$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/591c0e99-7f51-3086-9cdd-53880f683d70.roa File: 591c0e99-7f51-3086-9cdd-53880f683d70.roa (raw, json) Hash identifier: d0vhxOPzs4dvgw7xRgDr8TKdhEQJjNhOeeaN2C11Qj0= Subject key identifier: 84:97:EC:89:A4:15:91:CC:41:80:9B:5C:B1:27:0E:D9:C6:30:7B:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA787A52988CA1B2C8D8AA200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/591c0e99-7f51-3086-9cdd-53880f683d70.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.63.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:a5:29:88:ca:1b:2c:8d:8a:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e4ae0199-2558-434a-af2e-20289514b5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:0f:be:fc:a2:86:63:e6:84:e4:7f:1c:2c: 06:ea:99:be:97:36:54:f8:27:94:21:e7:10:7c:df: aa:c5:cf:ff:fa:3b:27:a5:1a:8c:d1:da:9f:59:aa: d2:33:ff:32:b0:93:74:0f:79:8d:36:2e:77:58:1d: ca:96:40:3b:58:3a:b0:1a:e8:be:61:8e:00:86:78: 51:68:44:c3:1d:fe:c5:77:c1:52:8e:bc:5a:07:01: 17:6c:52:e1:6e:33:89:de:55:33:f8:20:eb:e4:f5: 80:3a:62:b3:b4:d1:b2:8c:b6:bb:3c:68:60:d4:28: b2:31:10:1e:80:ac:4f:76:1b:ca:7b:f2:5c:50:d1: e0:ce:19:b6:61:0d:57:5b:8c:23:b3:98:b7:34:f3: 9e:bb:fd:dc:6c:ca:41:7d:f6:7e:4a:52:d2:d7:b4: f7:04:cf:d9:1c:38:c6:27:66:f5:4c:9d:bc:38:fe: 52:da:0f:f3:9d:de:1e:01:47:e5:a8:7a:fe:86:f5: 11:f6:32:a4:ba:27:bf:05:e9:a0:29:e8:f1:f5:72: 4a:c0:5b:b2:9c:ac:2e:95:19:6a:54:98:35:12:49: 94:4e:5c:4d:8a:43:ca:ce:cd:68:ac:87:7f:3d:51: 24:dc:dc:ff:ea:5f:ac:fd:95:3f:74:ed:61:69:4f: 89:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:97:EC:89:A4:15:91:CC:41:80:9B:5C:B1:27:0E:D9:C6:30:7B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/591c0e99-7f51-3086-9cdd-53880f683d70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:33:27:b3:07:42:97:d2:97:77:29:9d:c3:99:e6:22:f4:d8: 16:44:f3:8b:14:31:51:ce:09:15:4f:e5:b9:67:47:55:a7:fa: 35:0f:79:c8:21:e1:8f:01:f8:7a:86:3e:9b:74:45:34:81:23: d2:fb:0e:5f:03:04:f0:f8:a3:79:1d:93:57:00:b0:62:30:ae: c9:0b:7d:fe:1b:9a:0f:1f:a7:bb:42:73:8e:b8:e2:a1:cb:78: 5c:56:35:bc:df:4a:f8:33:f5:a8:fa:e0:ef:ab:2e:4c:74:3c: db:3c:1e:cb:54:71:64:7f:91:ae:10:fa:ac:47:48:04:9f:01: a1:f4:0a:8b:14:6c:5e:8f:2a:9a:af:0c:29:a1:5c:16:61:48: 29:83:92:e0:db:f3:cf:f6:61:ad:88:9d:76:8b:62:e5:02:89: e8:5e:13:d9:56:5a:13:8c:be:98:25:c4:76:bc:e6:9d:1a:d0: 84:13:bb:77:48:b9:6b:35:6a:06:59:78:fd:eb:a7:7f:ef:6b: 45:42:23:6c:13:ce:b3:5a:e9:ce:8a:f5:f8:db:3d:cf:3b:83: 6a:22:9b:e4:3f:0b:b3:5b:6d:b6:4e:c9:5a:2a:95:d7:23:7e: 72:5f:c0:45:f5:3a:d6:f5:fa:57:74:a3:53:46:75:84:af:bf: 65:24:3a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh6UpiMobLI2KogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTRhZTAxOTktMjU1OC00MzRhLWFmMmUtMjAyODk1MTRiNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlycPvvyihmPmhOR/HCwG6pm+lzZU+CeUIecQ fN+qxc//+jsnpRqM0dqfWarSM/8ysJN0D3mNNi53WB3KlkA7WDqwGui+YY4AhnhR aETDHf7Fd8FSjrxaBwEXbFLhbjOJ3lUz+CDr5PWAOmKztNGyjLa7PGhg1CiyMRAe gKxPdhvKe/JcUNHgzhm2YQ1XW4wjs5i3NPOeu/3cbMpBffZ+SlLS17T3BM/ZHDjG J2b1TJ28OP5S2g/znd4eAUflqHr+hvUR9jKkuie/BemgKejx9XJKwFuynKwulRlq VJg1EkmUTlxNikPKzs1orId/PVEk3Nz/6l+s/ZU/dO1haU+JzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISX7ImkFZHMQYCbXLEnDtnGMHuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTkxYzBlOTktN2Y1MS0z MDg2LTljZGQtNTM4ODBmNjgzZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFz9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQzJ7MHQpfSl3cpncOZ5iL02BZE84sUMVHOCRVP5blnR1Wn+jUPecgh 4Y8B+HqGPpt0RTSBI9L7Dl8DBPD4o3kdk1cAsGIwrskLff4bmg8fp7tCc4644qHL eFxWNbzfSvgz9aj64O+rLkx0PNs8HstUcWR/ka4Q+qxHSASfAaH0CosUbF6PKpqv DCmhXBZhSCmDkuDb88/2Ya2InXaLYuUCieheE9lWWhOMvpglxHa85p0a0IQTu3dI uWs1agZZeP3rp3/va0VCI2wTzrNa6c6K9fjbPc87g2oim+Q/C7NbbbZOyVoqldcj fnJfwEX1Otb1+ld0o1NGdYSvv2UkOjE= -----END CERTIFICATE-----Generated at Wed Jul 29 07:16:05 2026 by rpki-client