$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b209cf37-eb89-38f8-850e-b396979a7668.roa File: b209cf37-eb89-38f8-850e-b396979a7668.roa (raw, json) Hash identifier: yrZgjmBkmxW4jgxyQWo0ne22wJpjITzWi6Jy1XNBKSs= Subject key identifier: AA:2B:1F:1C:E7:91:F0:99:AA:54:9D:BD:1E:C8:DC:4E:15:C3:D2:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA5AA93CCA06A386EBC6AAC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b209cf37-eb89-38f8-850e-b396979a7668.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 16625 IP address blocks: 23.53.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:93:cc:a0:6a:38:6e:bc:6a:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=5774a572-a2da-4862-a4ac-b7b41b3f4757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:75:2e:58:02:f7:32:93:19:9b:64:bf:5d: 35:79:fd:a9:34:83:41:cb:5f:a0:20:58:fa:94:40: 11:53:55:5b:81:bd:fa:ba:8a:b0:cd:b8:db:82:2d: 8c:35:08:e9:05:71:51:e1:c6:9f:fc:6f:94:7d:cd: c1:0a:8d:ed:ba:7f:4b:19:f3:2c:ea:0b:f2:49:64: b3:06:93:6b:29:91:57:c2:4f:ec:b6:ac:c9:bf:b7: 80:86:d9:1d:34:9a:18:08:b2:3f:83:ca:e3:e6:94: 3b:46:89:d5:5d:e3:63:0c:fd:ac:1e:1d:0b:e4:ce: eb:f0:e2:f9:02:53:32:3d:62:8d:1b:26:c3:b3:7e: ba:5a:f1:d6:85:46:65:f0:b2:17:f4:dd:24:4e:2f: 3a:5f:da:a8:da:8b:a8:ca:7b:b6:3b:51:60:64:3e: 89:79:2d:1b:d8:b9:f0:08:d8:0e:be:ce:a6:ec:84: 7f:9a:b8:55:65:ab:5c:b0:b9:8f:dd:87:f5:74:cf: c8:4c:34:2e:4b:c4:12:7c:df:86:fb:b1:53:ce:6a: e3:dc:40:b1:88:26:e5:53:2d:fc:4f:52:87:c1:67: a0:66:bf:d9:ba:f3:07:8e:e1:5d:8a:9e:de:4c:aa: 1a:30:e7:55:0b:dd:7b:49:62:c5:00:25:a6:1c:ca: 21:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2B:1F:1C:E7:91:F0:99:AA:54:9D:BD:1E:C8:DC:4E:15:C3:D2:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b209cf37-eb89-38f8-850e-b396979a7668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:76:0c:49:99:2b:1b:23:88:ba:80:7e:94:b6:bf:81:61:29: b3:74:af:f6:bd:7e:a8:10:78:de:e8:8a:68:91:49:1c:51:2a: 00:cf:b9:97:3e:0c:00:94:85:b7:f1:a2:8f:a6:3e:71:32:3b: aa:b7:f7:e6:12:9a:2a:d4:84:51:87:ec:57:eb:0a:17:eb:1d: 13:34:c3:17:7c:8e:0b:2d:c4:ed:d1:f4:a8:9f:1a:a9:46:16: 36:61:9e:75:1e:c6:c4:2d:4c:0d:85:db:cd:b6:43:20:bf:9c: 57:eb:49:f7:76:14:62:f3:c0:24:0a:01:ac:af:c0:eb:84:53: 74:06:9c:91:bb:5e:57:2b:29:0e:03:79:f3:a5:ec:80:e2:59: 24:86:2d:57:2f:c0:ba:17:00:ad:2a:14:07:1a:f6:c4:58:a2: 6f:44:fa:9c:6c:bd:83:3a:31:f4:ce:11:93:88:88:71:26:61: 57:e7:40:68:3e:35:1f:06:59:4e:32:8c:e2:b8:ab:70:12:9c: 94:45:15:f3:95:7a:a2:6f:67:90:f0:5a:58:03:bb:75:e5:eb: ba:0e:97:0e:26:61:9d:06:7a:3f:c1:44:bb:7c:f8:3d:66:21: 25:22:73:4b:11:2b:ad:dd:88:52:87:bb:1d:4e:fe:70:13:ac: 6d:35:85:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqpPMoGo4brxqrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk NTc3NGE1NzItYTJkYS00ODYyLWE0YWMtYjdiNDFiM2Y0NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv11LlgC9zKTGZtkv101ef2pNINBy1+gIFj6 lEARU1Vbgb36uoqwzbjbgi2MNQjpBXFR4caf/G+Ufc3BCo3tun9LGfMs6gvySWSz BpNrKZFXwk/stqzJv7eAhtkdNJoYCLI/g8rj5pQ7RonVXeNjDP2sHh0L5M7r8OL5 AlMyPWKNGybDs366WvHWhUZl8LIX9N0kTi86X9qo2ouoynu2O1FgZD6JeS0b2Lnw CNgOvs6m7IR/mrhVZatcsLmP3Yf1dM/ITDQuS8QSfN+G+7FTzmrj3ECxiCblUy38 T1KHwWegZr/ZuvMHjuFdip7eTKoaMOdVC917SWLFACWmHMohEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKorHxznkfCZqlSdvR7I3E4Vw9IMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjIwOWNmMzctZWI4OS0z OGY4LTg1MGUtYjM5Njk3OWE3NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB52DEmZKxsjiLqAfpS2v4FhKbN0r/a9fqgQeN7oimiRSRxRKgDPuZc+ DACUhbfxoo+mPnEyO6q39+YSmirUhFGH7FfrChfrHRM0wxd8jgstxO3R9KifGqlG FjZhnnUexsQtTA2F2822QyC/nFfrSfd2FGLzwCQKAayvwOuEU3QGnJG7XlcrKQ4D efOl7IDiWSSGLVcvwLoXAK0qFAca9sRYom9E+pxsvYM6MfTOEZOIiHEmYVfnQGg+ NR8GWU4yjOK4q3ASnJRFFfOVeqJvZ5DwWlgDu3Xl67oOlw4mYZ0Gej/BRLt8+D1m ISUic0sRK63diFKHux1O/nATrG01hQ4= -----END CERTIFICATE-----Generated at Wed Jul 29 08:23:34 2026 by rpki-client