$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0bfbbb-fdde-3c67-9f2a-f96d27cda621.roa File: af0bfbbb-fdde-3c67-9f2a-f96d27cda621.roa (raw, json) Hash identifier: YcvTmfcU58S9wbNynMmxdSSeylIJjthEzp5a45BDOS8= Subject key identifier: 8C:C2:29:FA:85:80:36:2A:61:3B:BF:76:4A:E0:4B:7F:8A:DF:E8:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA790E51C55B99884DD451100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0bfbbb-fdde-3c67-9f2a-f96d27cda621.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.194.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:e5:1c:55:b9:98:84:dd:45:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8ae8754a-8be4-4fc1-84cf-ff2f56e555b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:fd:d5:2a:98:be:05:f7:c7:57:00:d4:1c: a2:0e:4c:d4:aa:3f:b5:6f:f5:b8:03:f2:d3:db:70: 2f:de:27:75:6a:96:54:ec:da:28:43:43:36:d7:ee: 10:e9:be:66:42:0d:9c:24:c2:a8:fa:77:b9:d9:85: b5:7c:20:cb:ac:a4:c4:3f:eb:ba:44:47:db:e2:b1: 83:3f:eb:3e:d9:c7:0b:07:52:f7:e7:d6:fb:ad:1a: 79:c9:4e:85:b5:26:89:61:f0:29:6f:04:4b:01:5c: 7d:5c:9f:b7:9a:8b:84:e3:b7:48:14:35:8e:14:50: b3:6b:08:f4:69:80:9e:cf:68:9d:9c:ea:e8:a7:59: 67:27:c0:4f:39:e6:8a:e8:21:72:0f:2e:44:95:b7: ed:aa:af:db:70:00:bb:29:29:2e:c5:a7:8b:c6:e2: a4:6e:cb:7b:1d:21:80:72:1f:0b:00:d9:03:29:3d: 42:b7:61:96:92:7a:1d:5c:79:92:98:95:41:c8:7d: 30:1f:2d:5f:07:d5:36:75:ae:40:48:e1:7c:b6:2c: 27:5f:7c:ba:20:cc:1a:e8:a0:97:8e:8c:f8:bb:80: 3a:17:05:f7:ef:97:69:11:33:96:97:2e:b9:14:e0: 31:5b:ed:47:92:ab:ce:4d:7f:67:37:c4:6e:54:ad: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C2:29:FA:85:80:36:2A:61:3B:BF:76:4A:E0:4B:7F:8A:DF:E8:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0bfbbb-fdde-3c67-9f2a-f96d27cda621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6a:1b:3b:bb:36:a4:68:ef:4c:b2:54:94:12:92:3a:71:db: 94:97:bd:7a:7c:90:93:7e:43:d8:52:ab:0f:d7:b5:9a:0e:57: 51:2c:9a:52:42:65:7f:ff:38:e9:5f:06:de:5c:cb:f9:77:45: 30:2a:92:be:9e:6c:c4:3c:0a:de:d7:6d:d5:aa:09:d4:bc:fe: c3:9f:a6:58:e8:02:92:c7:78:7c:b9:98:4b:1b:95:19:f4:fa: 1d:3c:19:e3:1f:55:ec:2e:a6:15:17:aa:67:dd:e8:35:8a:b8: 54:e1:e2:f5:09:7f:f3:05:94:1c:29:64:72:05:7b:6a:c5:9c: 43:36:34:e7:8c:02:0b:08:43:b7:2d:09:01:0c:89:70:78:bf: 6a:b4:62:8a:43:02:b2:d3:85:37:46:59:21:f9:b7:c8:58:4d: dc:6e:ef:3e:8f:d0:31:ab:1c:06:b8:56:1e:4a:1a:73:3a:83: 0a:d2:13:3d:1c:12:3e:d1:c2:37:0d:a6:aa:36:01:82:57:2d: 24:e6:a9:7c:03:a3:3d:9e:cf:36:9d:a7:1e:ce:25:33:1e:1a: bb:0d:bb:8e:bf:94:46:96:00:a3:b5:a0:8d:2c:fa:76:42:e0: da:03:23:1d:d9:56:ab:f9:04:25:fd:14:48:cf:77:9f:57:c6: e3:bc:8a:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkOUcVbmYhN1FEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGFlODc1NGEtOGJlNC00ZmMxLTg0Y2YtZmYyZjU2ZTU1NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtb91SqYvgX3x1cA1ByiDkzUqj+1b/W4A/LT 23Av3id1apZU7NooQ0M21+4Q6b5mQg2cJMKo+ne52YW1fCDLrKTEP+u6REfb4rGD P+s+2ccLB1L359b7rRp5yU6FtSaJYfApbwRLAVx9XJ+3mouE47dIFDWOFFCzawj0 aYCez2idnOrop1lnJ8BPOeaK6CFyDy5Elbftqq/bcAC7KSkuxaeLxuKkbst7HSGA ch8LANkDKT1Ct2GWknodXHmSmJVByH0wHy1fB9U2da5ASOF8tiwnX3y6IMwa6KCX joz4u4A6FwX375dpETOWly65FOAxW+1HkqvOTX9nN8RuVK111wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzCKfqFgDYqYTu/dkrgS3+K3+htMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWYwYmZiYmItZmRkZS0z YzY3LTlmMmEtZjk2ZDI3Y2RhNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8KCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpqGzu7NqRo70yyVJQSkjpx25SXvXp8kJN+Q9hSqw/XtZoOV1EsmlJC ZX//OOlfBt5cy/l3RTAqkr6ebMQ8Ct7XbdWqCdS8/sOfpljoApLHeHy5mEsblRn0 +h08GeMfVewuphUXqmfd6DWKuFTh4vUJf/MFlBwpZHIFe2rFnEM2NOeMAgsIQ7ct CQEMiXB4v2q0YopDArLThTdGWSH5t8hYTdxu7z6P0DGrHAa4Vh5KGnM6gwrSEz0c Ej7RwjcNpqo2AYJXLSTmqXwDoz2ezzadpx7OJTMeGrsNu46/lEaWAKO1oI0s+nZC 4NoDIx3ZVqv5BCX9FEjPd59XxuO8inw= -----END CERTIFICATE-----Generated at Wed Jul 29 06:48:54 2026 by rpki-client