$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa File: 0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa (raw, json) Hash identifier: uomPxBhXkGhmCQpCuRKhWDoqbm2B+LYmprUca76Bh+8= Subject key identifier: C8:61:8A:E4:C7:4C:6F:F8:98:AA:30:41:13:FD:7B:50:EA:4B:5A:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE51EFA3F52D0F14B36AEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.36.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:1e:fa:3f:52:d0:f1:4b:36:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=ea5c3f94-14e4-47d6-b3b2-c30e28eba942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:66:f2:f9:41:ad:75:fb:dc:77:58:b9:0a:29: d1:fa:f3:df:90:54:31:2e:a4:f2:5f:e0:df:13:a1: 19:5d:72:0c:42:b5:d4:ea:26:39:90:48:40:b2:00: 18:18:51:29:bf:c0:5d:76:1f:37:00:4d:a7:74:f2: 1f:ea:eb:86:54:42:d4:c8:e2:f5:21:43:cc:81:fb: 57:2c:24:1b:8f:cb:28:38:58:75:8e:b0:77:50:c1: d3:b1:1c:7d:39:88:e6:dd:37:3c:9d:8a:15:d0:a7: ec:bc:2a:12:31:b6:06:8f:86:6c:bc:c6:21:c1:d6: c9:ee:94:da:1e:64:c5:53:72:99:3d:14:85:40:f3: 23:1f:49:7e:18:8d:bf:e9:d7:c3:bf:2c:10:f9:a2: 11:fb:ed:d6:53:58:09:47:b3:45:90:05:7a:87:c7: 23:8e:d8:19:8e:e2:ab:4e:ce:ed:e7:01:a8:c5:f6: 9b:9e:5d:b2:a6:24:a6:98:5a:0f:d6:4d:9c:31:b0: 27:66:c9:42:f2:de:e8:a1:f0:67:3f:21:92:14:ef: ea:0c:3f:09:46:11:ce:a2:63:62:2d:11:a0:4b:04: 5e:43:12:56:86:ee:a6:6e:a4:b2:65:77:a0:f7:e1: 88:dd:34:8a:0b:9b:ea:79:72:e1:de:b5:0f:4c:7a: 18:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:61:8A:E4:C7:4C:6F:F8:98:AA:30:41:13:FD:7B:50:EA:4B:5A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:35:54:1f:cd:41:e5:15:8e:37:3f:c1:f7:56:c3:e1:e1:eb: 87:54:58:dc:e0:99:49:d9:da:d6:e2:f9:35:36:c6:1a:b2:37: ba:ac:21:0e:f4:90:5b:19:0e:5d:36:73:65:d1:22:ca:0d:46: 86:8b:44:8d:c2:9c:91:14:e1:a9:fa:6d:f7:73:a7:17:8a:8c: 77:53:af:16:ed:5e:7a:e0:b2:db:24:50:04:81:08:af:0e:d3: ae:59:8e:44:6a:3f:aa:81:cd:5f:5d:82:3f:6b:33:b3:68:98: d5:a8:b0:c9:c2:fb:53:8c:6b:56:bc:5c:c9:5a:ff:f9:75:1a: 6d:79:3a:cb:95:83:da:83:9e:ac:2a:61:f7:10:44:2a:38:46: 89:22:5a:01:e4:de:bd:48:2f:3f:7e:8b:69:76:90:f4:d4:c4: 61:2c:8b:ed:a2:2a:f9:30:b5:14:60:17:01:6f:c9:f5:43:06: b0:b4:ef:9e:af:76:5c:f4:21:d1:40:82:f4:9d:44:b4:f7:63: d1:1d:a5:ad:23:61:76:42:ec:d1:63:73:9f:b1:38:3e:fa:fc: fb:df:bc:2a:e1:05:04:b0:92:04:9e:3b:57:41:20:51:6c:20: f0:e7:bf:93:97:6d:b8:43:e9:0a:d1:10:99:98:c2:da:09:4e: 9d:41:06:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5R76P1LQ8Us2rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZWE1YzNmOTQtMTRlNC00N2Q2LWIzYjItYzMwZTI4ZWJhOTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmby+UGtdfvcd1i5CinR+vPfkFQxLqTyX+Df E6EZXXIMQrXU6iY5kEhAsgAYGFEpv8Bddh83AE2ndPIf6uuGVELUyOL1IUPMgftX LCQbj8soOFh1jrB3UMHTsRx9OYjm3Tc8nYoV0KfsvCoSMbYGj4ZsvMYhwdbJ7pTa HmTFU3KZPRSFQPMjH0l+GI2/6dfDvywQ+aIR++3WU1gJR7NFkAV6h8cjjtgZjuKr Ts7t5wGoxfabnl2ypiSmmFoP1k2cMbAnZslC8t7oofBnPyGSFO/qDD8JRhHOomNi LRGgSwReQxJWhu6mbqSyZXeg9+GI3TSKC5vqeXLh3rUPTHoYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhhiuTHTG/4mKowQRP9e1DqS1qzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDg0OWUxYzQtZjljYy0z ODM2LThiMmEtNWU4NjdjMjk1ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA1VB/NQeUVjjc/wfdWw+Hh64dUWNzgmUnZ2tbi+TU2xhqyN7qsIQ70 kFsZDl02c2XRIsoNRoaLRI3CnJEU4an6bfdzpxeKjHdTrxbtXnrgstskUASBCK8O 065ZjkRqP6qBzV9dgj9rM7NomNWosMnC+1OMa1a8XMla//l1Gm15OsuVg9qDnqwq YfcQRCo4RokiWgHk3r1ILz9+i2l2kPTUxGEsi+2iKvkwtRRgFwFvyfVDBrC0756v dlz0IdFAgvSdRLT3Y9Edpa0jYXZC7NFjc5+xOD76/PvfvCrhBQSwkgSeO1dBIFFs IPDnv5OXbbhD6QrREJmYwtoJTp1BBiY= -----END CERTIFICATE-----Generated at Wed Jul 29 07:14:56 2026 by rpki-client