$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4999c9e-a1a0-3bf7-98ea-995003dcd81c.roa File: d4999c9e-a1a0-3bf7-98ea-995003dcd81c.roa (raw, json) Hash identifier: LoXv11GgWpmCZJELSjNScTvvzL2UslnkqP46C6NhVds= Subject key identifier: 28:25:C3:2C:E2:78:A8:1E:1D:85:F0:78:35:1A:B5:84:96:5D:7B:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE52814C0401B8F269967C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4999c9e-a1a0-3bf7-98ea-995003dcd81c.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 20940 IP address blocks: 23.37.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:28:14:c0:40:1b:8f:26:99:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=ad101c72-4b2d-4f7c-a6e6-4190f3ecda41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:9f:3b:52:d9:e4:7a:45:4a:5f:6e:06:15: a6:a3:f2:50:93:7c:69:d2:04:cc:a1:0a:bd:68:05: da:a9:b1:74:9a:f8:5b:46:40:cc:5f:82:a8:80:68: 52:c3:31:ee:2a:3c:1c:98:f9:7d:b9:61:02:46:e6: 27:7a:5a:98:50:d0:2d:2d:a3:13:9c:0e:9d:c0:b8: 09:9e:7d:62:0d:34:54:59:24:02:f7:1f:06:4c:fe: 78:13:f2:75:4c:5a:82:1e:db:d0:14:97:af:0a:35: 24:04:b8:50:92:b9:7c:d2:33:ce:7f:a5:46:b0:19: b9:84:7b:2b:29:20:39:12:96:e0:46:db:d4:88:3d: 75:70:90:12:46:2f:45:3e:94:e9:2f:00:f9:b6:c0: d8:f6:84:eb:8a:d9:21:2a:a1:ef:62:ab:85:6b:14: b8:b4:6f:1d:e0:0a:0f:b7:7a:17:b5:1b:76:c9:63: 46:90:97:28:f9:d6:28:0c:01:2b:f7:e6:c1:39:9f: ec:f4:a0:e9:62:60:fb:b6:79:23:ab:e9:fe:e8:69: 91:1e:22:b4:3a:43:9f:a8:7c:a1:f7:45:12:f8:c6: cf:b1:af:77:67:14:11:c8:e7:85:ea:7b:2b:9b:8e: bd:ec:1e:a4:5a:cf:d4:5d:6d:6a:94:bf:29:de:c2: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:25:C3:2C:E2:78:A8:1E:1D:85:F0:78:35:1A:B5:84:96:5D:7B:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4999c9e-a1a0-3bf7-98ea-995003dcd81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b1:5a:66:1a:d4:6f:18:a7:7e:6e:ba:f3:54:3c:c9:b3:83: f3:0d:be:d3:95:1d:7b:d7:6b:b9:8f:a3:ef:6d:94:cc:72:68: df:0e:1c:fe:de:07:2b:60:56:f6:80:4d:0a:cb:df:02:4b:b4: 15:8d:5d:10:3b:59:d6:7a:c7:91:9c:ba:ce:e2:ee:9c:df:9d: 86:14:28:24:4d:c0:bb:88:5a:23:40:df:d8:f7:42:b6:eb:83: fe:51:b3:d5:72:97:99:67:e4:c2:0a:b3:5d:5d:be:f9:f4:6c: c5:85:dc:a4:d0:8f:33:f1:aa:e6:9c:09:76:d1:ab:ba:da:bf: 7f:bb:40:c9:1f:54:ad:c3:de:9a:03:6c:a7:2b:f6:a8:96:31: 6f:bc:6b:44:e2:07:30:74:5f:6c:0b:ad:c6:55:3a:d5:2e:ce: e3:d2:f5:05:c9:52:d0:a4:25:1e:af:bb:b4:f5:87:ed:59:50: ce:28:f1:b4:c4:6c:ec:5e:f0:22:4b:02:cc:a0:65:68:1f:0c: 9b:cf:8e:26:a5:01:cb:ce:25:4c:88:11:f5:66:fa:a5:e9:56: bc:9f:08:5d:2e:ed:4c:ce:a9:e7:3e:21:52:97:1e:b6:96:54: 4f:8d:83:e7:d9:61:4c:c1:79:d0:1b:af:11:62:46:1b:54:fe: 08:5d:e4:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5SgUwEAbjyaZZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk YWQxMDFjNzItNGIyZC00ZjdjLWE2ZTYtNDE5MGYzZWNkYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzqfO1LZ5HpFSl9uBhWmo/JQk3xp0gTMoQq9 aAXaqbF0mvhbRkDMX4KogGhSwzHuKjwcmPl9uWECRuYnelqYUNAtLaMTnA6dwLgJ nn1iDTRUWSQC9x8GTP54E/J1TFqCHtvQFJevCjUkBLhQkrl80jPOf6VGsBm5hHsr KSA5EpbgRtvUiD11cJASRi9FPpTpLwD5tsDY9oTritkhKqHvYquFaxS4tG8d4AoP t3oXtRt2yWNGkJco+dYoDAEr9+bBOZ/s9KDpYmD7tnkjq+n+6GmRHiK0OkOfqHyh 90US+MbPsa93ZxQRyOeF6nsrm4697B6kWs/UXW1qlL8p3sKF1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCglwyzieKgeHYXweDUatYSWXXuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQ5OTljOWUtYTFhMC0z YmY3LTk4ZWEtOTk1MDAzZGNkODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+xWmYa1G8Yp35uuvNUPMmzg/MNvtOVHXvXa7mPo+9tlMxyaN8OHP7e BytgVvaATQrL3wJLtBWNXRA7WdZ6x5Gcus7i7pzfnYYUKCRNwLuIWiNA39j3Qrbr g/5Rs9Vyl5ln5MIKs11dvvn0bMWF3KTQjzPxquacCXbRq7rav3+7QMkfVK3D3poD bKcr9qiWMW+8a0TiBzB0X2wLrcZVOtUuzuPS9QXJUtCkJR6vu7T1h+1ZUM4o8bTE bOxe8CJLAsygZWgfDJvPjialAcvOJUyIEfVm+qXpVryfCF0u7UzOqec+IVKXHraW VE+Ng+fZYUzBedAbrxFiRhtU/ghd5Ow= -----END CERTIFICATE-----Generated at Wed Jul 29 01:32:22 2026 by rpki-client