$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2eb35ee-1400-333f-a073-a68a40ebc71a.roa File: c2eb35ee-1400-333f-a073-a68a40ebc71a.roa (raw, json) Hash identifier: 45Hm7/00Kx7FhYSarLvtrUPJxcA49Q9ygDLww+ATJA8= Subject key identifier: 12:C5:20:4A:AC:4E:A9:90:C2:F3:3D:D9:18:AC:B0:82:EE:F7:FE:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA799049B2BD085DA249E2AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2eb35ee-1400-333f-a073-a68a40ebc71a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.213.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:04:9b:2b:d0:85:da:24:9e:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c1ff2ed8-4db7-4b60-ac10-337b34356cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:78:bc:a8:cc:90:5c:22:af:7f:c6:a6:4b: a5:91:ee:09:2f:5c:7a:0d:ae:21:8b:6f:12:e7:c9: 76:e3:b0:94:68:08:a9:85:ee:82:2b:b7:4e:ed:d7: d0:8a:18:2d:9a:f6:81:39:76:be:25:ca:c2:bc:50: 48:da:c3:29:1e:23:58:a4:0b:1d:5d:f0:f3:12:0f: 70:28:cb:ab:4e:56:76:09:34:67:de:17:29:ce:af: fe:ed:b8:f7:d9:8e:fd:af:82:8e:85:51:3b:54:03: 64:f4:b4:55:4e:47:bc:b5:91:9a:21:78:5f:e7:82: 05:7c:59:b2:21:30:ed:9d:fe:35:77:af:bd:32:94: 88:f6:9d:bb:40:a8:f5:3e:2d:0a:d4:dd:b5:d0:b8: 52:b4:f9:c1:5f:72:2d:3c:a8:f1:1a:f3:31:2f:37: ae:13:27:85:c0:20:73:37:96:d4:9d:02:31:38:9e: 4a:ff:79:69:fe:66:84:c2:1d:8b:17:de:8e:e6:ba: b8:f6:dc:39:5a:a5:ee:1d:fc:13:55:a6:8f:66:b9: cb:7a:8d:bf:d1:4a:af:4c:61:de:a3:13:7d:09:45: ff:9a:f8:76:44:13:f9:6f:c6:29:c3:bd:ab:5e:3c: 7a:02:77:eb:3f:1a:ce:59:fd:fb:f8:ad:14:45:65: 60:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C5:20:4A:AC:4E:A9:90:C2:F3:3D:D9:18:AC:B0:82:EE:F7:FE:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2eb35ee-1400-333f-a073-a68a40ebc71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:58:88:ee:ea:e5:47:52:fe:eb:e7:9d:e4:25:41:c2:fb:81: 8d:7c:1a:87:0d:dc:c5:11:04:9c:bd:78:24:19:51:14:63:6c: 27:07:91:51:b7:c8:2e:ca:10:6f:36:3e:8a:9e:63:5c:69:31: 8b:e0:86:72:37:b4:fc:18:86:cb:32:c7:fe:b4:5f:20:3d:2d: 75:ff:3b:b4:dc:f7:41:bb:06:dc:f0:5e:fa:37:46:90:46:7b: 09:35:5d:ac:21:87:3c:f4:6d:7a:c1:f9:2d:37:df:92:ac:9f: 78:d8:76:44:64:b4:f6:cf:f1:08:88:f6:05:d2:cc:d8:03:59: 28:49:05:4c:80:10:12:0c:15:25:b2:e5:b8:38:38:cd:d8:4c: d9:11:13:9d:58:93:db:15:fe:87:6a:83:e8:26:bb:bd:82:93: 52:2b:47:a2:fa:1b:4e:12:1b:86:9e:88:ba:81:96:31:a6:fa: 57:b8:3e:0a:8c:77:6e:fa:80:af:51:e1:99:8b:9a:07:4f:be: 55:cc:33:08:1d:bd:da:0a:ee:3a:ea:ff:43:09:cc:79:43:b4: 5f:e1:2c:17:7a:5a:0d:ca:50:95:52:e9:92:bb:d3:35:36:16: 50:cd:69:ed:e1:7f:51:f4:5e:4d:9e:93:dc:31:78:a6:d7:b1: b3:2c:93:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmQSbK9CF2iSeKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzFmZjJlZDgtNGRiNy00YjYwLWFjMTAtMzM3YjM0MzU2Y2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYx4vKjMkFwir3/Gpkulke4JL1x6Da4hi28S 58l247CUaAiphe6CK7dO7dfQihgtmvaBOXa+JcrCvFBI2sMpHiNYpAsdXfDzEg9w KMurTlZ2CTRn3hcpzq/+7bj32Y79r4KOhVE7VANk9LRVTke8tZGaIXhf54IFfFmy ITDtnf41d6+9MpSI9p27QKj1Pi0K1N210LhStPnBX3ItPKjxGvMxLzeuEyeFwCBz N5bUnQIxOJ5K/3lp/maEwh2LF96O5rq49tw5WqXuHfwTVaaPZrnLeo2/0UqvTGHe oxN9CUX/mvh2RBP5b8Ypw72rXjx6AnfrPxrOWf37+K0URWVg/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLFIEqsTqmQwvM92RissILu9/7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzJlYjM1ZWUtMTQwMC0z MzNmLWEwNzMtYTY4YTQwZWJjNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9WoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJYiO7q5UdS/uvnneQlQcL7gY18GocN3MURBJy9eCQZURRjbCcHkVG3 yC7KEG82PoqeY1xpMYvghnI3tPwYhssyx/60XyA9LXX/O7Tc90G7BtzwXvo3RpBG ewk1Xawhhzz0bXrB+S0335Ksn3jYdkRktPbP8QiI9gXSzNgDWShJBUyAEBIMFSWy 5bg4OM3YTNkRE51Yk9sV/odqg+gmu72Ck1IrR6L6G04SG4aeiLqBljGm+le4PgqM d276gK9R4ZmLmgdPvlXMMwgdvdoK7jrq/0MJzHlDtF/hLBd6Wg3KUJVS6ZK70zU2 FlDNae3hf1H0Xk2ek9wxeKbXsbMsk/A= -----END CERTIFICATE-----Generated at Wed Jul 29 03:52:12 2026 by rpki-client