$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de20a32-80c9-3be8-8ab2-3d86138b7492.roa File: 4de20a32-80c9-3be8-8ab2-3d86138b7492.roa (raw, json) Hash identifier: 75h2vNK/cHHXWxrwBVhthuJqE/PIaqW/ylEf9rEyNlM= Subject key identifier: AE:D5:EB:A6:1D:4D:1F:17:CC:67:E6:52:A8:60:5E:51:62:28:98:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE52418808DA3A63ADAFC60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de20a32-80c9-3be8-8ab2-3d86138b7492.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.41.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:24:18:80:8d:a3:a6:3a:da:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=93a65833-af55-4085-bd30-c5b75ea5dbf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:41:d8:a0:5a:6b:63:a8:2e:da:16:eb:65: be:7b:b9:5b:26:0f:c5:a3:f6:73:e6:30:d3:b6:aa: 08:12:3a:4c:74:68:d7:2e:40:ff:6f:92:35:36:6b: 62:68:f7:35:d1:7a:ba:20:3e:33:0b:33:18:f7:a1: d9:24:72:14:ca:fb:5d:0a:65:8f:f2:4b:4e:a9:9c: fc:c9:84:0b:44:80:c7:32:a2:7a:58:d3:fc:7b:b2: bc:08:f2:61:d4:27:3c:da:76:0f:03:fa:6b:83:a5: d2:68:60:52:07:3c:94:ac:c0:af:31:11:4b:ae:be: 09:0e:0d:3b:74:2c:6d:d4:b4:2f:75:52:29:66:c5: c1:7a:51:4a:56:ff:f8:52:ea:c6:56:d0:fd:e8:d2: e7:69:b3:49:39:e5:f6:79:42:5b:f6:72:86:b3:49: 15:49:ac:09:4e:b4:6d:3e:02:56:a7:4d:77:a7:e1: f7:ed:81:d4:97:7c:a4:5a:50:32:5d:cb:b0:9a:cf: 27:ad:74:e1:19:59:b7:a6:dc:98:05:83:e0:67:75: 50:df:19:58:d7:3b:7c:a2:7f:be:7e:2b:b0:12:06: 83:0a:9c:8a:4f:2f:c4:d4:b4:bf:e0:e6:ac:c6:90: c3:59:9f:75:f0:13:08:15:14:e2:27:77:fb:df:cf: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D5:EB:A6:1D:4D:1F:17:CC:67:E6:52:A8:60:5E:51:62:28:98:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de20a32-80c9-3be8-8ab2-3d86138b7492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:68:be:e8:dc:cc:12:7d:cc:a1:ae:3d:6b:bf:e0:fe:7d:f5: f3:1f:7d:ea:12:78:58:da:d0:99:f2:18:6d:a1:df:ff:22:d5: cc:34:86:71:33:de:f6:6b:5c:bd:30:a4:8a:c0:16:62:21:b1: 65:40:b2:f2:c7:f4:fb:a3:b4:ab:83:04:d1:14:74:72:62:fa: 56:14:78:eb:86:5b:0c:9b:60:66:fe:8c:e2:ff:60:bd:1f:78: 20:f6:3b:6d:85:d3:d8:34:af:09:83:7b:3c:6f:7b:17:a0:14: 0a:8c:34:56:b2:2f:4a:8d:1b:03:0b:71:4f:fd:ff:39:e2:14: 7c:c8:dd:94:5a:88:90:58:cf:af:bb:66:54:5a:01:f0:b2:12: f6:8c:43:78:e2:c0:14:50:9a:88:21:77:d0:a3:2a:58:45:1b: 67:3f:01:cd:43:b9:a6:0c:a9:48:b0:70:7d:3c:53:8a:66:19: 13:b2:03:f8:f0:a0:c7:55:09:87:a0:59:ea:e9:c4:b4:71:9a: 80:be:71:97:b1:6e:2a:d0:cf:56:0e:c6:5b:c8:f0:bf:86:89: ab:09:37:df:8c:6f:2b:28:de:ba:eb:b8:74:26:86:54:b2:66: 49:e4:ec:0c:03:73:13:35:e5:79:18:96:20:99:15:a2:da:16: 5f:4c:3a:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SQYgI2jpjra/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk OTNhNjU4MzMtYWY1NS00MDg1LWJkMzAtYzViNzVlYTVkYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfVB2KBaa2OoLtoW62W+e7lbJg/Fo/Zz5jDT tqoIEjpMdGjXLkD/b5I1NmtiaPc10Xq6ID4zCzMY96HZJHIUyvtdCmWP8ktOqZz8 yYQLRIDHMqJ6WNP8e7K8CPJh1Cc82nYPA/prg6XSaGBSBzyUrMCvMRFLrr4JDg07 dCxt1LQvdVIpZsXBelFKVv/4UurGVtD96NLnabNJOeX2eUJb9nKGs0kVSawJTrRt PgJWp013p+H37YHUl3ykWlAyXcuwms8nrXThGVm3ptyYBYPgZ3VQ3xlY1zt8on++ fiuwEgaDCpyKTy/E1LS/4OasxpDDWZ918BMIFRTiJ3f7388BTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7V66YdTR8XzGfmUqhgXlFiKJhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRlMjBhMzItODBjOS0z YmU4LThhYjItM2Q4NjEzOGI3NDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFymgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhovujczBJ9zKGuPWu/4P599fMffeoSeFja0JnyGG2h3/8i1cw0hnEz 3vZrXL0wpIrAFmIhsWVAsvLH9PujtKuDBNEUdHJi+lYUeOuGWwybYGb+jOL/YL0f eCD2O22F09g0rwmDezxvexegFAqMNFayL0qNGwMLcU/9/zniFHzI3ZRaiJBYz6+7 ZlRaAfCyEvaMQ3jiwBRQmoghd9CjKlhFG2c/Ac1DuaYMqUiwcH08U4pmGROyA/jw oMdVCYegWerpxLRxmoC+cZexbirQz1YOxlvI8L+GiasJN9+Mbyso3rrruHQmhlSy Zknk7AwDcxM15XkYliCZFaLaFl9MOn8= -----END CERTIFICATE-----Generated at Wed Jul 29 07:32:19 2026 by rpki-client