$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cefc5c7-bd2c-31df-b07b-ab07d6b17240.roa File: 4cefc5c7-bd2c-31df-b07b-ab07d6b17240.roa (raw, json) Hash identifier: UCxzcifk+dwxDcQqv9wC+pT9KL5IqMkjFPrwkE5ufys= Subject key identifier: 43:75:AA:53:B3:B4:A7:2A:E9:35:DC:15:A7:A8:E8:68:C7:47:45:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA5AA7E15638C8BBB4C47ED80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cefc5c7-bd2c-31df-b07b-ab07d6b17240.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.52.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:7e:15:63:8c:8b:bb:4c:47:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=3d624807-1a70-4162-bbdb-2821234f6e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:d6:d1:44:09:b7:ef:0a:bc:e7:d3:b0:fd: 2f:53:8a:9f:4f:62:7b:bd:b5:3a:8d:f2:54:cf:22: 36:60:a8:53:a1:e0:d9:12:82:e0:0b:f7:5a:fc:4c: 0e:21:bf:5e:ad:d6:b4:0d:60:7a:d0:57:e5:68:b8: c0:aa:52:76:b7:01:19:df:42:cc:7c:49:db:e3:2c: a1:4d:6a:99:bb:78:eb:41:2d:a9:57:d0:21:0b:1f: 0c:5d:c5:a0:9c:5f:d8:5a:c9:07:74:6f:ee:41:f7: 03:8d:c7:69:6c:94:24:4e:9a:c5:c5:b0:f0:9e:bb: af:fb:14:ef:33:53:b5:a0:50:23:91:3f:b4:35:65: be:74:0e:f6:f1:85:2b:86:9d:f6:f8:0e:e5:08:93: 65:6d:5d:34:e1:bc:c1:47:af:73:78:2a:34:c5:aa: 95:b7:1a:f5:48:2e:0d:63:a3:bd:9f:63:44:6a:0c: 0a:fa:ac:d5:43:1a:3e:bf:1f:b5:42:c7:fd:0d:59: 19:bb:52:34:ae:0c:81:bc:cb:0e:35:22:e6:df:7d: e9:d9:40:d7:42:b3:10:91:f1:1b:75:35:6e:02:fa: be:30:35:19:f2:46:5a:57:6b:06:ef:c6:86:90:7d: 69:8e:b5:e5:93:61:fd:04:65:54:03:d6:0f:39:4b: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:75:AA:53:B3:B4:A7:2A:E9:35:DC:15:A7:A8:E8:68:C7:47:45:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cefc5c7-bd2c-31df-b07b-ab07d6b17240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f8:88:17:62:c7:8b:b5:4c:37:a4:2c:9f:60:03:6b:19:4c: 52:81:35:f7:22:fb:d5:e8:04:f4:b3:39:35:4c:c9:dd:19:4f: bd:70:29:db:13:8c:0f:d8:8d:f9:86:0f:24:85:b7:ab:04:74: 72:89:8d:65:b4:e2:ab:d1:b2:93:91:8e:7a:71:0b:e3:ea:d4: e6:64:69:ba:7b:88:6c:77:46:c2:7d:c5:b7:8a:6b:9a:c5:79: 2a:a8:4b:96:41:c1:01:c6:c8:c0:81:ed:02:fa:b6:14:9a:7e: 9f:ac:4c:77:9a:25:67:e3:ab:c5:38:0c:1c:22:5d:ee:a5:ce: 10:f3:7a:e2:e6:fb:1f:47:e1:5f:8c:33:f6:ef:60:56:4b:d4: a9:83:2a:33:91:33:f6:3c:e7:cc:46:60:16:c1:91:84:2e:24: c2:33:3d:13:fb:c0:c2:3e:21:bb:95:6e:82:e8:b1:30:b2:44: b8:4f:ed:de:f9:66:8c:2e:0e:d9:3c:f4:de:78:c1:ef:2c:ee: 6b:4f:a0:c0:ae:15:84:5c:ba:3f:65:e4:fc:9a:2c:d1:89:47: 09:2e:c0:2e:24:e0:42:5c:e2:7c:9f:1f:ff:a5:9f:bf:64:eb: ea:f5:60:0e:8c:7e:43:c3:3d:fe:fb:b7:49:46:e3:95:5e:22: ee:7a:32:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqn4VY4yLu0xH7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk M2Q2MjQ4MDctMWE3MC00MTYyLWJiZGItMjgyMTIzNGY2ZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+7W0UQJt+8KvOfTsP0vU4qfT2J7vbU6jfJU zyI2YKhToeDZEoLgC/da/EwOIb9erda0DWB60FflaLjAqlJ2twEZ30LMfEnb4yyh TWqZu3jrQS2pV9AhCx8MXcWgnF/YWskHdG/uQfcDjcdpbJQkTprFxbDwnruv+xTv M1O1oFAjkT+0NWW+dA728YUrhp32+A7lCJNlbV004bzBR69zeCo0xaqVtxr1SC4N Y6O9n2NEagwK+qzVQxo+vx+1Qsf9DVkZu1I0rgyBvMsONSLm333p2UDXQrMQkfEb dTVuAvq+MDUZ8kZaV2sG78aGkH1pjrXlk2H9BGVUA9YPOUu1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN1qlOztKcq6TXcFaeo6GjHR0VOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNlZmM1YzctYmQyYy0z MWRmLWIwN2ItYWIwN2Q2YjE3MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn4iBdix4u1TDekLJ9gA2sZTFKBNfci+9XoBPSzOTVMyd0ZT71wKdsT jA/YjfmGDySFt6sEdHKJjWW04qvRspORjnpxC+Pq1OZkabp7iGx3RsJ9xbeKa5rF eSqoS5ZBwQHGyMCB7QL6thSafp+sTHeaJWfjq8U4DBwiXe6lzhDzeuLm+x9H4V+M M/bvYFZL1KmDKjORM/Y858xGYBbBkYQuJMIzPRP7wMI+IbuVboLosTCyRLhP7d75 ZowuDtk89N54we8s7mtPoMCuFYRcuj9l5PyaLNGJRwkuwC4k4EJc4nyfH/+ln79k 6+r1YA6MfkPDPf77t0lG45VeIu56Mnc= -----END CERTIFICATE-----Generated at Wed Jul 29 04:44:27 2026 by rpki-client