$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c9c65c-d4c9-33e4-a2d0-1b76c1e7e0c2.roa File: d5c9c65c-d4c9-33e4-a2d0-1b76c1e7e0c2.roa (raw, json) Hash identifier: toKm1v62KdPG9n4D6UXqIWiaro7osUhABI5DMG922gg= Subject key identifier: C0:13:FB:8D:A6:CE:2A:1A:ED:C9:63:DA:CF:B1:C6:DA:51:C1:65:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA5AA7F3BC10D36F91D561D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c9c65c-d4c9-33e4-a2d0-1b76c1e7e0c2.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.53.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:7f:3b:c1:0d:36:f9:1d:56:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=3e017a37-bfa9-4a3e-809c-05faa2f5757d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:1f:82:b6:da:13:79:1f:81:5c:b5:dd:e5: c5:6d:a3:02:38:de:c7:b4:71:33:a6:53:0a:f9:aa: d6:3c:a0:39:f5:ee:c0:d0:bd:1d:e7:2c:82:13:51: 3b:fc:c0:f2:51:bf:fc:d2:6e:ab:14:44:f5:d5:92: e0:11:5a:b5:0b:30:2a:9d:3e:90:4b:7d:7b:92:8a: 36:12:b4:ac:03:62:24:e9:39:7a:31:23:66:f8:c5: b9:50:ce:53:ed:ce:92:7f:32:6e:10:28:ab:11:80: 63:e5:25:da:b0:63:ba:0d:b0:ef:6d:cc:de:8c:d3: a0:d7:0b:68:e1:09:fc:a2:b2:a7:85:59:8d:6e:75: 3c:d5:bf:5d:8b:49:9c:43:b2:58:73:e0:31:87:03: 4c:e9:e7:fd:61:b7:a5:4b:0d:5f:a0:62:47:ef:d7: 4d:8b:2d:bd:7b:94:9e:54:51:67:6a:b2:57:23:4f: 39:85:76:30:72:f2:4a:6f:a7:c9:13:98:df:60:07: 20:9d:0e:39:b0:ba:1d:09:fd:24:13:17:6d:54:1d: 9c:ca:b0:52:10:84:88:e6:22:f4:c5:b8:54:a3:9e: f4:66:f6:19:9a:0a:06:dc:0e:79:8c:f4:83:a7:3c: b7:dc:93:2a:7b:e3:1e:5c:be:d7:7c:b4:72:32:40: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:13:FB:8D:A6:CE:2A:1A:ED:C9:63:DA:CF:B1:C6:DA:51:C1:65:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c9c65c-d4c9-33e4-a2d0-1b76c1e7e0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d4:34:af:0d:b5:5b:ff:fd:89:e7:40:92:09:ce:11:53:01: a9:8c:d8:c4:f1:a2:fc:62:98:d8:0a:25:71:79:9c:e8:de:8e: 24:cb:97:fb:08:c0:ad:e6:42:f2:a2:eb:c0:b5:ca:3d:5b:6b: fb:c3:b9:56:ec:e8:de:7e:27:ee:fa:b2:b6:78:dd:40:ae:fc: 5d:8e:2f:04:67:7a:24:ca:eb:8d:92:6e:9c:a0:f2:0b:54:61: 75:95:01:5b:72:0d:98:7d:d4:10:c2:5f:ab:0d:05:47:1e:92: 2b:f8:57:43:60:52:3c:cc:4a:0c:a0:fb:f1:0f:e6:c5:01:7a: ab:36:a8:ef:90:6d:29:fb:1d:76:1f:1d:c1:74:d0:8e:2e:ee: ba:0c:f4:6e:5e:13:7f:fe:1c:27:06:ca:31:75:8b:b4:ec:07: 33:f2:93:7d:02:9b:35:80:21:a6:8b:04:0e:86:0c:12:af:ac: c9:18:6f:6a:b3:4f:3c:f6:75:4f:2b:57:fd:15:70:ba:bd:a4: f6:cc:a9:26:7b:14:92:c3:dd:b3:8d:a8:4b:af:56:47:83:3a: bd:f3:50:ba:e3:bb:d8:7e:de:47:a1:14:ed:34:a0:65:c5:1b: e2:94:e1:aa:68:2f:f6:4d:1a:a1:a9:43:e0:9b:5d:43:03:c6: 7e:db:6b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqn87wQ02+R1WHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk M2UwMTdhMzctYmZhOS00YTNlLTgwOWMtMDVmYWEyZjU3NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXIfgrbaE3kfgVy13eXFbaMCON7HtHEzplMK +arWPKA59e7A0L0d5yyCE1E7/MDyUb/80m6rFET11ZLgEVq1CzAqnT6QS317koo2 ErSsA2Ik6Tl6MSNm+MW5UM5T7c6SfzJuECirEYBj5SXasGO6DbDvbczejNOg1wto 4Qn8orKnhVmNbnU81b9di0mcQ7JYc+AxhwNM6ef9YbelSw1foGJH79dNiy29e5Se VFFnarJXI085hXYwcvJKb6fJE5jfYAcgnQ45sLodCf0kExdtVB2cyrBSEISI5iL0 xbhUo570ZvYZmgoG3A55jPSDpzy33JMqe+MeXL7XfLRyMkBYVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAT+42mzioa7clj2s+xxtpRwWURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVjOWM2NWMtZDRjOS0z M2U0LWEyZDAtMWI3NmMxZTdlMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzUjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnUNK8NtVv//YnnQJIJzhFTAamM2MTxovximNgKJXF5nOjejiTLl/sI wK3mQvKi68C1yj1ba/vDuVbs6N5+J+76srZ43UCu/F2OLwRneiTK642Sbpyg8gtU YXWVAVtyDZh91BDCX6sNBUcekiv4V0NgUjzMSgyg+/EP5sUBeqs2qO+QbSn7HXYf HcF00I4u7roM9G5eE3/+HCcGyjF1i7TsBzPyk30CmzWAIaaLBA6GDBKvrMkYb2qz Tzz2dU8rV/0VcLq9pPbMqSZ7FJLD3bONqEuvVkeDOr3zULrju9h+3kehFO00oGXF G+KU4apoL/ZNGqGpQ+CbXUMDxn7ba+M= -----END CERTIFICATE-----Generated at Wed Jul 29 01:28:24 2026 by rpki-client