$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/542fc499-d4fa-3704-a429-d5298e8dbea3.roa File: 542fc499-d4fa-3704-a429-d5298e8dbea3.roa (raw, json) Hash identifier: NqtolUXrx8rj+ph2dByumZ789p4REIGSLfqbWV221r0= Subject key identifier: CE:79:55:1E:C4:EF:9F:B2:90:B5:90:74:37:81:D1:72:1C:13:0B:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE52CF0E558FB1706762480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/542fc499-d4fa-3704-a429-d5298e8dbea3.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.42.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:2c:f0:e5:58:fb:17:06:76:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=f31357a5-94a8-4db8-a03a-7d9cf404b29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:82:44:9d:e4:45:69:df:0f:9b:96:72:70: db:0f:00:89:ed:9f:09:3f:fe:99:d5:e7:fd:53:45: d3:ff:23:53:0e:94:55:59:b9:97:8f:96:8b:8e:4b: 1a:c1:64:76:c4:ab:b1:15:a9:79:48:47:a1:08:bd: ef:63:52:62:94:1e:76:12:03:18:85:e5:75:0c:5a: 0e:3d:84:05:0b:92:e9:de:0c:90:7a:cb:ae:52:0c: 7d:2f:57:9d:52:6f:23:e1:73:d4:78:80:c5:5d:a1: a1:7c:a7:97:b6:17:19:4d:d0:e9:9f:18:99:55:17: 8a:92:72:14:d8:4a:8d:d8:85:05:89:f0:53:36:a0: 8b:81:ca:4f:30:b1:7d:3b:91:b6:d2:b9:e0:f5:1d: d3:93:54:90:ed:dc:57:19:7f:dc:31:96:ae:b7:2f: 9f:98:9e:d0:d7:a5:f6:df:09:68:6d:b8:d0:65:b3: fb:94:0c:1d:cf:fe:a9:cd:32:7d:13:76:1f:af:11: e8:12:c5:4b:49:e6:d4:be:36:2a:38:a5:c8:bf:72: 38:99:35:e3:2f:bc:96:d1:6e:bb:3b:35:b5:17:13: 57:05:a7:8a:46:1e:27:96:dd:29:ad:5c:8a:ed:72: 3e:7b:b2:d9:65:e8:66:58:58:0a:88:a0:e9:5e:33: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:79:55:1E:C4:EF:9F:B2:90:B5:90:74:37:81:D1:72:1C:13:0B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/542fc499-d4fa-3704-a429-d5298e8dbea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a6:0f:9e:e6:74:20:0b:8d:23:b0:52:7c:e1:55:90:19:94: 90:5b:a2:e5:b6:10:0a:a3:ad:22:d7:41:25:9f:48:af:28:5c: d7:e6:48:00:1a:04:d9:59:0a:3f:d9:96:42:a0:6d:78:74:7e: 8d:cf:72:c3:b7:ad:63:12:f1:4c:b4:a6:c4:0d:4f:59:7d:ee: 7f:92:b3:57:81:af:fd:94:d9:e6:31:98:33:59:78:d5:85:22: 91:86:97:4a:58:79:20:0c:2d:99:07:0f:69:7c:48:eb:99:e9: ee:7e:f9:2e:e4:10:ec:fa:fa:b4:36:83:ef:e8:c2:0c:ad:9e: f6:47:24:4d:c0:25:81:bc:7e:ee:e7:9e:e2:b3:0a:be:ad:8d: 7c:9f:88:2e:ec:b4:09:d2:38:4e:7f:c9:ac:76:11:44:0c:4c: 05:a5:9e:78:3e:04:0c:60:cc:a2:d8:fe:a6:56:6d:37:75:7b: a8:bb:1b:cd:c7:38:78:37:46:1a:9a:61:72:e6:30:c5:4a:d6: 7f:0a:f1:1d:22:48:52:06:f2:6c:38:bd:7f:4f:56:b1:e3:51: c4:27:40:0d:c7:25:7e:11:40:f4:94:85:91:67:11:f5:e2:e3: 76:4e:24:ff:a8:c6:0c:1f:37:58:af:d1:42:97:0f:3a:35:45: f6:52:7f:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Szw5Vj7FwZ2JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZjMxMzU3YTUtOTRhOC00ZGI4LWEwM2EtN2Q5Y2Y0MDRiMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/mCRJ3kRWnfD5uWcnDbDwCJ7Z8JP/6Z1ef9 U0XT/yNTDpRVWbmXj5aLjksawWR2xKuxFal5SEehCL3vY1JilB52EgMYheV1DFoO PYQFC5Lp3gyQesuuUgx9L1edUm8j4XPUeIDFXaGhfKeXthcZTdDpnxiZVReKknIU 2EqN2IUFifBTNqCLgcpPMLF9O5G20rng9R3Tk1SQ7dxXGX/cMZauty+fmJ7Q16X2 3wlobbjQZbP7lAwdz/6pzTJ9E3YfrxHoEsVLSebUvjYqOKXIv3I4mTXjL7yW0W67 OzW1FxNXBaeKRh4nlt0prVyK7XI+e7LZZehmWFgKiKDpXjPuTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM55VR7E75+ykLWQdDeB0XIcEwucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQyZmM0OTktZDRmYS0z NzA0LWE0MjktZDUyOThlOGRiZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFypwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADumD57mdCALjSOwUnzhVZAZlJBbouW2EAqjrSLXQSWfSK8oXNfmSAAa BNlZCj/ZlkKgbXh0fo3PcsO3rWMS8Uy0psQNT1l97n+Ss1eBr/2U2eYxmDNZeNWF IpGGl0pYeSAMLZkHD2l8SOuZ6e5++S7kEOz6+rQ2g+/owgytnvZHJE3AJYG8fu7n nuKzCr6tjXyfiC7stAnSOE5/yax2EUQMTAWlnng+BAxgzKLY/qZWbTd1e6i7G83H OHg3RhqaYXLmMMVK1n8K8R0iSFIG8mw4vX9PVrHjUcQnQA3HJX4RQPSUhZFnEfXi 43ZOJP+oxgwfN1iv0UKXDzo1RfZSf3Y= -----END CERTIFICATE-----Generated at Tue Jul 28 22:11:57 2026 by rpki-client