$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa File: cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa (raw, json) Hash identifier: jj8eGXr7J1ZvgORVnnIAD5uYJz+jmvnpCdEZrpxu/uw= Subject key identifier: F4:7C:2B:35:34:A1:F3:D9:93:87:4D:94:89:89:F5:0F:3A:59:3F:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE5239C5B397BCE647E69E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.40.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:23:9c:5b:39:7b:ce:64:7e:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=771e60cb-e607-4410-b18c-3567b212427c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:09:d3:28:5b:ff:97:95:e1:73:88:da:ec: a6:b8:37:e8:a2:55:7e:4d:07:16:d5:39:8f:2f:f1: 3f:48:fa:47:b0:41:5d:83:81:06:4d:e1:af:de:79: 37:4b:a4:28:5d:85:e1:f9:c1:b3:a1:6e:cc:be:ea: c4:60:a4:6f:8f:10:6f:05:a9:d2:fe:ef:cc:ea:42: b6:72:9b:7a:41:e5:43:b6:5d:47:75:df:cb:66:ca: 4d:8c:fc:40:ee:28:94:d9:f0:58:6d:bc:46:4a:2c: 72:c7:60:e8:82:8c:e7:13:93:7e:b3:63:90:98:dc: ff:cf:1c:2c:71:ea:86:8b:3e:75:0c:c9:6e:c4:28: ab:78:02:87:a4:8e:7f:24:ad:aa:ed:29:64:b1:ce: 52:29:63:c6:6c:ce:2d:08:43:aa:fd:58:6e:c2:fd: 4a:8e:7d:ff:04:d4:61:bc:77:a2:25:62:33:af:e5: ad:36:97:bb:93:ec:ff:a3:e5:40:7c:56:32:2b:84: 05:6d:44:18:62:6e:aa:0b:8b:4c:f2:2e:45:32:67: 06:61:44:54:93:52:5c:28:c8:0d:c3:12:50:f9:33: e4:38:e1:1c:da:31:f8:29:86:95:9e:24:1f:0e:54: 59:a7:b8:fb:83:3f:bb:5a:d2:f6:46:e8:62:26:c4: ed:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7C:2B:35:34:A1:F3:D9:93:87:4D:94:89:89:F5:0F:3A:59:3F:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0e:6e:91:b2:54:50:f9:b6:9e:3e:8a:c0:d7:fa:8a:dd:13: 1c:c2:e0:99:03:a0:b5:53:b0:4a:db:79:c9:10:87:43:5f:6e: ef:d8:1d:36:6a:ec:b4:e1:ee:f6:8f:8d:5c:f2:95:08:41:9c: c8:39:a2:dd:09:49:9f:47:f9:ce:90:8e:d7:54:87:19:0f:31: 2c:0d:f5:c4:57:c3:8f:81:92:a0:c5:ba:0c:cd:c1:a8:59:ce: 26:7b:f1:f7:3a:c7:65:37:e4:e4:0e:fb:96:22:ef:eb:d5:3b: d2:0b:e4:13:03:d5:2d:ed:93:a5:8e:d3:81:a0:e4:bf:ed:55: 2c:64:23:43:d7:52:83:0b:68:b5:1c:4f:04:76:d4:1c:d9:d1: c8:d6:e4:3b:2c:28:3d:93:d0:a5:ea:e5:4d:65:30:f7:7d:8e: 74:ed:4e:b4:7b:13:09:d6:d6:73:6a:3d:db:c9:27:ed:78:2e: ae:68:5e:0a:80:1f:14:e2:b8:2f:70:a2:c4:ec:9c:e1:78:da: 22:4a:c5:58:57:57:e8:aa:47:09:c5:4e:9b:28:12:15:0c:04: d2:84:69:af:98:6d:6f:2c:7f:46:30:c8:a1:14:07:57:03:db: 01:b4:2b:04:5a:e8:bd:e0:9b:c2:83:88:3c:cf:0e:65:c7:9e: db:27:3b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SOcWzl7zmR+aeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk NzcxZTYwY2ItZTYwNy00NDEwLWIxOGMtMzU2N2IyMTI0MjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mAJ0yhb/5eV4XOI2uymuDfoolV+TQcW1TmP L/E/SPpHsEFdg4EGTeGv3nk3S6QoXYXh+cGzoW7MvurEYKRvjxBvBanS/u/M6kK2 cpt6QeVDtl1Hdd/LZspNjPxA7iiU2fBYbbxGSixyx2DogoznE5N+s2OQmNz/zxws ceqGiz51DMluxCireAKHpI5/JK2q7Slksc5SKWPGbM4tCEOq/Vhuwv1Kjn3/BNRh vHeiJWIzr+WtNpe7k+z/o+VAfFYyK4QFbUQYYm6qC4tM8i5FMmcGYURUk1JcKMgN wxJQ+TPkOOEc2jH4KYaVniQfDlRZp7j7gz+7WtL2RuhiJsTtBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR8KzU0ofPZk4dNlImJ9Q86WT/YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RmMTVkNjAtMGI1YS0z MTQxLTgzMjctMTBmYjMyMTFmZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcObpGyVFD5tp4+isDX+ordExzC4JkDoLVTsErbeckQh0Nfbu/YHTZq 7LTh7vaPjVzylQhBnMg5ot0JSZ9H+c6QjtdUhxkPMSwN9cRXw4+BkqDFugzNwahZ ziZ78fc6x2U35OQO+5Yi7+vVO9IL5BMD1S3tk6WO04Gg5L/tVSxkI0PXUoMLaLUc TwR21BzZ0cjW5DssKD2T0KXq5U1lMPd9jnTtTrR7EwnW1nNqPdvJJ+14Lq5oXgqA HxTiuC9wosTsnOF42iJKxVhXV+iqRwnFTpsoEhUMBNKEaa+YbW8sf0YwyKEUB1cD 2wG0KwRa6L3gm8KDiDzPDmXHntsnOzc= -----END CERTIFICATE-----Generated at Wed Jul 29 08:17:54 2026 by rpki-client