$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c739af8-0791-31ec-be57-15774a7a8615.roa File: 3c739af8-0791-31ec-be57-15774a7a8615.roa (raw, json) Hash identifier: ZrxOcsIiDDZqHkRoCpXylOTkygU6udSM8Y8KcV9fK1g= Subject key identifier: CE:F5:D4:E2:61:DA:24:8A:FA:5D:95:49:33:72:4C:46:76:F8:2D:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9D4A9E8B13DE9687ADFD8138 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c739af8-0791-31ec-be57-15774a7a8615.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.43.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:9e:8b:13:de:96:87:ad:fd:81:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=aa29b392-578c-417c-892b-e4f4d99b353f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:18:cf:72:45:e1:e9:2b:83:5d:26:ad:93:91: d1:ee:12:24:69:bb:1d:9e:27:bd:ea:1b:86:13:ad: e6:38:bc:90:15:d5:b0:26:c4:03:10:08:8e:5b:ae: 7e:32:6d:96:df:ba:06:a2:31:74:83:79:72:46:b4: eb:be:29:64:49:04:41:de:da:c0:87:32:6a:d9:db: 1e:be:60:f2:e9:c4:d6:be:24:29:43:35:02:84:c9: ff:12:19:f9:37:a4:ab:6b:8f:7d:76:a0:11:fe:75: b0:aa:90:50:be:00:91:73:cf:42:ee:7a:70:3c:74: 7f:44:b5:fe:08:48:49:54:f8:1b:b5:4a:d6:99:c5: 68:d9:20:da:01:f1:4f:d3:02:97:47:6f:33:ed:45: 8d:79:7a:e4:1c:b0:51:5a:e4:8c:55:41:2f:62:50: 4d:20:e5:5f:f2:a7:ed:30:61:42:cf:c5:bf:37:35: a5:85:52:05:1f:eb:46:3d:39:b4:6d:3d:1a:c8:f7: 89:2f:64:40:f7:78:fe:05:8d:3e:db:ff:77:f7:3a: fd:c5:8f:d3:48:df:78:4c:d5:97:ce:50:03:32:f0: e1:44:d4:bb:89:0e:fa:92:80:52:8a:19:1c:a9:dd: be:a4:15:2f:b6:50:5c:b4:92:d3:04:84:1f:14:0f: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F5:D4:E2:61:DA:24:8A:FA:5D:95:49:33:72:4C:46:76:F8:2D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c739af8-0791-31ec-be57-15774a7a8615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:59:01:95:ce:fb:9e:2c:ab:a0:4e:85:94:38:47:63:65:bd: 41:ba:94:49:16:ca:6c:b0:86:fb:ac:f3:64:a6:87:0d:ba:b3: 1a:55:aa:18:86:0d:3e:c6:bd:3e:92:47:46:f8:ac:46:a4:55: b5:19:d1:34:ea:2d:ac:64:8e:fb:88:1c:42:9d:93:a0:7e:d5: 21:fc:95:67:b0:6c:bb:f0:f0:5b:6d:c9:0c:81:c8:0b:87:70: da:26:91:2b:40:f9:bd:04:a7:a0:4c:51:fe:6b:55:d0:26:c3: 7e:af:3a:0c:1c:ec:77:59:13:fd:fa:20:ee:c5:77:ce:fd:1f: 60:40:ac:ee:95:f7:0a:c3:f1:37:0a:37:05:9a:5a:9a:72:14: 24:7f:3c:ea:7e:54:58:ab:37:88:bd:ad:3f:c9:2a:61:53:6e: dc:87:db:08:3f:9d:51:ea:bf:33:25:c0:0e:4b:8c:0b:c2:49: d6:fb:2e:5d:30:ff:8a:7b:b0:27:d6:d1:21:35:00:2e:4b:d9: 42:f2:08:c9:e5:25:c2:ee:6f:16:6a:0c:9c:5a:59:25:a6:06: f1:2d:5c:24:2e:73:e1:4c:15:74:fd:11:c2:8e:a6:ea:d0:a0: 54:b5:d5:73:ef:fd:d9:37:51:f9:d9:69:cb:45:18:96:a9:3b: 69:70:8e:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSp6LE96Wh639gTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk YWEyOWIzOTItNTc4Yy00MTdjLTg5MmItZTRmNGQ5OWIzNTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRjPckXh6SuDXSatk5HR7hIkabsdnie96huG E63mOLyQFdWwJsQDEAiOW65+Mm2W37oGojF0g3lyRrTrvilkSQRB3trAhzJq2dse vmDy6cTWviQpQzUChMn/Ehn5N6Sra499dqAR/nWwqpBQvgCRc89C7npwPHR/RLX+ CEhJVPgbtUrWmcVo2SDaAfFP0wKXR28z7UWNeXrkHLBRWuSMVUEvYlBNIOVf8qft MGFCz8W/NzWlhVIFH+tGPTm0bT0ayPeJL2RA93j+BY0+2/939zr9xY/TSN94TNWX zlADMvDhRNS7iQ76koBSihkcqd2+pBUvtlBctJLTBIQfFA9yxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM711OJh2iSK+l2VSTNyTEZ2+C3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2M3MzlhZjgtMDc5MS0z MWVjLWJlNTctMTU3NzRhN2E4NjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyuhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdZAZXO+54sq6BOhZQ4R2NlvUG6lEkWymywhvus82Smhw26sxpVqhiG DT7GvT6SR0b4rEakVbUZ0TTqLaxkjvuIHEKdk6B+1SH8lWewbLvw8FttyQyByAuH cNomkStA+b0Ep6BMUf5rVdAmw36vOgwc7HdZE/36IO7Fd879H2BArO6V9wrD8TcK NwWaWppyFCR/POp+VFirN4i9rT/JKmFTbtyH2wg/nVHqvzMlwA5LjAvCSdb7Ll0w /4p7sCfW0SE1AC5L2ULyCMnlJcLubxZqDJxaWSWmBvEtXCQuc+FMFXT9EcKOpurQ oFS11XPv/dk3UfnZactFGJapO2lwjsk= -----END CERTIFICATE-----Generated at Wed Jul 29 03:02:25 2026 by rpki-client