$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d12979a5-8675-3f47-a6db-c68ffbaade5c.roa File: d12979a5-8675-3f47-a6db-c68ffbaade5c.roa (raw, json) Hash identifier: rKY1FIX6cXGa3E7c9vmsSVvxsOT8klH0tvVnzpLX3uQ= Subject key identifier: 19:F4:0A:35:84:59:53:E7:2C:27:34:D1:66:2A:35:84:DA:F0:54:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA17A8B083C4AE93B322487F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d12979a5-8675-3f47-a6db-c68ffbaade5c.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 20940 IP address blocks: 23.49.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:8b:08:3c:4a:e9:3b:32:24:87:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=c6af6a50-756a-413f-9bf0-5b8ffd9a3add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:7f:8b:7c:f7:b7:93:e4:48:aa:70:f7:2c: f0:2e:70:c8:ec:aa:62:5b:fd:ce:2c:bc:02:c1:97: f6:7e:37:e4:e7:62:37:57:81:8e:96:fc:f9:da:b4: ff:96:98:7c:ca:a3:e6:32:46:91:7f:bf:20:c6:4d: 56:bd:58:a7:5c:91:58:e6:77:2b:58:21:e9:4e:dc: 52:73:3f:3b:25:3e:a2:06:b5:68:9e:d1:3f:19:4d: 90:09:72:99:47:7d:39:58:f0:e3:ae:bc:96:06:6b: ca:88:e2:46:f3:f4:1b:dd:e5:74:2c:6a:11:62:42: 81:a4:6c:90:c0:c0:67:60:2c:2d:76:1e:5c:58:cc: 2f:d2:fb:27:3b:18:ae:b7:c9:56:e8:de:51:d4:d5: 91:70:29:06:d1:8b:cc:76:74:7e:51:2d:7d:ac:22: b3:0a:a1:95:7a:02:21:e3:14:75:68:df:8c:7b:7c: 1f:21:25:bf:2c:53:c2:e5:0b:3f:49:fa:5e:ae:5a: d0:7d:2c:c6:05:63:c5:bb:d4:ac:11:27:95:49:0e: 1e:34:cf:7c:6c:cc:76:bd:11:9a:c3:a1:0a:08:34: 77:27:3b:ed:62:3f:20:e9:97:40:dc:1b:6c:e1:5e: b9:96:fd:dc:8f:09:40:85:da:d1:44:ff:29:96:c3: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F4:0A:35:84:59:53:E7:2C:27:34:D1:66:2A:35:84:DA:F0:54:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d12979a5-8675-3f47-a6db-c68ffbaade5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:dd:62:c3:12:bc:3d:9f:33:8c:b3:e6:9a:a4:f4:e5:3f:59: e7:46:62:1d:fb:38:21:25:39:e8:3c:b9:9b:21:d5:a5:27:ba: 33:02:ea:b3:b7:02:77:0c:e5:38:bf:cb:29:0d:9d:b3:80:5c: 68:2e:c6:67:3c:32:51:5e:1b:7d:a5:50:e9:7b:a8:79:23:7c: 18:46:2f:39:df:54:ea:2f:94:12:2c:3c:68:b5:d5:1f:f0:ea: 2e:15:9f:ab:d2:77:6f:6a:f7:44:be:d6:ce:3f:4b:7e:bd:75: c5:5c:9d:65:8f:77:da:2b:51:62:d2:08:0d:ca:53:9c:18:62: db:90:dd:71:95:c4:7d:89:69:1d:68:bb:c9:fe:d9:90:99:3d: 1f:9e:72:07:60:84:be:5a:f5:e1:e4:56:60:83:9b:e9:1c:ed: 4e:ae:c9:8d:bc:1d:8c:0b:a4:61:9d:2b:9f:39:30:fc:a4:d7: e3:3b:12:36:00:b9:eb:d3:b5:67:54:3c:e6:50:a8:55:b7:a2: 12:33:5d:cd:6d:67:ab:ee:77:4c:fc:95:09:ae:18:47:b6:5a: a1:c3:e5:57:6a:e0:14:c9:8f:7b:37:8d:0d:fe:4d:0e:a8:fc: af:80:86:70:96:f2:cf:d6:f9:8d:99:7c:d6:4f:64:dc:ef:1c: f4:89:b3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heosIPErpOzIkh/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk YzZhZjZhNTAtNzU2YS00MTNmLTliZjAtNWI4ZmZkOWEzYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXl/i3z3t5PkSKpw9yzwLnDI7KpiW/3OLLwC wZf2fjfk52I3V4GOlvz52rT/lph8yqPmMkaRf78gxk1WvVinXJFY5ncrWCHpTtxS cz87JT6iBrVontE/GU2QCXKZR305WPDjrryWBmvKiOJG8/Qb3eV0LGoRYkKBpGyQ wMBnYCwtdh5cWMwv0vsnOxiut8lW6N5R1NWRcCkG0YvMdnR+US19rCKzCqGVegIh 4xR1aN+Me3wfISW/LFPC5Qs/SfperlrQfSzGBWPFu9SsESeVSQ4eNM98bMx2vRGa w6EKCDR3JzvtYj8g6ZdA3Bts4V65lv3cjwlAhdrRRP8plsPl+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn0CjWEWVPnLCc00WYqNYTa8FQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDEyOTc5YTUtODY3NS0z ZjQ3LWE2ZGItYzY4ZmZiYWFkZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzFpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7dYsMSvD2fM4yz5pqk9OU/WedGYh37OCElOeg8uZsh1aUnujMC6rO3 AncM5Ti/yykNnbOAXGguxmc8MlFeG32lUOl7qHkjfBhGLznfVOovlBIsPGi11R/w 6i4Vn6vSd29q90S+1s4/S369dcVcnWWPd9orUWLSCA3KU5wYYtuQ3XGVxH2JaR1o u8n+2ZCZPR+ecgdghL5a9eHkVmCDm+kc7U6uyY28HYwLpGGdK585MPyk1+M7EjYA uevTtWdUPOZQqFW3ohIzXc1tZ6vud0z8lQmuGEe2WqHD5Vdq4BTJj3s3jQ3+TQ6o /K+AhnCW8s/W+Y2ZfNZPZNzvHPSJs/Q= -----END CERTIFICATE-----Generated at Wed Jul 29 02:56:47 2026 by rpki-client