$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bf1a458-11ce-3109-8fc4-7b138686f4b9.roa File: 9bf1a458-11ce-3109-8fc4-7b138686f4b9.roa (raw, json) Hash identifier: AkGbHskKE5XQ8AhUdpDCNtZqVVkqvBWYEQ0EFjiMaV4= Subject key identifier: BA:AF:2C:7B:7D:73:9E:82:8E:D2:1D:F4:DD:4B:3C:65:10:CD:B1:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE52C166794FF88E4D28A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bf1a458-11ce-3109-8fc4-7b138686f4b9.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.41.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:2c:16:67:94:ff:88:e4:d2:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=e51f4d46-64f0-4adb-8d5b-eb551c77f71a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:7e:4e:39:c9:0a:31:23:34:2d:8e:8e:56: ad:ca:b8:af:e2:ed:e7:76:f3:f4:a6:4d:85:31:12: bb:21:65:e9:94:62:68:b7:31:d0:c9:fb:cc:af:b3: 4f:50:93:0c:42:31:e0:11:f0:00:39:5a:a2:6a:cd: 08:6c:a3:86:58:26:79:db:48:5d:08:a2:91:27:7a: bb:88:13:58:46:f0:dd:d7:31:b4:99:37:16:2a:fc: 57:81:1a:e9:9f:b5:eb:64:49:73:1e:b8:5e:e0:7c: 97:8b:c5:5c:93:3d:4f:61:20:1b:19:f9:c7:a8:83: 6e:83:94:92:4e:d9:05:39:30:0e:16:8f:85:9e:2e: 7a:9c:6e:12:3b:df:00:6e:f2:1e:4b:31:5e:1e:be: 0b:8d:f8:4c:62:5b:6a:03:b5:91:4b:22:93:d8:01: c7:ec:05:05:05:ab:c4:32:7c:27:da:2e:f5:b2:50: 8b:a3:3d:03:aa:30:28:06:d3:2d:74:00:da:a9:7c: af:34:a3:22:dd:50:8b:fa:14:4a:85:8f:28:98:d7: f6:52:55:93:39:64:70:0b:d3:39:1c:99:65:f1:7f: 4d:cd:e0:d2:aa:d1:7e:40:40:cf:92:1c:95:49:f3: 07:64:70:e2:5a:3b:96:15:84:c4:a1:84:81:4c:93: 30:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AF:2C:7B:7D:73:9E:82:8E:D2:1D:F4:DD:4B:3C:65:10:CD:B1:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9bf1a458-11ce-3109-8fc4-7b138686f4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:bc:86:5e:db:f7:6e:f3:de:ad:65:93:4a:ce:91:a1:f6:7b: 05:2f:00:be:cc:2d:21:b9:6f:ff:0d:d7:f9:6a:f4:28:c3:22: bd:1d:ec:c4:59:2e:bf:25:62:8c:8e:89:e4:1b:bb:7e:82:46: 0a:f1:b0:a1:f1:ea:b8:7b:e8:c2:af:88:27:2c:08:9f:7d:39: a1:9f:28:e6:d4:8c:38:e0:92:1d:60:72:df:cf:d1:8f:54:38: 32:56:33:a7:78:05:f8:93:f1:81:70:ee:d5:ab:93:1b:c4:45: 50:03:19:a0:d4:1c:4e:e9:e1:53:d7:83:17:63:ea:04:e6:c9: 45:48:88:84:21:89:3c:fc:9b:a4:cc:03:7a:c3:1f:7c:15:17: 6c:10:20:e5:1d:46:b7:9f:a3:b5:c3:ae:75:82:1e:8b:da:07: 34:75:3e:c9:09:ca:b6:5b:33:01:c0:aa:c8:4d:2c:e9:19:12: 3f:03:90:b6:92:bc:a1:14:3b:f6:d6:88:1e:44:d0:52:82:c6: 20:c1:d3:73:03:0e:96:1a:d6:c5:02:f9:a5:e5:de:cd:f6:ee: 96:88:52:9e:ff:49:eb:dc:a4:75:0e:e1:31:9f:a3:a7:28:83: 61:ee:22:98:df:6f:13:4d:44:59:9d:c7:f9:e5:de:83:b9:fa: 7e:8d:09:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SwWZ5T/iOTSioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZTUxZjRkNDYtNjRmMC00YWRiLThkNWItZWI1NTFjNzdmNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbF+TjnJCjEjNC2Ojlatyriv4u3ndvP0pk2F MRK7IWXplGJotzHQyfvMr7NPUJMMQjHgEfAAOVqias0IbKOGWCZ520hdCKKRJ3q7 iBNYRvDd1zG0mTcWKvxXgRrpn7XrZElzHrhe4HyXi8Vckz1PYSAbGfnHqINug5SS TtkFOTAOFo+Fni56nG4SO98AbvIeSzFeHr4LjfhMYltqA7WRSyKT2AHH7AUFBavE Mnwn2i71slCLoz0DqjAoBtMtdADaqXyvNKMi3VCL+hRKhY8omNf2UlWTOWRwC9M5 HJll8X9NzeDSqtF+QEDPkhyVSfMHZHDiWjuWFYTEoYSBTJMwbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqvLHt9c56CjtId9N1LPGUQzbHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWJmMWE0NTgtMTFjZS0z MTA5LThmYzQtN2IxMzg2ODZmNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFylkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe8hl7b927z3q1lk0rOkaH2ewUvAL7MLSG5b/8N1/lq9CjDIr0d7MRZ Lr8lYoyOieQbu36CRgrxsKHx6rh76MKviCcsCJ99OaGfKObUjDjgkh1gct/P0Y9U ODJWM6d4BfiT8YFw7tWrkxvERVADGaDUHE7p4VPXgxdj6gTmyUVIiIQhiTz8m6TM A3rDH3wVF2wQIOUdRrefo7XDrnWCHovaBzR1PskJyrZbMwHAqshNLOkZEj8DkLaS vKEUO/bWiB5E0FKCxiDB03MDDpYa1sUC+aXl3s327paIUp7/SevcpHUO4TGfo6co g2HuIpjfbxNNRFmdx/nl3oO5+n6NCQo= -----END CERTIFICATE-----Generated at Wed Jul 29 01:51:25 2026 by rpki-client