$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b70c8c9-50d0-39c8-b65e-58e3d1329b91.roa File: 5b70c8c9-50d0-39c8-b65e-58e3d1329b91.roa (raw, json) Hash identifier: 3ALtXCUMfyzB6GBRuzbWdRqIia63v6QDzBcJnYOa+bE= Subject key identifier: CE:25:BF:97:E6:35:10:1D:76:46:5E:60:39:74:8F:60:67:36:BA:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE527C1D5F6DE3AA26D7C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b70c8c9-50d0-39c8-b65e-58e3d1329b91.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.36.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:27:c1:d5:f6:de:3a:a2:6d:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=24b8aa21-76b3-43ea-b814-e855ca4f8657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:2e:3c:85:ea:59:bb:d5:40:9e:19:34:ec: fd:23:57:33:bf:e9:e6:05:06:db:c1:1e:18:f2:4f: d2:32:e8:36:10:7f:fc:67:9c:bb:f9:c4:e1:0c:f8: f3:8d:31:b7:10:1a:73:47:ca:b8:c1:b2:e6:41:f8: 65:9a:97:3c:18:04:cd:0d:71:d8:64:ea:b5:ea:b2: fe:bc:99:1a:5e:54:57:f9:17:2c:26:7d:44:52:a2: ca:d7:9b:43:7f:0a:e5:81:50:53:03:d6:fc:c2:c6: 04:bf:51:10:42:c0:c7:d1:c8:06:a7:88:1a:e4:73: 1d:3b:65:7b:44:3a:81:98:76:5c:02:dd:9f:37:71: ca:8b:c5:c7:3f:0c:4c:e5:7d:5d:50:d1:e1:ff:71: f1:ef:db:62:da:7e:1c:a4:93:8f:87:16:3c:3d:32: f8:7c:cf:3f:d3:c3:78:bf:12:f7:b9:3a:1c:9f:c5: f5:f3:e9:33:d2:66:aa:a4:81:b8:7d:43:8f:70:9e: 68:a1:97:32:71:03:95:29:00:e2:51:57:52:b5:c0: 37:65:78:f0:94:3f:e9:e7:52:2f:f9:3f:25:53:58: 11:30:ad:62:34:fd:4e:97:eb:c1:34:bf:36:36:e8: 25:38:8a:d9:f8:c2:4c:cb:05:2a:74:b0:14:14:e8: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:BF:97:E6:35:10:1D:76:46:5E:60:39:74:8F:60:67:36:BA:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b70c8c9-50d0-39c8-b65e-58e3d1329b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:8c:4c:ab:bf:84:aa:ec:9b:34:d5:50:9c:3e:9d:20:12:ab: a0:20:e1:71:b4:e3:ba:72:42:60:03:a2:40:27:df:87:40:85: 27:ee:39:7a:4a:85:97:82:9f:82:82:b2:70:c7:c0:74:f6:a3: 81:7b:3e:c8:55:a5:9d:a9:1d:fe:d0:17:06:5b:a3:27:a2:e0: 63:bf:b1:4b:9a:2e:d0:c7:4e:70:51:30:10:5d:1f:67:35:5c: d8:d8:29:a4:ce:6c:41:87:97:49:97:8b:df:a9:ff:10:ad:59: 5a:90:9e:fc:d6:92:8f:e6:27:2c:75:6b:fc:90:ad:b9:63:e6: 6d:ef:dd:5c:aa:5b:78:85:dc:ce:98:12:dc:3b:4a:cc:2c:1d: f3:b1:66:b5:eb:09:94:ce:47:e5:2e:21:ba:03:47:0b:78:0d: 37:5a:cc:9f:3b:d0:0f:c4:4f:a9:06:c4:de:13:34:11:53:29: a4:51:62:87:9a:34:0f:6e:71:92:72:64:bc:5c:a9:6d:5c:f7: 76:8e:11:e6:a3:2e:a4:0e:d6:d0:05:a7:a7:49:c5:da:76:cb: ec:7a:a2:20:01:9c:6b:5c:ae:ef:1f:5f:6b:b9:3f:62:9c:ad: e8:d7:16:0e:04:f0:4c:0e:f1:ce:d6:a0:2b:e0:d3:00:4d:39: 27:bf:5f:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SfB1fbeOqJtfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk MjRiOGFhMjEtNzZiMy00M2VhLWI4MTQtZTg1NWNhNGY4NjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH0uPIXqWbvVQJ4ZNOz9I1czv+nmBQbbwR4Y 8k/SMug2EH/8Z5y7+cThDPjzjTG3EBpzR8q4wbLmQfhlmpc8GATNDXHYZOq16rL+ vJkaXlRX+RcsJn1EUqLK15tDfwrlgVBTA9b8wsYEv1EQQsDH0cgGp4ga5HMdO2V7 RDqBmHZcAt2fN3HKi8XHPwxM5X1dUNHh/3Hx79ti2n4cpJOPhxY8PTL4fM8/08N4 vxL3uTocn8X18+kz0maqpIG4fUOPcJ5ooZcycQOVKQDiUVdStcA3ZXjwlD/p51Iv +T8lU1gRMK1iNP1Ol+vBNL82NuglOIrZ+MJMywUqdLAUFOjwFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4lv5fmNRAddkZeYDl0j2BnNrpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI3MGM4YzktNTBkMC0z OWM4LWI2NWUtNThlM2QxMzI5YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaMTKu/hKrsmzTVUJw+nSASq6Ag4XG047pyQmADokAn34dAhSfuOXpK hZeCn4KCsnDHwHT2o4F7PshVpZ2pHf7QFwZboyei4GO/sUuaLtDHTnBRMBBdH2c1 XNjYKaTObEGHl0mXi9+p/xCtWVqQnvzWko/mJyx1a/yQrblj5m3v3VyqW3iF3M6Y Etw7SswsHfOxZrXrCZTOR+UuIboDRwt4DTdazJ870A/ET6kGxN4TNBFTKaRRYoea NA9ucZJyZLxcqW1c93aOEeajLqQO1tAFp6dJxdp2y+x6oiABnGtcru8fX2u5P2Kc rejXFg4E8EwO8c7WoCvg0wBNOSe/X6E= -----END CERTIFICATE-----Generated at Tue Jul 28 22:21:48 2026 by rpki-client