG356ky0qy8gDBYEmg9tcx 4YSDJQFpXbikoB2Lvlwf+Xy31t8Bd92iXbgICKq/XpI+bFO8pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHJZvOc7oyx5PfV3WJloMiEQwEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvNWZkMTIwODctNTUyMy0z MjI5LTg3NmYtODhmNjg2ZDc5NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy MGFhYTk3ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8ro8jv7ckqGVZakLX5wi9BNCpcEJAZjzJoHEpHi6SG1QwGTrxyFkIq SbUgiOkjcdC5ov+x6P2hwLvcZUQWp4dOceZLjOPnFW1BTGxIjdOIbwQwJq8dwXaM ScZzTNW3WsMWbHbibgX7Su9s2lLwxt9QRN+PpHwMV3xn/Jovo/1E9vNe/G/F6NAe h4AtCP3CFUHFPufJPzfZ+H0NM3I4OZFD1n7Eq1An7JKIiuEdrXQyXMNn3OFP1uOm Okj9m4E+JNYUuz80iwLwUuBqIzYv6EZDD/Y52UrPLD2iVyyyidKCt/sD+UGQn33q nepRleyt8G/YhqGHVm1lzH63CgirLDE= -----END CERTIFICATE-----Generated at Wed Jul 29 14:08:57 2026 by rpki-client