$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa File: 5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa (raw, json) Hash identifier: w1rsvpbJ2aFwGtEhH1EYpzEEdRHAupMfl42NMIs8EIQ= Subject key identifier: A5:8F:79:BE:F5:40:20:7A:54:D5:6D:E1:8C:18:83:E8:B9:4E:AB:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE524BC3DA1D54517650B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.41.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:24:bc:3d:a1:d5:45:17:65:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=5db1e7ea-b329-4e0b-b734-9c73f4137427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:47:a3:25:2c:12:0d:08:fc:0b:69:47:cb:e5: df:28:e6:16:1e:c7:54:93:1a:4d:51:40:75:a1:15: 12:40:05:08:70:ed:a2:da:e6:89:a3:1e:7b:00:fa: c3:0e:0d:a3:d9:4a:71:31:c6:c1:76:f1:93:05:66: 1c:53:7f:37:d6:bd:f3:6c:02:e3:93:45:2a:d3:8e: b8:ee:d5:6f:bc:f8:de:ab:c5:c3:30:00:69:c5:45: 0b:cd:c7:6b:2e:fe:2e:de:ca:b8:fb:e9:d9:db:6a: 91:e8:25:12:fa:c7:53:a6:a5:31:74:bc:8a:1f:8b: 70:95:79:25:58:e1:b0:e2:f5:ec:c2:f4:c3:0a:c4: b6:56:97:7c:4f:f0:b5:33:97:99:ce:b7:06:4a:68: 81:77:69:48:6c:55:40:b7:f5:e0:e6:e6:d0:e3:ce: a2:bd:55:a0:7a:a7:d8:e3:a3:69:66:e0:b9:80:47: 1b:6a:ba:c4:3b:76:fb:8f:02:4b:d8:2a:1d:0a:d9: 86:7e:e4:91:40:e7:a5:ad:0e:9b:26:5d:36:fb:1e: 4f:16:d7:09:42:5d:a9:b2:f1:f9:ee:2c:5a:e8:72: ea:ec:69:05:f5:61:3e:9a:92:9d:72:13:41:d1:e9: 17:ec:f9:fa:ed:c7:83:9d:e3:63:90:ab:99:06:0e: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8F:79:BE:F5:40:20:7A:54:D5:6D:E1:8C:18:83:E8:B9:4E:AB:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f9:86:20:be:8f:b9:84:9c:3a:8f:5e:40:b8:19:66:a1:4e: 6e:a6:23:3b:49:76:da:4c:57:b0:97:dc:58:37:9d:cc:8a:7c: 07:54:91:b6:c4:be:1b:db:f7:69:0f:20:a2:f1:31:1f:7c:a1: f9:dc:fa:97:83:f2:8e:98:f8:35:02:73:cd:07:c5:6c:86:63: c5:83:7e:6e:79:2c:47:66:3e:18:9b:db:a2:d2:af:fe:b9:89: 8f:3f:03:37:f1:dc:31:9f:bf:60:ac:b2:54:5c:77:70:c2:86: 10:81:07:53:5b:9d:44:6a:e9:d6:f6:3d:ca:b5:1a:eb:c4:bb: fa:c5:a6:78:11:c5:5d:32:14:03:f8:01:79:14:f4:7d:fb:aa: 07:b7:8a:47:a3:f8:88:38:f0:f2:4f:3f:8e:1a:eb:57:71:07: 26:c6:97:54:0f:e1:9f:29:ac:e4:57:27:70:e5:d9:29:9a:9d: 2a:2f:1e:ba:1e:3a:36:1c:e9:2b:28:12:d0:29:64:c9:cf:3b: b3:e0:02:29:9e:93:1a:18:c1:7c:e0:42:d8:22:42:ee:34:d7: 99:b7:c4:b8:49:47:ee:88:d2:94:47:4e:bc:92:0b:ea:5e:37: be:b6:5f:83:65:25:a4:34:b5:77:21:34:49:01:1c:11:1e:bd: 80:78:7b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SS8PaHVRRdlCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NWRiMWU3ZWEtYjMyOS00ZTBiLWI3MzQtOWM3M2Y0MTM3NDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30ejJSwSDQj8C2lHy+XfKOYWHsdUkxpNUUB1 oRUSQAUIcO2i2uaJox57APrDDg2j2UpxMcbBdvGTBWYcU3831r3zbALjk0Uq0464 7tVvvPjeq8XDMABpxUULzcdrLv4u3sq4++nZ22qR6CUS+sdTpqUxdLyKH4twlXkl WOGw4vXswvTDCsS2Vpd8T/C1M5eZzrcGSmiBd2lIbFVAt/Xg5ubQ486ivVWgeqfY 46NpZuC5gEcbarrEO3b7jwJL2CodCtmGfuSRQOelrQ6bJl02+x5PFtcJQl2psvH5 7ixa6HLq7GkF9WE+mpKdchNB0ekX7Pn67ceDneNjkKuZBg5/uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWPeb71QCB6VNVt4YwYg+i5TqvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNiMTZmY2UtMzhkOC0z NDBiLWI0ZDctZTBkYzE4OTJiZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFykEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX5hiC+j7mEnDqPXkC4GWahTm6mIztJdtpMV7CX3Fg3ncyKfAdUkbbE vhvb92kPIKLxMR98ofnc+peD8o6Y+DUCc80HxWyGY8WDfm55LEdmPhib26LSr/65 iY8/Azfx3DGfv2CsslRcd3DChhCBB1NbnURq6db2Pcq1GuvEu/rFpngRxV0yFAP4 AXkU9H37qge3ikej+Ig48PJPP44a61dxBybGl1QP4Z8prORXJ3Dl2SmanSovHroe OjYc6SsoEtApZMnPO7PgAimekxoYwXzgQtgiQu4015m3xLhJR+6I0pRHTrySC+pe N762X4NlJaQ0tXchNEkBHBEevYB4e+k= -----END CERTIFICATE-----Generated at Tue Jul 28 19:46:03 2026 by rpki-client