$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa File: a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa (raw, json) Hash identifier: 5XdGn6AbXJxNsX04p2Xc+zYE7fmPrHvzVX8q4QLxRaE= Subject key identifier: AC:F6:85:D2:5D:71:71:C2:62:24:E3:32:49:0B:6A:E7:55:02:F8:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA79B0CC6865ED65E9FD90F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.214.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:0c:c6:86:5e:d6:5e:9f:d9:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d8c1f386-a468-4d47-875b-9d61b6cce7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:88:fa:ba:5e:79:6f:2f:3d:1e:40:2c:87: c8:c5:d4:95:64:5b:29:e9:aa:17:9a:73:76:1a:95: 0e:eb:a1:50:86:d6:3e:46:ed:ee:ef:fe:11:cd:67: b7:2b:61:55:79:e4:fa:e1:00:7b:62:0c:1e:43:2a: ee:aa:a7:06:a1:2c:7b:9e:42:01:16:b3:d4:ed:5b: f3:9e:7e:e3:1d:28:f0:e2:85:af:73:2d:b0:52:12: bd:ce:3c:2b:69:00:af:fc:85:2c:86:63:d3:66:1d: a0:13:2f:ef:2a:7d:71:8a:92:20:a1:d2:d0:fb:e7: c4:06:ba:b5:d1:95:50:fe:cb:fd:e7:81:24:99:dc: 82:3b:a2:6f:1b:6c:ee:df:53:b7:3d:39:32:f8:b2: 24:5e:f3:ce:e2:5d:ff:53:08:bb:eb:41:fc:c7:b7: 8f:a5:5f:33:6f:9e:3a:ba:27:c2:6b:5d:87:19:0d: 9e:36:11:0c:be:6c:f2:c4:4b:a1:0f:66:4e:20:fc: f0:19:8b:cb:f0:74:98:a8:45:ab:76:8c:09:a3:fa: f9:a1:a6:13:9b:32:fb:7f:9f:98:cd:71:71:be:c0: 10:20:68:fe:6d:5e:6d:30:be:9d:43:42:b5:2b:93: 95:24:1e:18:a3:bd:63:14:04:bd:18:7d:a0:6b:cd: ad:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:85:D2:5D:71:71:C2:62:24:E3:32:49:0B:6A:E7:55:02:F8:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1c4310f-ca7d-3d7c-97eb-0ad7bd8f66f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fb:47:de:17:1c:c0:e6:9e:88:a6:f9:b9:d2:ce:8c:6c:b8: d8:97:03:70:cd:c3:42:bb:75:7e:09:e6:60:de:e1:19:38:b7: 02:35:19:3f:23:4d:f6:33:c2:4d:3e:bf:dd:ae:5e:cb:3e:54: c8:f8:c2:20:2c:ad:29:4d:77:98:5c:b6:6d:00:8d:f9:a7:82: 23:de:9c:81:ef:86:4b:9b:1d:e6:99:86:3c:81:18:93:95:a2: d6:14:02:45:20:77:dd:40:b3:6b:68:44:d4:91:2f:65:d6:73: a5:7a:e7:81:22:fc:f9:31:16:c3:56:3b:91:a5:5d:30:bc:b3: f9:04:41:0e:cc:f7:a8:83:35:df:ca:16:d3:75:94:13:1c:cc: 99:c6:5c:97:87:07:16:47:05:b4:d1:23:a0:df:27:b0:1c:d7: ab:60:21:9c:1e:9a:e3:13:e6:9a:7c:8e:c1:e6:12:8e:35:c2: 1d:94:8e:97:9e:27:84:84:74:4e:b3:56:50:7c:a8:ac:60:12: 55:f4:c4:86:27:2e:fb:30:15:af:ce:81:af:37:71:65:27:02: 81:f7:f6:9f:2e:e8:1a:ae:f4:7e:1c:22:8c:9a:a6:74:ff:06: b5:bf:17:2f:48:ad:f4:0d:a8:46:05:2e:66:4b:2b:ca:d3:29: 8c:33:f0:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmwzGhl7WXp/ZD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDhjMWYzODYtYTQ2OC00ZDQ3LTg3NWItOWQ2MWI2Y2NlN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkmI+rpeeW8vPR5ALIfIxdSVZFsp6aoXmnN2 GpUO66FQhtY+Ru3u7/4RzWe3K2FVeeT64QB7YgweQyruqqcGoSx7nkIBFrPU7Vvz nn7jHSjw4oWvcy2wUhK9zjwraQCv/IUshmPTZh2gEy/vKn1xipIgodLQ++fEBrq1 0ZVQ/sv954EkmdyCO6JvG2zu31O3PTky+LIkXvPO4l3/Uwi760H8x7ePpV8zb546 uifCa12HGQ2eNhEMvmzyxEuhD2ZOIPzwGYvL8HSYqEWrdowJo/r5oaYTmzL7f5+Y zXFxvsAQIGj+bV5tML6dQ0K1K5OVJB4Yo71jFAS9GH2ga82tpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz2hdJdcXHCYiTjMkkLaudVAvhZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFjNDMxMGYtY2E3ZC0z ZDdjLTk3ZWItMGFkN2JkOGY2NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9bAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL7R94XHMDmnoim+bnSzoxsuNiXA3DNw0K7dX4J5mDe4Rk4twI1GT8j TfYzwk0+v92uXss+VMj4wiAsrSlNd5hctm0AjfmngiPenIHvhkubHeaZhjyBGJOV otYUAkUgd91As2toRNSRL2XWc6V654Ei/PkxFsNWO5GlXTC8s/kEQQ7M96iDNd/K FtN1lBMczJnGXJeHBxZHBbTRI6DfJ7Ac16tgIZwemuMT5pp8jsHmEo41wh2Ujpee J4SEdE6zVlB8qKxgElX0xIYnLvswFa/Oga83cWUnAoH39p8u6Bqu9H4cIoyapnT/ BrW/Fy9IrfQNqEYFLmZLK8rTKYwz8DI= -----END CERTIFICATE-----Generated at Wed Jul 29 05:05:05 2026 by rpki-client