$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3852069-35b3-3f02-954d-12fd5e977f9e.roa File: a3852069-35b3-3f02-954d-12fd5e977f9e.roa (raw, json) Hash identifier: NRbEXVG2GsaqvyrD9b0geY4wQxxtZjesOiMQ8VyV8XY= Subject key identifier: 53:5A:D8:01:67:1E:D4:F0:16:F7:D2:4E:13:99:3A:6E:11:B8:AC:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7877E018C77EF031C65B600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3852069-35b3-3f02-954d-12fd5e977f9e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.58.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:7e:01:8c:77:ef:03:1c:65:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=01a7f139-26f0-4668-a1b1-00f86ef965b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b2:e6:e6:3d:9b:9d:f8:0a:12:e8:48:a0:1c: b3:c7:4e:c6:bd:66:f0:15:da:18:fa:76:e5:b4:c9: 6c:a7:06:e1:2e:61:70:da:2e:e3:d6:70:f0:3d:d3: 04:d4:75:9d:43:ea:25:fa:70:6b:9a:11:92:de:23: cb:c3:c1:8f:f8:56:95:5f:ea:71:f6:e8:e6:31:fa: 29:d4:04:90:d3:a3:1d:a4:99:0b:f6:38:d0:9c:fc: a9:7a:30:7b:96:eb:84:45:86:c1:e0:ad:ed:1d:06: 6e:d4:a2:6f:fe:7e:1b:06:5f:2c:b8:d2:d6:3f:08: ad:11:9b:b2:1a:ce:c8:30:fd:91:29:d5:57:e4:d8: c6:ed:46:8d:69:30:ca:16:03:7d:de:30:34:e4:39: 5c:e8:4d:a0:a4:68:83:aa:2c:64:d1:71:6c:ae:3d: 39:75:2a:71:a3:43:2c:d9:75:ce:e2:83:38:fe:8b: 38:54:77:f3:3c:52:8e:ca:47:f9:a7:aa:af:b9:d3: 5e:1f:0a:0e:31:a1:30:2c:b5:75:1b:ea:9a:5e:2d: 12:97:7d:f5:3b:35:9c:38:0a:6e:54:ce:40:49:a3: 26:65:9d:5c:0f:02:2e:c0:37:a5:4a:d6:3d:76:9d: 4c:23:85:39:c9:89:b9:5f:e1:46:a4:32:ea:02:f9: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:D8:01:67:1E:D4:F0:16:F7:D2:4E:13:99:3A:6E:11:B8:AC:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3852069-35b3-3f02-954d-12fd5e977f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:bb:81:c0:13:d3:2a:46:a2:4a:56:b4:c1:96:9d:d8:9b:25: 3a:71:9f:93:79:82:45:19:c4:76:1c:a0:cc:b0:db:bc:ac:e6: 85:04:53:f9:e4:a3:ad:f0:e5:8e:a1:e5:c1:e0:e8:dc:72:91: a4:d0:33:34:cf:19:7d:fb:d6:55:79:a9:b6:86:5b:b1:d3:8b: 04:a8:4a:c7:c3:9c:ce:c7:0f:bf:5a:71:ad:1d:30:73:04:e2: d2:44:f0:03:73:27:0b:37:ae:c7:47:14:24:d1:65:3f:25:15: ac:60:19:ad:22:dd:87:fc:8a:1d:7e:ad:c5:bb:0c:23:83:a8: a2:3a:7d:0b:22:ea:ae:a0:3a:ff:3b:c8:c7:9a:77:8d:61:5e: 2c:82:70:de:eb:85:e3:42:2e:78:96:8f:08:e4:46:c7:20:33: 14:4a:61:30:54:1f:04:ec:b8:1f:d3:e7:28:7a:e7:1f:73:68: 35:8a:18:20:84:b4:47:60:a8:6f:4d:22:b6:a5:1e:3a:91:22: ac:5c:48:f5:69:f6:26:05:bf:39:fb:00:0e:92:18:21:83:57: 1d:8f:7c:6d:53:1e:fe:be:9c:3b:97:9f:c0:03:42:de:9f:df: d8:82:74:67:93:7d:3a:a0:2a:e9:bb:ff:82:3d:ab:ad:51:98: f4:fe:36:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh34BjHfvAxxltgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDFhN2YxMzktMjZmMC00NjY4LWExYjEtMDBmODZlZjk2NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLLm5j2bnfgKEuhIoByzx07GvWbwFdoY+nbl tMlspwbhLmFw2i7j1nDwPdME1HWdQ+ol+nBrmhGS3iPLw8GP+FaVX+px9ujmMfop 1ASQ06MdpJkL9jjQnPypejB7luuERYbB4K3tHQZu1KJv/n4bBl8suNLWPwitEZuy Gs7IMP2RKdVX5NjG7UaNaTDKFgN93jA05Dlc6E2gpGiDqixk0XFsrj05dSpxo0Ms 2XXO4oM4/os4VHfzPFKOykf5p6qvudNeHwoOMaEwLLV1G+qaXi0Sl331OzWcOApu VM5ASaMmZZ1cDwIuwDelStY9dp1MI4U5yYm5X+FGpDLqAvmMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNa2AFnHtTwFvfSThOZOm4RuKxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTM4NTIwNjktMzViMy0z ZjAyLTk1NGQtMTJmZDVlOTc3ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH27gcAT0ypGokpWtMGWndibJTpxn5N5gkUZxHYcoMyw27ys5oUEU/nk o63w5Y6h5cHg6NxykaTQMzTPGX371lV5qbaGW7HTiwSoSsfDnM7HD79aca0dMHME 4tJE8ANzJws3rsdHFCTRZT8lFaxgGa0i3Yf8ih1+rcW7DCODqKI6fQsi6q6gOv87 yMead41hXiyCcN7rheNCLniWjwjkRscgMxRKYTBUHwTsuB/T5yh65x9zaDWKGCCE tEdgqG9NIralHjqRIqxcSPVp9iYFvzn7AA6SGCGDVx2PfG1THv6+nDuXn8ADQt6f 39iCdGeTfTqgKum7/4I9q61RmPT+NvE= -----END CERTIFICATE-----Generated at Wed Jul 29 07:20:38 2026 by rpki-client