$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c61588-74c1-3d64-a90f-d4f275438e75.roa File: 25c61588-74c1-3d64-a90f-d4f275438e75.roa (raw, json) Hash identifier: 9tQHTVqsEU1AFFCbOsxBH5aZ7PJhLcwON8NkrhmAf1E= Subject key identifier: 2E:EA:1A:A8:6A:9D:04:2F:AA:4E:EB:34:FA:52:44:81:D2:4E:41:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE527508678945EB8915080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c61588-74c1-3d64-a90f-d4f275438e75.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.36.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:27:50:86:78:94:5e:b8:91:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=45c41c3c-4ac1-462e-b44e-c28ace3fbad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:9d:bc:e0:4e:e9:98:4b:bc:70:97:37:21: f4:ca:60:5e:e4:b3:9a:09:5d:3e:e5:27:82:ac:0b: 98:d5:1f:99:c6:fe:d2:64:90:75:33:65:f3:5f:b7: ae:cd:7b:b6:02:ee:fd:53:e0:fd:98:47:0e:de:e6: a4:32:f3:81:e2:fe:c9:5a:ea:98:97:16:25:85:e9: fe:14:33:e8:c9:ab:d4:0b:39:e5:5b:6d:c5:ae:7e: e2:1d:bc:8c:6c:4e:a8:ea:59:59:26:cd:65:09:a0: 73:57:3a:d2:57:f8:92:6c:e4:bd:f5:6d:06:1c:64: be:78:4c:79:13:77:d5:60:55:70:e4:e0:59:f6:1e: 6a:d9:d0:f2:39:6d:27:6e:13:ce:dd:a8:4d:11:49: a5:48:66:8d:2d:fb:f1:85:c6:be:75:f1:1c:92:af: 76:cc:45:00:16:73:ec:92:16:d3:66:d8:88:2d:cb: 57:e1:0b:d8:a2:38:59:67:d4:9a:b6:ed:6c:7f:4b: 38:f0:a9:93:05:4d:e4:1a:c0:db:9d:31:d5:fa:fe: ac:61:d8:44:03:10:ba:08:13:df:69:52:b1:b0:7c: ce:93:77:ba:a3:f0:fe:2e:05:0b:2c:d0:31:4c:fc: 9e:51:a2:cf:00:64:04:c2:97:e5:e0:74:3a:6a:5e: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EA:1A:A8:6A:9D:04:2F:AA:4E:EB:34:FA:52:44:81:D2:4E:41:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c61588-74c1-3d64-a90f-d4f275438e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4f:a6:1b:d8:c4:16:9a:92:83:36:bb:92:8a:ea:1b:f1:12: 82:b4:3e:ea:8d:ab:c5:03:97:77:f1:24:5d:1d:c6:de:a0:e3: 76:62:f5:04:9e:fa:f9:fe:a5:3f:33:84:5d:5d:a8:14:80:f1: 03:7d:da:48:ed:43:6f:db:51:59:9c:3e:39:a1:b2:57:be:3c: 67:fb:83:99:a9:bc:bf:89:dc:45:fe:54:87:4c:91:1a:27:b0: 0f:41:87:ec:8c:97:25:f7:97:87:0e:7b:17:15:91:b6:dc:13: cc:2a:22:44:cd:75:3b:82:30:0c:5c:a8:88:8b:14:a3:40:70: ad:24:76:6c:7b:2a:cd:98:ce:04:91:55:5e:40:49:6f:56:65: ae:21:32:82:eb:db:c4:a7:dd:bf:fc:8c:f0:db:0b:49:5b:81: 1a:c3:b8:cf:97:ea:71:65:05:41:77:6b:c9:49:8f:fc:75:65: ce:e6:46:96:4b:e7:e4:1b:80:a7:13:5a:43:64:bc:84:ae:35: b9:c3:e5:fa:3d:f7:9c:b8:2e:df:70:8a:8f:c8:3f:5b:80:d3: f8:9a:ce:b5:25:2c:40:8a:76:3c:89:53:9d:83:53:d7:cf:18: b4:69:9a:ed:49:03:d1:f8:d4:5d:84:39:da:4c:5d:4d:ea:34: 04:e1:7a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SdQhniUXriRUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NDVjNDFjM2MtNGFjMS00NjJlLWI0NGUtYzI4YWNlM2ZiYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppudvOBO6ZhLvHCXNyH0ymBe5LOaCV0+5SeC rAuY1R+Zxv7SZJB1M2XzX7euzXu2Au79U+D9mEcO3uakMvOB4v7JWuqYlxYlhen+ FDPoyavUCznlW23Frn7iHbyMbE6o6llZJs1lCaBzVzrSV/iSbOS99W0GHGS+eEx5 E3fVYFVw5OBZ9h5q2dDyOW0nbhPO3ahNEUmlSGaNLfvxhca+dfEckq92zEUAFnPs khbTZtiILctX4QvYojhZZ9Satu1sf0s48KmTBU3kGsDbnTHV+v6sYdhEAxC6CBPf aVKxsHzOk3e6o/D+LgULLNAxTPyeUaLPAGQEwpfl4HQ6al5LowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7qGqhqnQQvqk7rNPpSRIHSTkGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjVjNjE1ODgtNzRjMS0z ZDY0LWE5MGYtZDRmMjc1NDM4ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyTGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENPphvYxBaakoM2u5KK6hvxEoK0PuqNq8UDl3fxJF0dxt6g43Zi9QSe +vn+pT8zhF1dqBSA8QN92kjtQ2/bUVmcPjmhsle+PGf7g5mpvL+J3EX+VIdMkRon sA9Bh+yMlyX3l4cOexcVkbbcE8wqIkTNdTuCMAxcqIiLFKNAcK0kdmx7Ks2YzgSR VV5ASW9WZa4hMoLr28Sn3b/8jPDbC0lbgRrDuM+X6nFlBUF3a8lJj/x1Zc7mRpZL 5+QbgKcTWkNkvISuNbnD5fo995y4Lt9wio/IP1uA0/iazrUlLECKdjyJU52DU9fP GLRpmu1JA9H41F2EOdpMXU3qNATheoM= -----END CERTIFICATE-----Generated at Wed Jul 29 01:34:14 2026 by rpki-client