$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af5a891-d23e-3d5c-871c-e96b49a52239.roa File: 2af5a891-d23e-3d5c-871c-e96b49a52239.roa (raw, json) Hash identifier: 1+QFKt2Ke0PwnRLocz4D/NvBF6klBXUrV07gNXZwr1Q= Subject key identifier: 9C:60:35:16:D3:5D:DB:A0:81:B1:7F:15:B6:20:06:12:CF:8B:1F:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA5AA7ECC9F3190DB4D1AAD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af5a891-d23e-3d5c-871c-e96b49a52239.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 16625 IP address blocks: 23.52.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:7e:cc:9f:31:90:db:4d:1a:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=2aeb024e-12a4-44f6-816e-9890b0c2a94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:72:42:7d:b6:15:b1:c7:f4:41:92:75:d6: b5:f7:f9:07:35:ed:2b:e4:9d:c0:7a:4e:b1:00:c6: 40:8d:96:65:c5:6a:2e:2d:90:19:1d:10:93:33:57: b4:40:c1:87:16:0d:79:da:2d:08:a9:4a:01:42:44: 2f:df:bd:41:d8:f1:49:ac:23:78:f0:71:51:59:af: 6a:0c:81:8b:8f:c2:bc:20:7a:cb:bd:1f:6e:aa:86: 86:48:08:5c:fa:7a:7d:20:b5:48:13:e5:60:d9:a5: 77:71:6d:95:4c:7b:f5:db:d2:ca:ce:3f:4f:dd:3e: 2b:21:49:51:88:b1:ae:95:7c:42:dc:c7:0c:5e:5f: 15:d2:9e:1d:c7:f5:1d:d4:5a:ce:c5:1a:89:c5:20: 52:72:5b:be:11:80:58:0e:32:2c:cd:54:1d:d7:b5: 0e:aa:9d:e7:67:72:1c:3d:d5:44:de:c4:9b:68:69: 83:37:dc:8e:46:f8:fe:87:5e:ff:d6:e8:c9:1c:5a: a6:05:ec:b8:10:47:fe:df:aa:29:d9:ec:a3:1e:5a: 5f:d6:f9:84:88:41:53:19:5d:d2:9d:c1:bf:e3:f5: 0e:f9:17:b1:72:e1:f3:73:18:f2:e1:77:aa:a6:26: 0e:73:9c:d5:df:5f:66:5d:b6:06:f4:00:7c:06:97: 1a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:60:35:16:D3:5D:DB:A0:81:B1:7F:15:B6:20:06:12:CF:8B:1F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2af5a891-d23e-3d5c-871c-e96b49a52239.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1b:c3:cf:44:f2:6b:34:3d:f3:c3:c6:b8:47:51:6e:21:49: 69:23:41:d0:94:ec:9b:7e:fb:a3:31:a4:19:e2:72:17:16:e4: cd:e3:fd:1f:23:da:23:ac:a4:54:da:3d:1d:a0:8d:13:7a:88: 5a:49:e4:92:28:49:1c:b0:da:4e:f5:e5:6e:54:d0:f1:b1:c1: f9:77:56:a6:65:44:5d:c7:ab:d0:81:b5:81:c8:0c:d0:99:02: 49:98:b7:f9:1d:38:cf:68:c5:78:7b:39:60:b2:71:01:fe:c9: 95:1c:1b:ea:30:a2:32:21:23:a6:9d:e1:df:68:69:40:b6:17: d5:67:71:0c:33:c2:cd:6b:88:88:d9:e7:bb:bf:23:78:6c:c7: 78:4c:7b:e2:f9:34:34:93:03:6f:f7:5c:fb:13:bc:35:4e:40: 4b:83:a1:64:d4:53:b3:ef:d4:46:f0:56:be:8a:e5:46:0b:89: 57:78:12:f0:86:7c:22:d4:d4:72:03:6e:24:06:39:d7:4b:6e: 77:82:73:1b:0f:cf:e3:8d:4f:85:86:a3:98:bb:50:bb:a3:ce: 7f:1e:f0:99:d8:0d:56:de:2d:62:25:37:42:d1:7f:60:c9:3a: d7:7f:8d:e9:6e:9f:d7:a5:ae:9b:27:0a:d0:58:fa:3b:c8:81: d2:f3:01:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqn7MnzGQ200arQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk MmFlYjAyNGUtMTJhNC00NGY2LTgxNmUtOTg5MGIwYzJhOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcByQn22FbHH9EGSdda19/kHNe0r5J3Aek6x AMZAjZZlxWouLZAZHRCTM1e0QMGHFg152i0IqUoBQkQv371B2PFJrCN48HFRWa9q DIGLj8K8IHrLvR9uqoaGSAhc+np9ILVIE+Vg2aV3cW2VTHv129LKzj9P3T4rIUlR iLGulXxC3McMXl8V0p4dx/Ud1FrOxRqJxSBSclu+EYBYDjIszVQd17UOqp3nZ3Ic PdVE3sSbaGmDN9yORvj+h17/1ujJHFqmBey4EEf+36op2eyjHlpf1vmEiEFTGV3S ncG/4/UO+RexcuHzcxjy4XeqpiYOc5zV319mXbYG9AB8BpcaoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxgNRbTXduggbF/FbYgBhLPix9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFmNWE4OTEtZDIzZS0z ZDVjLTg3MWMtZTk2YjQ5YTUyMjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzS8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQbw89E8ms0PfPDxrhHUW4hSWkjQdCU7Jt++6MxpBnichcW5M3j/R8j 2iOspFTaPR2gjRN6iFpJ5JIoSRyw2k715W5U0PGxwfl3VqZlRF3Hq9CBtYHIDNCZ AkmYt/kdOM9oxXh7OWCycQH+yZUcG+owojIhI6ad4d9oaUC2F9VncQwzws1riIjZ 57u/I3hsx3hMe+L5NDSTA2/3XPsTvDVOQEuDoWTUU7Pv1EbwVr6K5UYLiVd4EvCG fCLU1HIDbiQGOddLbneCcxsPz+ONT4WGo5i7ULujzn8e8JnYDVbeLWIlN0LRf2DJ Otd/jelun9elrpsnCtBY+jvIgdLzARI= -----END CERTIFICATE-----Generated at Tue Jul 28 18:34:55 2026 by rpki-client