$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ff234a5-2ecc-382c-87d1-76329628aaee.roa File: 3ff234a5-2ecc-382c-87d1-76329628aaee.roa (raw, json) Hash identifier: KCiIsB8LuvQFuatQp/Ss+Mex1ZtZhqrBvAWyWG17r5Q= Subject key identifier: A4:70:57:DA:99:4D:1D:2D:28:12:A8:67:B6:48:FD:A8:EE:48:4C:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE520EAD2D4F14A9661C640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ff234a5-2ecc-382c-87d1-76329628aaee.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.38.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:20:ea:d2:d4:f1:4a:96:61:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=044342b9-d241-406f-b839-a495a4940cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9b:a1:c6:91:c0:11:df:9d:6b:5a:92:52:84: fd:a7:da:4c:aa:85:cc:1c:13:ad:71:eb:83:07:41: 62:e3:fc:b3:e7:90:48:92:74:01:cf:ce:65:7a:da: be:1b:bd:6e:d3:46:de:09:0c:c6:e2:13:b9:eb:c5: e1:e1:63:fa:eb:39:b0:2a:97:0f:57:74:75:4f:ea: 9b:6b:2e:4f:b1:15:a3:69:fe:93:8b:51:7f:85:1f: e4:4f:2f:e4:ed:ee:02:00:28:75:68:58:1d:d3:29: 5e:13:2e:c4:47:2b:3e:04:82:56:21:7d:61:85:a2: 74:2e:dd:cf:bd:01:ae:58:b5:e0:98:3e:8e:ec:c9: db:41:5f:75:eb:e1:a3:93:eb:41:2b:83:b9:df:ba: 45:ae:5e:c9:16:af:66:13:5b:1c:06:52:d7:f7:a4: 1d:b3:35:f2:3e:27:f6:c6:a9:06:0b:4b:34:27:35: 3e:71:e9:8d:44:dc:7d:f9:0d:b6:a4:a8:e4:f1:21: 43:bb:9b:cf:69:a8:86:51:e8:7c:38:7f:c3:ba:fd: ec:02:37:80:90:27:f8:43:32:a6:34:40:eb:8f:66: 04:d8:cd:13:92:bb:71:a0:03:af:db:83:c8:a1:25: 5e:36:87:86:ac:4e:d3:84:64:b3:bc:7d:33:52:b3: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:70:57:DA:99:4D:1D:2D:28:12:A8:67:B6:48:FD:A8:EE:48:4C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ff234a5-2ecc-382c-87d1-76329628aaee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:be:9a:19:7b:43:20:ad:e3:90:6b:c4:75:fa:06:3e:18:b5: 92:c6:97:f0:11:c0:ec:a1:6a:4c:25:95:9b:aa:bc:35:a2:59: e1:a4:84:5a:fc:8f:fe:34:5b:84:ed:cf:a3:f8:74:fa:84:3e: 8f:b8:9f:09:cf:3c:e4:26:27:5d:1b:3c:78:0f:9a:48:79:5e: 58:5e:02:da:03:dd:7e:8d:3c:06:aa:69:1b:02:4b:40:2f:93: 40:e1:ee:28:82:2d:39:7c:d7:98:aa:8c:91:d8:12:c5:95:9d: a9:27:3e:a2:a6:cf:3a:04:9b:35:6a:04:03:4d:f7:69:66:c7: ea:75:3f:1c:07:1f:88:ac:d7:b8:86:b5:f9:9d:e4:13:6b:bc: b9:e3:91:fa:9e:96:41:e7:d5:34:cd:93:87:a5:76:3c:fb:cd: d8:1c:22:56:4b:4e:30:54:18:20:10:48:c3:02:97:68:0c:71: fe:e5:cf:69:5d:d5:45:2a:91:9e:2f:af:1d:b0:fb:56:8a:e7: c3:73:20:b1:5a:fc:f5:b6:4a:47:19:1b:ff:8b:3e:16:08:98: 27:21:5d:37:fc:d9:2d:57:8f:9e:7a:80:fe:10:4b:85:c7:84: 6e:2e:3e:cc:11:48:c8:16:39:eb:fc:57:8c:69:f9:16:33:5f: dd:96:e5:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SDq0tTxSpZhxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk MDQ0MzQyYjktZDI0MS00MDZmLWI4MzktYTQ5NWE0OTQwY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5uhxpHAEd+da1qSUoT9p9pMqoXMHBOtceuD B0Fi4/yz55BIknQBz85letq+G71u00beCQzG4hO568Xh4WP66zmwKpcPV3R1T+qb ay5PsRWjaf6Ti1F/hR/kTy/k7e4CACh1aFgd0yleEy7ERys+BIJWIX1hhaJ0Lt3P vQGuWLXgmD6O7MnbQV916+Gjk+tBK4O537pFrl7JFq9mE1scBlLX96QdszXyPif2 xqkGC0s0JzU+cemNRNx9+Q22pKjk8SFDu5vPaaiGUeh8OH/Duv3sAjeAkCf4QzKm NEDrj2YE2M0TkrtxoAOv24PIoSVeNoeGrE7ThGSzvH0zUrNIiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRwV9qZTR0tKBKoZ7ZI/ajuSEwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZmMjM0YTUtMmVjYy0z ODJjLTg3ZDEtNzYzMjk2MjhhYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG++mhl7QyCt45BrxHX6Bj4YtZLGl/ARwOyhakwllZuqvDWiWeGkhFr8 j/40W4Ttz6P4dPqEPo+4nwnPPOQmJ10bPHgPmkh5XlheAtoD3X6NPAaqaRsCS0Av k0Dh7iiCLTl815iqjJHYEsWVnaknPqKmzzoEmzVqBANN92lmx+p1PxwHH4is17iG tfmd5BNrvLnjkfqelkHn1TTNk4eldjz7zdgcIlZLTjBUGCAQSMMCl2gMcf7lz2ld 1UUqkZ4vrx2w+1aK58NzILFa/PW2SkcZG/+LPhYImCchXTf82S1Xj556gP4QS4XH hG4uPswRSMgWOev8V4xp+RYzX92W5fw= -----END CERTIFICATE-----Generated at Tue Jul 28 18:39:58 2026 by rpki-client