$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f08e0db-6cbe-386a-b09a-85d9f79d6d60.roa File: 3f08e0db-6cbe-386a-b09a-85d9f79d6d60.roa (raw, json) Hash identifier: r3pKX4odG/l+S0Wfk2gktaK5HgqWnCrgcQikVvJWDMw= Subject key identifier: 85:52:D7:D1:02:9E:F4:9C:F8:E1:98:9D:44:A1:0B:D9:7F:54:94:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE520C8B0DC33E4BEEEC080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f08e0db-6cbe-386a-b09a-85d9f79d6d60.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.38.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:20:c8:b0:dc:33:e4:be:ee:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=397c69af-78ef-42ce-919c-a1a963323cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:2a:87:84:33:a6:ec:b3:03:0f:a4:0c:98: 28:3b:eb:0e:15:85:7f:ef:4d:65:40:51:03:7c:dd: 5a:0c:11:e4:36:31:c6:58:e8:ca:24:63:64:89:36: 84:62:22:14:7f:b7:dd:28:64:5a:42:b5:18:1f:9e: ed:8c:29:f1:70:0e:3c:54:dc:d4:be:b0:4b:35:ef: dc:73:d2:74:ca:5e:6d:4c:4e:b6:63:fd:69:46:3c: 72:a2:29:7e:ad:ac:cd:e1:4e:af:77:0d:a9:c9:a3: 24:ca:52:aa:11:66:4a:f1:5f:fc:62:eb:71:ee:18: 6e:17:2a:65:fa:66:e3:20:db:2d:b3:d4:59:77:31: a5:6b:d6:fd:45:6e:75:9a:72:ee:79:a1:1c:df:3d: 68:7c:b8:17:0e:12:b9:4f:e7:ea:f6:1b:33:88:da: 1d:3e:56:4f:95:13:d4:7e:5e:5c:24:26:9f:db:6b: 3c:49:8a:d8:be:17:0c:86:a3:eb:73:c5:ec:2f:c6: c0:6d:07:b9:97:2c:59:3b:f8:29:26:fa:fa:65:1e: 63:66:26:b3:18:e5:43:da:3a:cc:8f:96:46:a5:fc: 65:c5:3a:dc:c2:dc:36:c8:52:b9:e1:1f:d0:68:9b: 62:71:58:a8:07:53:4a:2f:d3:9c:f0:34:d6:11:02: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:52:D7:D1:02:9E:F4:9C:F8:E1:98:9D:44:A1:0B:D9:7F:54:94:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f08e0db-6cbe-386a-b09a-85d9f79d6d60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8c:7a:81:29:c9:1d:4b:8f:0a:4a:89:f1:fb:29:c7:1a:fd: 8c:89:b7:ea:33:61:6c:70:82:01:ab:30:d3:ee:cb:a3:cf:94: c2:60:c7:c7:d9:af:2d:a4:82:e2:76:73:12:dc:c2:ca:24:1a: 00:06:03:6c:df:45:8a:9b:88:36:17:a7:f0:dd:c9:48:f4:fc: 43:65:87:5e:17:52:cd:56:83:78:5f:b9:4f:ee:5f:b9:f4:36: fd:18:44:a5:e2:ee:4b:1e:b9:19:38:8b:93:c9:70:2b:ba:90: 69:35:bc:68:18:d7:f2:4a:ae:bf:27:31:48:8c:06:2f:29:86: a8:bc:62:4b:9e:25:5f:95:94:81:dd:28:44:82:ff:da:cc:32: f6:96:49:2a:ae:18:52:de:8b:ba:97:2f:b7:a3:19:01:e7:90: 80:b4:95:21:e5:aa:41:20:d2:35:8f:77:c1:0d:a8:e8:35:1c: d6:62:c1:97:bc:40:c0:13:66:84:89:b6:07:ef:63:23:70:5c: 1c:9b:fd:7a:18:7f:d1:20:35:b8:8c:64:26:9b:15:60:2e:46: 6c:a6:6d:01:00:d3:0d:ed:97:5c:86:30:ff:85:69:53:3f:d5: ef:fb:56:b9:43:c6:ec:25:97:89:a9:68:15:73:c0:e5:d1:90: 5b:00:d6:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SDIsNwz5L7uwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk Mzk3YzY5YWYtNzhlZi00MmNlLTkxOWMtYTFhOTYzMzIzY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygUqh4QzpuyzAw+kDJgoO+sOFYV/701lQFED fN1aDBHkNjHGWOjKJGNkiTaEYiIUf7fdKGRaQrUYH57tjCnxcA48VNzUvrBLNe/c c9J0yl5tTE62Y/1pRjxyoil+razN4U6vdw2pyaMkylKqEWZK8V/8Yutx7hhuFypl +mbjINsts9RZdzGla9b9RW51mnLueaEc3z1ofLgXDhK5T+fq9hsziNodPlZPlRPU fl5cJCaf22s8SYrYvhcMhqPrc8XsL8bAbQe5lyxZO/gpJvr6ZR5jZiazGOVD2jrM j5ZGpfxlxTrcwtw2yFK54R/QaJticVioB1NKL9Oc8DTWEQIbbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVS19ECnvSc+OGYnUShC9l/VJQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YwOGUwZGItNmNiZS0z ODZhLWIwOWEtODVkOWY3OWQ2ZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeMeoEpyR1LjwpKifH7Kcca/YyJt+ozYWxwggGrMNPuy6PPlMJgx8fZ ry2kguJ2cxLcwsokGgAGA2zfRYqbiDYXp/DdyUj0/ENlh14XUs1Wg3hfuU/uX7n0 Nv0YRKXi7kseuRk4i5PJcCu6kGk1vGgY1/JKrr8nMUiMBi8phqi8YkueJV+VlIHd KESC/9rMMvaWSSquGFLei7qXL7ejGQHnkIC0lSHlqkEg0jWPd8ENqOg1HNZiwZe8 QMATZoSJtgfvYyNwXByb/XoYf9EgNbiMZCabFWAuRmymbQEA0w3tl1yGMP+FaVM/ 1e/7VrlDxuwll4mpaBVzwOXRkFsA1uk= -----END CERTIFICATE-----Generated at Tue Jul 28 18:36:09 2026 by rpki-client