$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f50ed89-5fd2-3b18-87d6-2fdd6cff9f6b.roa File: 8f50ed89-5fd2-3b18-87d6-2fdd6cff9f6b.roa (raw, json) Hash identifier: 8AWZLrRfTYXscmu1ZqTcZ+mljeX2FRkEJoWIKGiAzPs= Subject key identifier: 4F:D1:C6:D3:A8:DD:9E:FB:D2:00:3D:C7:23:65:DD:FA:F3:E9:C9:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA79838E8506E8B327A6A5F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f50ed89-5fd2-3b18-87d6-2fdd6cff9f6b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.204.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:38:e8:50:6e:8b:32:7a:6a:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=068a65ac-d847-4ef0-a0ad-89cbe913aeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:83:70:3f:ea:28:af:c3:8d:f0:15:de:0d: bf:fe:1f:f5:9b:93:c8:6b:f1:9a:32:87:3d:7c:42: b3:cf:8e:0d:26:f4:07:c9:d9:ce:a0:9f:13:f1:da: e6:b2:52:be:1f:69:d8:7c:fa:8f:ce:ce:ea:21:22: 9c:4d:ba:f6:fe:06:50:24:31:95:c2:6d:fe:d4:af: ba:76:1d:09:ec:2f:c6:f6:c5:a9:b5:3d:75:88:11: 7c:11:39:65:4d:4c:b1:65:b4:2d:f2:3e:7f:d0:7d: 1e:76:c1:04:5e:a8:3d:5c:6c:ab:9c:8f:0b:38:5e: 50:10:09:50:53:56:d1:f8:6b:8d:01:fd:e3:f7:1e: 1b:b4:25:53:ab:c0:e8:7f:e8:25:7b:93:76:88:0b: 7a:fe:fe:64:d5:42:ae:3e:ed:c0:6d:66:05:e5:02: 25:cd:83:80:12:62:b8:24:27:d2:c6:56:16:7d:55: dc:c8:e2:05:af:1a:16:87:aa:8e:ee:0c:61:19:8f: ce:70:b8:68:a1:54:c7:4e:f7:80:a8:25:0e:0b:c0: 1b:ae:6f:6d:0a:cd:e0:1f:ba:a3:5a:73:3f:e9:e7: 89:61:47:55:55:f8:f3:b6:b6:5d:17:88:40:76:c8: b0:c8:6f:50:09:5c:39:eb:08:0e:27:f3:31:5e:50: f1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D1:C6:D3:A8:DD:9E:FB:D2:00:3D:C7:23:65:DD:FA:F3:E9:C9:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f50ed89-5fd2-3b18-87d6-2fdd6cff9f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:cf:59:f3:10:f0:16:c7:7e:75:a4:9a:ff:fb:8f:b5:b5:c2: b8:77:13:1e:22:bc:84:48:3d:a5:a1:35:da:99:ce:93:2d:d7: f1:58:26:f9:9c:6a:74:f7:ab:8e:75:8d:23:6e:1a:5a:ec:c9: fb:bd:41:f2:dc:fc:89:4f:ff:ab:1b:7b:1d:39:5a:68:af:fb: e5:33:20:fe:57:0c:4a:ab:24:ad:66:e4:e2:08:38:68:23:50: c2:45:72:fc:61:52:05:ab:62:47:3e:b6:86:60:a2:df:8e:1c: ca:1f:4c:1d:b6:17:61:5e:fb:cd:15:09:77:42:b0:70:d0:05: c1:fe:8a:e3:83:1d:f8:a1:bf:88:d2:f0:7c:16:26:21:15:5a: b6:32:7c:1f:e1:7c:ec:a6:51:3d:f5:89:5d:a9:ff:61:43:85: 0b:93:6c:7a:a5:10:2d:b9:4c:de:64:d7:ed:48:2f:c6:80:89: 6a:a0:4b:39:cb:7b:76:aa:34:10:29:50:89:1b:07:50:7b:05: 29:09:85:9a:f5:fa:19:15:11:ca:ce:06:c2:66:d4:c8:f8:63: 18:0c:eb:14:19:02:a7:7d:68:25:98:c6:eb:0b:0a:22:8a:01: 44:d5:87:a6:2f:96:72:3b:a6:8a:fb:b0:02:40:b0:45:9e:e8: e3:3e:b8:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmDjoUG6LMnpqXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDY4YTY1YWMtZDg0Ny00ZWYwLWEwYWQtODljYmU5MTNhZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDaDcD/qKK/DjfAV3g2//h/1m5PIa/GaMoc9 fEKzz44NJvQHydnOoJ8T8drmslK+H2nYfPqPzs7qISKcTbr2/gZQJDGVwm3+1K+6 dh0J7C/G9sWptT11iBF8ETllTUyxZbQt8j5/0H0edsEEXqg9XGyrnI8LOF5QEAlQ U1bR+GuNAf3j9x4btCVTq8Dof+gle5N2iAt6/v5k1UKuPu3AbWYF5QIlzYOAEmK4 JCfSxlYWfVXcyOIFrxoWh6qO7gxhGY/OcLhooVTHTveAqCUOC8Abrm9tCs3gH7qj WnM/6eeJYUdVVfjztrZdF4hAdsiwyG9QCVw56wgOJ/MxXlDxDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/RxtOo3Z770gA9xyNl3frz6cmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY1MGVkODktNWZkMi0z YjE4LTg3ZDYtMmZkZDZjZmY5ZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8wAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbPWfMQ8BbHfnWkmv/7j7W1wrh3Ex4ivIRIPaWhNdqZzpMt1/FYJvmc anT3q451jSNuGlrsyfu9QfLc/IlP/6sbex05Wmiv++UzIP5XDEqrJK1m5OIIOGgj UMJFcvxhUgWrYkc+toZgot+OHMofTB22F2Fe+80VCXdCsHDQBcH+iuODHfihv4jS 8HwWJiEVWrYyfB/hfOymUT31iV2p/2FDhQuTbHqlEC25TN5k1+1IL8aAiWqgSznL e3aqNBApUIkbB1B7BSkJhZr1+hkVEcrOBsJm1Mj4YxgM6xQZAqd9aCWYxusLCiKK AUTVh6YvlnI7por7sAJAsEWe6OM+uEg= -----END CERTIFICATE-----Generated at Wed Jul 29 08:13:33 2026 by rpki-client