$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/220397e6-5dd0-3ece-bba7-455d005a6bad.roa File: 220397e6-5dd0-3ece-bba7-455d005a6bad.roa (raw, json) Hash identifier: NUCQ+7ievzp/9Am5V9NZb9zmD/0RHh+L6pcfD6x9MRU= Subject key identifier: BE:4E:E6:20:C9:C8:0C:A6:A5:49:C8:54:25:9F:19:F7:39:71:29:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE527B671E96A79B69D5B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/220397e6-5dd0-3ece-bba7-455d005a6bad.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.36.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:27:b6:71:e9:6a:79:b6:9d:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=49bbcbb3-6498-4bed-9a7c-56f47b4cb428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d6:0e:f8:32:13:22:97:36:4d:5c:0b:53:38: b8:99:8b:72:5d:f6:d8:b1:e2:ee:f4:46:2b:9c:7b: 84:f7:1c:29:c8:4e:ca:ba:cb:11:08:8d:b4:f2:bd: ff:f3:5f:59:da:40:c0:8b:4b:39:9f:88:97:84:5c: 9a:03:67:9b:7e:8e:13:2c:09:11:29:d7:4a:a2:f4: 2c:8b:b5:9c:ce:b8:03:a6:37:78:f2:a7:f6:ac:68: 61:5a:07:9e:14:4c:32:c2:b5:64:a8:de:d1:1c:cc: 40:2a:21:ef:48:33:38:01:a8:f3:89:f0:fd:5f:c2: 33:7f:d9:dc:d8:0e:06:88:8b:43:bd:a1:95:f3:3c: 03:df:74:20:2a:9c:4b:ca:9b:7d:1f:89:bb:9c:2d: 83:f5:e4:ce:a6:03:ff:3b:68:e4:f9:f5:1d:0a:be: 9f:6b:09:6a:c7:96:1c:0d:45:0a:5b:65:5b:11:69: 8f:a7:61:84:27:60:5f:08:76:c8:38:06:49:06:17: d2:d6:2e:1a:27:a6:53:51:63:26:4b:8a:19:cd:32: 6b:56:0c:64:42:f9:66:0d:2f:be:46:29:9f:f8:8b: c9:11:9a:66:71:81:e1:d0:c5:eb:36:b1:f8:e0:58: 2a:13:5f:88:7e:92:24:8e:f5:7b:d8:5d:00:03:65: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4E:E6:20:C9:C8:0C:A6:A5:49:C8:54:25:9F:19:F7:39:71:29:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/220397e6-5dd0-3ece-bba7-455d005a6bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9d:92:7d:d0:f3:18:d8:ab:a7:69:b5:38:78:5b:79:6c:98: 30:42:9c:51:60:87:31:b1:16:85:d3:ba:0a:cb:15:d3:e3:37: 49:be:a0:b3:de:65:da:c0:1a:74:2d:0e:8f:1b:ea:02:9c:71: d1:70:66:4f:b6:a0:3e:c6:36:e7:e5:1d:08:5f:4f:fa:f9:2c: ed:19:d2:ba:5f:e6:9f:7f:85:2c:24:29:90:ff:06:89:1c:5a: b6:da:6a:c3:dc:b4:87:d3:5b:e2:1f:bb:dd:dd:4c:fd:d2:86: 05:18:fb:64:d6:ff:1b:9d:fa:34:75:58:5d:86:d5:c1:34:6d: 7c:7a:b7:04:0f:3d:6a:31:42:75:4b:31:aa:2b:1d:dd:f4:a5: f4:0c:b4:4d:f2:9b:cb:8a:dc:e5:e6:87:9e:22:df:7d:79:b8: 02:06:e4:66:00:c1:1e:17:25:3d:0e:6f:e8:f5:d3:69:c2:d5: 62:eb:d5:93:fc:7f:f7:5f:2a:ee:6f:66:76:85:41:ce:ef:9f: b6:aa:6f:6e:b5:aa:aa:69:15:83:0d:8a:84:e9:fc:0e:43:74: 74:7f:58:32:a4:0f:6f:c9:6e:60:d3:82:58:20:62:a7:a4:4d: f2:82:a0:83:b9:1e:1f:e4:0f:31:53:0d:a8:d2:cf:1c:16:0d: 79:81:f0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Se2celqebadWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NDliYmNiYjMtNjQ5OC00YmVkLTlhN2MtNTZmNDdiNGNiNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtYO+DITIpc2TVwLUzi4mYtyXfbYseLu9EYr nHuE9xwpyE7KussRCI208r3/819Z2kDAi0s5n4iXhFyaA2ebfo4TLAkRKddKovQs i7WczrgDpjd48qf2rGhhWgeeFEwywrVkqN7RHMxAKiHvSDM4AajzifD9X8Izf9nc 2A4GiItDvaGV8zwD33QgKpxLypt9H4m7nC2D9eTOpgP/O2jk+fUdCr6fawlqx5Yc DUUKW2VbEWmPp2GEJ2BfCHbIOAZJBhfS1i4aJ6ZTUWMmS4oZzTJrVgxkQvlmDS++ Rimf+IvJEZpmcYHh0MXrNrH44FgqE1+IfpIkjvV72F0AA2XLQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5O5iDJyAympUnIVCWfGfc5cSmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjIwMzk3ZTYtNWRkMC0z ZWNlLWJiYTctNDU1ZDAwNWE2YmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmdkn3Q8xjYq6dptTh4W3lsmDBCnFFghzGxFoXTugrLFdPjN0m+oLPe ZdrAGnQtDo8b6gKccdFwZk+2oD7GNuflHQhfT/r5LO0Z0rpf5p9/hSwkKZD/Bokc WrbaasPctIfTW+Ifu93dTP3ShgUY+2TW/xud+jR1WF2G1cE0bXx6twQPPWoxQnVL MaorHd30pfQMtE3ym8uK3OXmh54i3315uAIG5GYAwR4XJT0Ob+j102nC1WLr1ZP8 f/dfKu5vZnaFQc7vn7aqb261qqppFYMNioTp/A5DdHR/WDKkD2/JbmDTglggYqek TfKCoIO5Hh/kDzFTDajSzxwWDXmB8Go= -----END CERTIFICATE-----Generated at Tue Jul 28 18:37:07 2026 by rpki-client