$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e7e4ac-53f5-3cb9-8c09-e50f8a464529.roa File: 23e7e4ac-53f5-3cb9-8c09-e50f8a464529.roa (raw, json) Hash identifier: ry/13RleludVrkwI39oR3oStzv7z1yXzih4N15hhVdU= Subject key identifier: 4F:15:53:88:4F:B0:41:81:2A:A8:C4:27:08:AB:3A:49:B3:95:BB:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE51FCAF44BD4AC34CD4480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e7e4ac-53f5-3cb9-8c09-e50f8a464529.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.37.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:1f:ca:f4:4b:d4:ac:34:cd:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=0a27430c-12ad-4c36-8d6a-650f6361c5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:da:b6:b4:47:41:fa:15:51:18:49:1c:0a:60: 49:fa:eb:92:61:94:fa:dd:57:01:44:75:7d:3c:3c: 54:5e:dc:51:8b:51:7e:6e:bd:64:59:33:42:62:9a: ba:80:65:a9:32:23:e8:cf:26:ed:42:35:3f:5f:7f: 36:0d:a0:db:9e:70:dc:d7:29:b8:f8:3e:fc:86:e3: f2:2a:00:be:07:56:37:c7:26:67:96:0d:6b:9f:65: 91:8a:d1:2b:00:d7:57:e3:5f:81:60:31:ce:69:9d: f6:de:cf:23:6e:0a:ed:82:db:8e:3c:c0:8a:a5:be: 9b:ec:27:fb:77:2f:5d:7b:2e:45:59:50:80:58:56: 33:ad:b2:c7:79:f5:02:2f:f3:14:0d:b5:7d:3f:d5: ca:b3:f4:3c:88:b4:98:c5:55:28:15:c7:8b:16:01: fc:1b:e0:f0:32:e9:ca:b3:90:3e:14:c6:8f:c4:49: 0c:98:cc:7e:f6:e7:bc:a5:96:38:da:47:ce:20:3d: 4e:86:c2:d2:b8:39:2f:08:ca:84:21:c5:74:d0:fe: 98:bc:96:3c:9a:ed:57:0b:b4:4d:33:ab:e3:c9:f9: b4:e4:f7:25:22:45:14:4a:64:eb:c6:3a:84:f0:c5: 41:33:19:51:e9:f2:3b:9b:0e:de:2b:ba:30:b9:40: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:15:53:88:4F:B0:41:81:2A:A8:C4:27:08:AB:3A:49:B3:95:BB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e7e4ac-53f5-3cb9-8c09-e50f8a464529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:97:ba:ba:0f:a2:a8:60:e4:bb:a7:b5:c5:59:a7:f2:c5:c5: 4e:c4:0d:8b:ff:66:1d:f7:0b:a0:ee:aa:a1:bc:db:73:92:cf: f6:97:93:e5:ff:ff:8d:f8:ea:4f:8a:d6:aa:1b:62:fc:43:79: 44:87:6c:ca:7e:7b:b9:1c:54:dc:ae:da:73:4a:0d:0a:ee:22: e2:64:81:b5:72:41:37:35:14:36:c4:41:f0:30:93:ad:59:67: 36:01:ae:af:66:50:03:28:45:4a:c8:d0:0b:3b:f7:9c:bc:be: 4e:50:a8:0f:3a:e3:76:28:c7:66:58:2d:40:a7:b5:a5:29:4e: 71:8c:d5:0b:7b:cb:bc:c3:94:fc:a6:47:95:cb:38:33:3d:c5: cc:dd:79:d1:f4:49:49:58:98:e4:88:ba:cb:26:2f:6d:24:32: ca:87:3d:37:40:8f:85:1f:b9:bd:82:b1:e1:38:07:33:ef:f6: ff:bd:ea:2e:c4:76:01:b7:01:0a:b3:9e:7d:fa:98:60:9a:0f: 5e:32:cb:b3:49:1c:04:06:5c:78:05:79:31:76:6a:88:fc:80: b2:44:78:77:b6:94:25:4e:9a:7c:7a:35:0e:62:83:ad:a9:c4: 46:d8:90:31:d4:64:54:df:3d:81:3c:e0:b1:87:fd:b9:7b:9e: 25:f4:ff:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5R/K9EvUrDTNRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk MGEyNzQzMGMtMTJhZC00YzM2LThkNmEtNjUwZjYzNjFjNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNq2tEdB+hVRGEkcCmBJ+uuSYZT63VcBRHV9 PDxUXtxRi1F+br1kWTNCYpq6gGWpMiPozybtQjU/X382DaDbnnDc1ym4+D78huPy KgC+B1Y3xyZnlg1rn2WRitErANdX41+BYDHOaZ323s8jbgrtgtuOPMCKpb6b7Cf7 dy9dey5FWVCAWFYzrbLHefUCL/MUDbV9P9XKs/Q8iLSYxVUoFceLFgH8G+DwMunK s5A+FMaPxEkMmMx+9ue8pZY42kfOID1OhsLSuDkvCMqEIcV00P6YvJY8mu1XC7RN M6vjyfm05PclIkUUSmTrxjqE8MVBMxlR6fI7mw7eK7owuUAMWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8VU4hPsEGBKqjEJwirOkmzlbuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlN2U0YWMtNTNmNS0z Y2I5LThjMDktZTUwZjhhNDY0NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKXuroPoqhg5LuntcVZp/LFxU7EDYv/Zh33C6DuqqG823OSz/aXk+X/ /4346k+K1qobYvxDeUSHbMp+e7kcVNyu2nNKDQruIuJkgbVyQTc1FDbEQfAwk61Z ZzYBrq9mUAMoRUrI0As795y8vk5QqA8643Yox2ZYLUCntaUpTnGM1Qt7y7zDlPym R5XLODM9xczdedH0SUlYmOSIussmL20kMsqHPTdAj4Ufub2CseE4BzPv9v+96i7E dgG3AQqznn36mGCaD14yy7NJHAQGXHgFeTF2aoj8gLJEeHe2lCVOmnx6NQ5ig62p xEbYkDHUZFTfPYE84LGH/bl7niX0/5c= -----END CERTIFICATE-----Generated at Tue Jul 28 20:55:48 2026 by rpki-client