$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa File: 14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa (raw, json) Hash identifier: Lmj+Kpv3FqWvCfHY0ct091nlbERP6BjtjXB2zj2Km8Y= Subject key identifier: 89:1A:E3:6B:18:AF:AC:80:82:76:75:66:5E:CC:B4:76:E4:09:9A:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE525467A03A93D547CD680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.42.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:25:46:7a:03:a9:3d:54:7c:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=04c945b3-bd22-481c-8ac7-d08616ae054d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f2:27:bc:bf:47:24:59:cb:79:68:e8:97:44: 34:7b:dd:cd:35:fa:89:cc:87:9b:c8:83:f4:ad:b4: 0f:06:5d:ed:22:dc:69:2d:83:a6:48:be:b5:ec:3f: e3:37:8e:01:ef:ae:9e:ee:2f:b7:0d:e6:1d:8b:da: 42:8d:6c:68:a4:19:cd:54:4b:5e:63:8f:76:e4:b9: cf:4b:c8:b0:dc:e6:97:1b:8a:82:d5:f5:d1:22:29: d3:1e:6e:cb:81:47:f2:82:e9:d9:20:c4:b7:c6:65: c9:e6:c7:02:0b:81:6f:f6:fb:14:1c:6f:40:13:21: 1b:31:03:39:bb:1e:34:fd:61:3c:51:c2:e9:33:56: eb:38:0d:1e:b4:95:b3:93:8f:4f:bd:02:73:0a:2c: 46:3e:46:43:0f:79:02:3d:2c:bd:7b:0e:72:ba:ce: ec:a8:19:e1:19:c5:0a:ce:e7:8f:ff:f1:dc:ff:e7: 5b:22:f3:fc:67:69:04:02:a6:76:50:3b:08:1a:35: 67:18:13:fa:97:f0:9e:d8:3a:63:83:6b:a3:e6:67: b1:58:25:81:45:21:bc:be:92:57:3a:e4:f3:03:3e: 88:fb:c1:d1:a1:9d:cf:24:2d:63:db:c5:8c:4c:37: 27:08:cd:ad:61:b1:a1:1f:f7:e9:c4:9b:94:44:c6: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1A:E3:6B:18:AF:AC:80:82:76:75:66:5E:CC:B4:76:E4:09:9A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d8:7a:ec:e0:29:65:b6:76:02:82:72:11:77:a3:5d:be:9d: 17:25:dd:1c:77:61:a6:8b:a9:23:91:17:cf:6b:9f:2b:a3:c8: 55:35:81:f7:80:8f:ee:bf:59:a0:c5:00:02:ea:68:3f:5e:4c: 70:3c:b4:71:22:ad:89:4d:0f:0f:60:af:76:02:5a:cb:64:8e: 81:7a:5b:4b:49:ff:35:28:04:53:2b:44:43:15:2d:5f:8d:38: 54:b3:20:98:0b:1d:19:e0:25:46:d2:f7:2c:2c:57:1f:7a:75: ef:b0:95:ac:d7:e8:78:c8:28:b8:1b:99:7b:ce:7c:62:84:f0: 30:04:20:c1:0e:6b:40:1f:5d:2e:d0:34:bb:e7:a3:ad:19:95: ec:cc:ff:9c:57:9a:c8:cc:ae:b6:54:2b:57:ad:df:58:ce:78: 6f:b4:fb:d3:ee:62:7b:33:85:4d:f6:6e:55:e8:95:03:45:1d: 6a:cf:2a:94:8a:44:0a:c0:fd:9f:b6:50:3c:af:f3:0b:43:ca: b1:a2:14:9a:bf:1f:ad:ba:ce:5d:19:75:ae:f3:c8:92:b7:e6: 08:4b:17:e7:e7:53:3d:ca:91:18:79:d9:a7:04:92:9b:94:a8: d2:24:31:56:8e:56:94:c2:2a:91:8c:7a:9b:7e:3d:06:3e:0a: f5:81:1b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SVGegOpPVR81oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk MDRjOTQ1YjMtYmQyMi00ODFjLThhYzctZDA4NjE2YWUwNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofInvL9HJFnLeWjol0Q0e93NNfqJzIebyIP0 rbQPBl3tItxpLYOmSL617D/jN44B766e7i+3DeYdi9pCjWxopBnNVEteY4925LnP S8iw3OaXG4qC1fXRIinTHm7LgUfygunZIMS3xmXJ5scCC4Fv9vsUHG9AEyEbMQM5 ux40/WE8UcLpM1brOA0etJWzk49PvQJzCixGPkZDD3kCPSy9ew5yus7sqBnhGcUK zueP//Hc/+dbIvP8Z2kEAqZ2UDsIGjVnGBP6l/Ce2Dpjg2uj5mexWCWBRSG8vpJX OuTzAz6I+8HRoZ3PJC1j28WMTDcnCM2tYbGhH/fpxJuURMZ71wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIka42sYr6yAgnZ1Zl7MtHbkCZpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTRkMTNlYmMtM2U2Mi0z MmM0LTllNWEtN2E5YzFmYjk1NjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArYeuzgKWW2dgKCchF3o12+nRcl3Rx3YaaLqSORF89rnyujyFU1gfeA j+6/WaDFAALqaD9eTHA8tHEirYlNDw9gr3YCWstkjoF6W0tJ/zUoBFMrREMVLV+N OFSzIJgLHRngJUbS9ywsVx96de+wlazX6HjIKLgbmXvOfGKE8DAEIMEOa0AfXS7Q NLvno60ZlezM/5xXmsjMrrZUK1et31jOeG+0+9PuYnszhU32blXolQNFHWrPKpSK RArA/Z+2UDyv8wtDyrGiFJq/H626zl0Zda7zyJK35ghLF+fnUz3KkRh52acEkpuU qNIkMVaOVpTCKpGMept+PQY+CvWBG3c= -----END CERTIFICATE-----Generated at Tue Jul 28 18:37:12 2026 by rpki-client