$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41353db1-873f-302a-8a6d-00d0922f1d5d.roa File: 41353db1-873f-302a-8a6d-00d0922f1d5d.roa (raw, json) Hash identifier: +Yp8z4nSADmkwBwRX1vkuP6p+eRzSPrPx6xPrv9gJSQ= Subject key identifier: 21:97:32:0C:CB:D1:E2:76:43:1C:E1:80:60:94:F7:C2:EF:46:9D:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9D4AA02D0C8515EAB4059060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41353db1-873f-302a-8a6d-00d0922f1d5d.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 16625 IP address blocks: 23.44.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:a0:2d:0c:85:15:ea:b4:05:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=ed77d245-f466-4843-b480-bd3ff1d5f7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bd:aa:35:35:3a:60:8c:c3:20:26:9c:57:ae: 10:34:fd:4e:21:7d:08:07:d1:c3:23:db:4c:bf:ec: 69:3b:42:c0:b5:ed:8e:1a:f3:7c:f1:5a:cb:76:48: ba:ea:81:e5:ba:9e:40:b8:7c:23:9a:7b:fb:c2:68: a6:a2:74:ae:b9:af:5c:d7:b3:0b:86:cc:55:0a:72: 5c:73:e8:dd:68:4f:ab:be:97:50:b1:75:f7:e4:94: f4:fb:15:02:d8:66:7e:f2:8e:7e:5a:89:73:0d:d4: 6b:02:39:d2:5f:95:86:bc:3f:5a:eb:aa:1b:0f:9e: 38:77:54:4a:1f:8a:01:ab:c2:a4:20:0b:3d:b2:17: 70:d9:3c:2b:ce:f8:fb:12:36:64:d4:dd:90:07:41: 12:a0:6f:be:75:27:8d:65:6c:70:25:f3:d3:8c:4f: 33:00:d5:c9:30:1d:db:c4:de:ee:a8:10:9e:48:5b: 47:7f:26:d4:12:35:6c:e3:ea:0a:e7:32:04:ad:e6: 26:bd:f8:a8:c4:21:70:b8:12:74:10:75:61:c2:89: c4:3b:90:60:01:e4:cd:0f:74:6c:cc:96:46:8c:c6: 45:7d:61:23:ca:00:79:78:58:d1:67:89:e9:4c:ee: b8:da:38:42:01:60:a6:f6:2d:5d:45:56:da:63:cd: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:97:32:0C:CB:D1:E2:76:43:1C:E1:80:60:94:F7:C2:EF:46:9D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41353db1-873f-302a-8a6d-00d0922f1d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:18:0e:3a:50:bc:4e:aa:ed:1b:99:94:01:ca:73:65:6c:e3: 39:3b:bc:69:fd:b0:17:11:2f:44:3f:ec:a5:09:d8:b5:a0:d3: 61:e9:17:bf:30:79:f5:dc:f6:83:4d:b2:df:6f:58:67:86:22: 94:c4:0b:a3:28:3c:37:7b:2d:92:c7:1b:8f:2f:8a:18:f2:68: 3c:a7:11:37:95:9e:ec:5f:77:da:8b:a5:49:cb:68:65:1f:06: a7:26:ed:6e:58:ac:c6:6a:e2:15:16:f4:25:82:98:12:0e:a4: 58:41:f5:29:c9:bb:ab:c1:49:bb:5f:40:98:24:63:79:79:73: a3:5d:09:71:a7:c7:9c:cb:77:9e:72:d0:a1:b7:d7:f7:03:7e: 65:ba:9e:e6:a0:ce:26:e0:61:7a:c0:86:cf:80:13:59:e0:ce: 10:92:27:04:1c:ba:38:dd:22:6f:10:e5:db:31:07:ce:31:47: ea:a9:94:e8:b6:fa:cf:8c:43:df:db:b1:f7:36:51:c4:db:d7: 5e:56:c6:9c:b7:07:41:70:e2:fe:28:0a:a2:80:a8:68:f0:59: 77:bc:47:86:f9:f3:ed:d5:3d:9e:e1:2c:64:1c:b7:ca:0e:4b: 06:ff:00:7f:3e:0c:23:51:5b:4e:87:27:3e:da:37:c7:48:eb: 34:64:8e:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSqAtDIUV6rQFkGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk ZWQ3N2QyNDUtZjQ2Ni00ODQzLWI0ODAtYmQzZmYxZDVmN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb2qNTU6YIzDICacV64QNP1OIX0IB9HDI9tM v+xpO0LAte2OGvN88VrLdki66oHlup5AuHwjmnv7wmimonSuua9c17MLhsxVCnJc c+jdaE+rvpdQsXX35JT0+xUC2GZ+8o5+WolzDdRrAjnSX5WGvD9a66obD544d1RK H4oBq8KkIAs9shdw2Twrzvj7EjZk1N2QB0ESoG++dSeNZWxwJfPTjE8zANXJMB3b xN7uqBCeSFtHfybUEjVs4+oK5zIEreYmvfioxCFwuBJ0EHVhwonEO5BgAeTND3Rs zJZGjMZFfWEjygB5eFjRZ4npTO642jhCAWCm9i1dRVbaY82emwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGXMgzL0eJ2QxzhgGCU98LvRp0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDEzNTNkYjEtODczZi0z MDJhLThhNmQtMDBkMDkyMmYxZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkYDjpQvE6q7RuZlAHKc2Vs4zk7vGn9sBcRL0Q/7KUJ2LWg02HpF78w efXc9oNNst9vWGeGIpTEC6MoPDd7LZLHG48vihjyaDynETeVnuxfd9qLpUnLaGUf Bqcm7W5YrMZq4hUW9CWCmBIOpFhB9SnJu6vBSbtfQJgkY3l5c6NdCXGnx5zLd55y 0KG31/cDfmW6nuagzibgYXrAhs+AE1ngzhCSJwQcujjdIm8Q5dsxB84xR+qplOi2 +s+MQ9/bsfc2UcTb115Wxpy3B0Fw4v4oCqKAqGjwWXe8R4b58+3VPZ7hLGQct8oO Swb/AH8+DCNRW06HJz7aN8dI6zRkjrM= -----END CERTIFICATE-----Generated at Tue Jul 28 18:36:42 2026 by rpki-client