$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17a36e8f-c7af-360b-9482-0ecfe8394655.roa File: 17a36e8f-c7af-360b-9482-0ecfe8394655.roa (raw, json) Hash identifier: zuta5DdkBuhnv3HDDk+KTyWCSbgm75+clAuAFWh6riM= Subject key identifier: BB:A0:95:F6:2D:FC:C2:B0:B8:C7:08:0E:7E:A3:0A:4C:F5:9C:D5:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9D4A7E1057B42F131DBDC0A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17a36e8f-c7af-360b-9482-0ecfe8394655.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.43.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:7e:10:57:b4:2f:13:1d:bd:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=6e000c2e-c9e8-456e-9399-73d007b851c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:33:e0:80:34:c2:83:10:2b:14:db:29:76:3d: 0b:96:60:07:d3:f7:f5:11:64:33:c5:e3:8a:9f:5a: 79:52:f8:fb:37:81:d9:54:97:14:fe:ff:50:ce:1f: bb:12:2d:47:f4:2b:07:da:77:ef:ad:e7:db:bd:6b: f7:7b:4b:51:59:07:3e:12:b9:6e:d8:8d:d1:ae:a5: 79:37:5c:70:d1:13:11:53:69:0d:0e:9e:63:ad:e2: 9b:64:27:68:58:b5:ce:77:43:cb:ec:0c:cf:21:49: fd:26:c9:95:c7:83:99:24:4d:db:75:e9:d4:46:4b: 1c:d1:f9:16:a6:95:71:ed:b7:df:8f:78:b5:0e:79: 8e:24:42:b0:44:53:1e:d0:0e:a6:7f:da:f8:79:86: 14:ba:a9:ad:38:3e:31:38:48:f1:96:49:9e:48:5a: 84:d7:2a:a6:f4:d2:70:f7:20:e4:72:f8:e5:51:31: 97:5f:6e:93:eb:24:1f:9e:4d:0f:84:ad:c2:21:ae: e1:58:f7:44:80:a2:66:f4:62:8a:ff:56:4b:b3:fa: f1:a5:12:2b:84:25:3b:7b:1f:fa:6d:21:cf:df:50: e7:32:17:21:f7:d4:ff:2e:f5:56:19:31:ec:6e:e3: 44:94:82:4a:75:28:86:90:6d:0a:6e:6c:bd:48:04: a6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A0:95:F6:2D:FC:C2:B0:B8:C7:08:0E:7E:A3:0A:4C:F5:9C:D5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17a36e8f-c7af-360b-9482-0ecfe8394655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:13:b8:b4:da:ab:79:a5:b4:b7:3d:4d:f1:f2:77:e2:3f:68: 31:5f:51:7e:08:89:1f:d9:fd:eb:d1:94:43:be:ca:5d:94:3c: e9:e0:54:ec:08:62:ec:bf:11:f5:03:ef:b2:2c:3c:3c:f8:0d: 55:71:8e:1f:1e:b5:02:ae:d2:14:06:8a:24:69:72:fa:11:b2: fd:ad:33:fa:ab:68:25:79:4e:34:77:89:1c:02:0c:d4:77:8d: 7c:9c:b4:4b:79:6b:50:a0:ce:ef:3d:d5:c6:b2:a4:90:1f:7a: a9:41:58:9d:75:74:0f:46:51:8f:29:4f:cb:9e:8f:33:4d:1f: 93:cd:2e:65:59:14:62:1f:a4:29:63:37:bd:a1:f3:de:2a:c3: ad:51:fa:eb:42:08:ea:1f:0e:fc:a4:79:76:ab:38:cd:bb:48: dc:44:b1:98:63:e1:68:9a:ca:cf:fc:40:8a:2c:33:cf:ef:05: 51:50:67:f6:c4:b8:f8:9d:1e:2e:79:fc:98:d8:8f:ad:28:f3: a1:ac:71:4b:16:1c:e6:2e:65:0b:92:f9:1d:33:c5:67:3d:e0: ba:ce:89:54:b8:be:83:93:55:cb:79:5f:76:f3:f9:a9:90:54: 83:2a:b5:a8:d8:de:18:28:34:25:71:4a:8c:1a:b2:09:3f:bd: af:c5:ac:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSn4QV7QvEx29wKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NmUwMDBjMmUtYzllOC00NTZlLTkzOTktNzNkMDA3Yjg1MWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDPggDTCgxArFNspdj0LlmAH0/f1EWQzxeOK n1p5Uvj7N4HZVJcU/v9Qzh+7Ei1H9CsH2nfvrefbvWv3e0tRWQc+Erlu2I3RrqV5 N1xw0RMRU2kNDp5jreKbZCdoWLXOd0PL7AzPIUn9JsmVx4OZJE3bdenURksc0fkW ppVx7bffj3i1DnmOJEKwRFMe0A6mf9r4eYYUuqmtOD4xOEjxlkmeSFqE1yqm9NJw 9yDkcvjlUTGXX26T6yQfnk0PhK3CIa7hWPdEgKJm9GKK/1ZLs/rxpRIrhCU7ex/6 bSHP31DnMhch99T/LvVWGTHsbuNElIJKdSiGkG0Kbmy9SASmowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuglfYt/MKwuMcIDn6jCkz1nNUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdhMzZlOGYtYzdhZi0z NjBiLTk0ODItMGVjZmU4Mzk0NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFytlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADATuLTaq3mltLc9TfHyd+I/aDFfUX4IiR/Z/evRlEO+yl2UPOngVOwI Yuy/EfUD77IsPDz4DVVxjh8etQKu0hQGiiRpcvoRsv2tM/qraCV5TjR3iRwCDNR3 jXyctEt5a1Cgzu891caypJAfeqlBWJ11dA9GUY8pT8uejzNNH5PNLmVZFGIfpClj N72h894qw61R+utCCOofDvykeXarOM27SNxEsZhj4Wiays/8QIosM8/vBVFQZ/bE uPidHi55/JjYj60o86GscUsWHOYuZQuS+R0zxWc94LrOiVS4voOTVct5X3bz+amQ VIMqtajY3hgoNCVxSowasgk/va/FrP0= -----END CERTIFICATE-----Generated at Wed Jul 29 06:47:23 2026 by rpki-client