$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa File: 904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa (raw, json) Hash identifier: 6vhrfU5xQv3FnaHQeaLfAkSD9giI/YKDMbSoALyHAeY= Subject key identifier: 49:02:8B:B4:57:79:39:BF:E3:98:BD:54:8F:FB:ED:A4:96:05:CC:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA791F232B9FF6054E51BE280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.201.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:f2:32:b9:ff:60:54:e5:1b:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a8f72c7d-df82-4026-9e29-ca4579debfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:91:77:eb:a2:68:21:fb:8c:6e:e5:cf:be:ed: bf:0b:ad:d0:83:39:1c:6c:91:4c:81:19:5d:f0:f2: 43:a8:f8:f5:ce:c5:e1:fa:fe:9a:45:1f:0e:9c:3e: 96:9c:5c:68:14:53:88:84:6c:0f:0a:bd:63:7f:9d: 6f:c3:a4:64:84:2d:d3:c4:88:41:0d:87:77:1f:07: 27:3a:21:ef:a2:b3:51:9a:ed:95:5f:95:5c:48:18: 02:cf:ac:cf:b5:c8:65:16:20:38:7a:c5:83:80:e6: 9c:f8:52:3d:40:d4:5d:ce:54:ee:d2:58:ec:d1:9b: d8:73:38:57:b0:4a:a0:51:8a:82:77:76:ae:85:7b: 82:f3:3d:f6:53:aa:1b:fe:fa:e0:66:2b:eb:d3:a5: 19:5f:2f:05:32:f6:67:54:fe:05:87:29:a4:f1:29: 90:7c:6f:f2:3b:bd:02:b4:3e:dc:64:b4:39:ec:e1: 19:44:8b:10:c8:2d:8a:b4:b7:37:09:b0:06:2a:b1: 69:b2:85:0b:b0:d0:15:f5:1b:cc:17:88:94:e2:2a: fd:01:03:7f:3f:1b:b1:7b:0d:0d:e3:ff:9a:7b:74: 5a:f6:26:bf:b4:95:3f:d1:c2:64:0c:b7:4c:6b:e8: ed:10:5d:0c:b3:0f:07:58:43:1f:cc:4d:31:8e:08: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:02:8B:B4:57:79:39:BF:E3:98:BD:54:8F:FB:ED:A4:96:05:CC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/904bf9c4-3d6f-3503-bce9-b69b2a79fa4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:77:f7:ad:63:bf:15:30:14:eb:b0:5a:f0:27:f2:42:b4:63: 31:fb:b0:27:58:af:72:31:e5:bb:e1:89:ef:30:c3:12:0c:65: 05:78:65:85:36:cb:71:2b:0c:e7:df:09:f7:0d:da:95:92:eb: 1b:44:1a:dc:95:8e:28:b6:a0:c3:bb:3d:0a:71:2a:90:92:79: 95:48:c3:7e:5b:e8:33:4a:87:cf:73:ff:c3:f1:27:e8:81:56: 40:7a:3d:a6:75:41:dc:82:39:b9:65:93:7a:63:44:20:3e:d9: 73:62:0f:ca:18:ed:95:89:b8:bc:57:40:64:d8:e3:60:42:f1: 5a:9d:35:78:e2:cd:e9:2b:2f:66:cc:d0:f3:d3:c3:bd:bb:15: 38:f0:b8:e8:60:61:ad:98:69:47:63:43:7a:4b:eb:b0:0a:8a: cb:59:0b:c8:ef:d2:a1:eb:9a:5c:e1:d9:b2:89:40:25:9c:c2: 7c:90:01:6b:66:70:3c:5e:9f:8b:d4:3a:24:63:6c:1b:f0:48: f3:87:d9:db:88:d2:78:1e:94:12:aa:0c:d4:3f:af:ed:46:84: b8:6e:21:e7:c8:f3:00:81:b7:fa:34:89:af:63:75:1c:8d:95: 1d:54:aa:5c:43:12:db:4a:bf:ce:18:a0:dc:fa:d7:0e:bd:7c: 03:96:33:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkfIyuf9gVOUb4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YThmNzJjN2QtZGY4Mi00MDI2LTllMjktY2E0NTc5ZGViZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JF366JoIfuMbuXPvu2/C63QgzkcbJFMgRld 8PJDqPj1zsXh+v6aRR8OnD6WnFxoFFOIhGwPCr1jf51vw6RkhC3TxIhBDYd3Hwcn OiHvorNRmu2VX5VcSBgCz6zPtchlFiA4esWDgOac+FI9QNRdzlTu0ljs0ZvYczhX sEqgUYqCd3auhXuC8z32U6ob/vrgZivr06UZXy8FMvZnVP4Fhymk8SmQfG/yO70C tD7cZLQ57OEZRIsQyC2KtLc3CbAGKrFpsoULsNAV9RvMF4iU4ir9AQN/Pxuxew0N 4/+ae3Ra9ia/tJU/0cJkDLdMa+jtEF0Msw8HWEMfzE0xjghd9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkCi7RXeTm/45i9VI/77aSWBcx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTA0YmY5YzQtM2Q2Zi0z NTAzLWJjZTktYjY5YjJhNzlmYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR3961jvxUwFOuwWvAn8kK0YzH7sCdYr3Ix5bvhie8wwxIMZQV4ZYU2 y3ErDOffCfcN2pWS6xtEGtyVjii2oMO7PQpxKpCSeZVIw35b6DNKh89z/8PxJ+iB VkB6PaZ1QdyCObllk3pjRCA+2XNiD8oY7ZWJuLxXQGTY42BC8VqdNXjizekrL2bM 0PPTw727FTjwuOhgYa2YaUdjQ3pL67AKistZC8jv0qHrmlzh2bKJQCWcwnyQAWtm cDxen4vUOiRjbBvwSPOH2duI0ngelBKqDNQ/r+1GhLhuIefI8wCBt/o0ia9jdRyN lR1UqlxDEttKv84YoNz61w69fAOWM+w= -----END CERTIFICATE-----Generated at Wed Jul 29 03:50:41 2026 by rpki-client