$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fe473b0-d4ab-3b64-90c0-694b6582300c.roa File: 0fe473b0-d4ab-3b64-90c0-694b6582300c.roa (raw, json) Hash identifier: 7etoy1gpJt+cjewDPP77aJs5EdXG7P8QPVxoGh51bQo= Subject key identifier: 96:92:53:BD:EE:43:49:E3:89:7D:FF:71:1E:8E:44:75:4F:B3:0A:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE5225D9D230FB3183C0440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fe473b0-d4ab-3b64-90c0-694b6582300c.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.39.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:22:5d:9d:23:0f:b3:18:3c:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=9473436d-b34d-43a2-a5ae-c49f280c2e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3c:9b:79:28:cd:23:ab:8b:98:58:ac:35:ac: e8:36:0e:c1:4c:0a:07:da:28:15:27:2a:db:61:93: e6:aa:34:e9:6b:90:98:2b:a5:4b:90:84:c2:18:93: 1e:25:14:7f:31:87:4a:4a:78:b6:3c:aa:bb:fd:94: f7:f1:d5:37:90:81:c5:55:54:29:4e:d1:fe:34:d4: 0a:73:9a:1c:96:59:ea:85:14:e3:df:63:c4:a6:5f: cf:73:21:be:81:b7:a1:e1:cb:a0:36:a1:91:c0:35: be:6b:af:04:98:f9:ee:34:30:86:f4:74:fd:43:f2: 19:80:24:c8:b3:a5:aa:d0:ec:ea:ed:02:03:6b:00: 85:6d:2e:63:f9:4f:4a:a2:e5:6e:b5:3e:b8:1b:e2: 05:2c:fb:9a:d9:d2:c9:87:a4:f1:0c:9f:90:a3:f7: 1a:68:0c:d4:a6:ea:1b:83:78:5d:57:1e:bf:95:96: 2b:5a:b7:f6:75:8d:93:11:50:2e:05:6f:36:6e:dd: 61:42:20:ac:bb:42:89:ab:61:10:a3:a5:81:75:58: b7:2d:d0:8d:d3:97:01:67:d9:d7:4b:79:38:84:93: 10:30:90:01:ea:02:0e:31:1c:b0:43:2a:7c:ce:e0: 9c:3d:78:71:9e:34:6c:cc:c7:95:7a:13:b6:91:cb: 93:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:92:53:BD:EE:43:49:E3:89:7D:FF:71:1E:8E:44:75:4F:B3:0A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0fe473b0-d4ab-3b64-90c0-694b6582300c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1d:3c:e8:3d:d8:a4:be:31:16:2f:3a:c2:13:8d:6d:a1:ad: 23:9f:7e:b3:c3:c3:0d:93:57:6c:be:8d:26:2e:25:0f:a4:11: a8:08:e9:e5:af:ae:65:24:0e:1e:37:76:4e:dc:42:84:14:bd: 12:ea:78:0a:eb:92:cf:23:0c:d7:9d:01:76:af:33:11:63:90: 7f:47:b1:42:7e:af:5b:cb:c8:f8:6f:08:5c:cb:14:76:d3:96: 3e:8b:c9:fe:b7:ef:10:53:a1:7c:d2:2a:5f:5d:74:68:68:34: 52:5d:c5:f6:72:48:ac:ac:91:a4:ec:d4:ef:19:bc:38:a1:c8: ae:16:ae:aa:ba:f6:7b:6f:68:e3:1f:1a:67:40:ed:2c:c9:b4: fb:be:65:15:45:0d:f3:e3:65:b6:3c:2a:ac:3e:6a:18:26:04: 50:d1:9e:d4:8d:ea:54:08:5d:9d:77:83:64:39:42:37:62:27: ef:83:10:a0:03:de:1d:e3:e7:65:b8:b5:68:15:05:57:3b:c7: de:ae:22:d9:41:45:74:83:f0:14:0c:a9:5b:b7:fd:be:af:aa: dc:de:cf:d9:0a:98:f8:52:d7:7e:90:4f:ac:01:25:18:15:a8: cb:73:6d:5a:62:7d:47:47:b2:67:48:29:0a:59:04:eb:09:29: 1c:89:b3:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SJdnSMPsxg8BEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk OTQ3MzQzNmQtYjM0ZC00M2EyLWE1YWUtYzQ5ZjI4MGMyZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTybeSjNI6uLmFisNazoNg7BTAoH2igVJyrb YZPmqjTpa5CYK6VLkITCGJMeJRR/MYdKSni2PKq7/ZT38dU3kIHFVVQpTtH+NNQK c5ocllnqhRTj32PEpl/PcyG+gbeh4cugNqGRwDW+a68EmPnuNDCG9HT9Q/IZgCTI s6Wq0Ozq7QIDawCFbS5j+U9KouVutT64G+IFLPua2dLJh6TxDJ+Qo/caaAzUpuob g3hdVx6/lZYrWrf2dY2TEVAuBW82bt1hQiCsu0KJq2EQo6WBdVi3LdCN05cBZ9nX S3k4hJMQMJAB6gIOMRywQyp8zuCcPXhxnjRszMeVehO2kcuTSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaSU73uQ0njiX3/cR6ORHVPswrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGZlNDczYjAtZDRhYi0z YjY0LTkwYzAtNjk0YjY1ODIzMDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFodPOg92KS+MRYvOsITjW2hrSOffrPDww2TV2y+jSYuJQ+kEagI6eWv rmUkDh43dk7cQoQUvRLqeArrks8jDNedAXavMxFjkH9HsUJ+r1vLyPhvCFzLFHbT lj6Lyf637xBToXzSKl9ddGhoNFJdxfZySKyskaTs1O8ZvDihyK4Wrqq69ntvaOMf GmdA7SzJtPu+ZRVFDfPjZbY8Kqw+ahgmBFDRntSN6lQIXZ13g2Q5QjdiJ++DEKAD 3h3j52W4tWgVBVc7x96uItlBRXSD8BQMqVu3/b6vqtzez9kKmPhS136QT6wBJRgV qMtzbVpifUdHsmdIKQpZBOsJKRyJs8I= -----END CERTIFICATE-----Generated at Wed Jul 29 01:35:47 2026 by rpki-client