$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8e826b6-9cb5-3ebb-89a1-1253c7272b19.roa File: d8e826b6-9cb5-3ebb-89a1-1253c7272b19.roa (raw, json) Hash identifier: IpHr+H9cPV8MQv5NGdVCfFb093nd5Gy022crB0djBjs= Subject key identifier: A2:A0:49:E6:43:24:41:2C:BA:6E:7E:30:29:CC:9C:8E:B8:AE:0D:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9D4A9E967A0CB3BD3A23AAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8e826b6-9cb5-3ebb-89a1-1253c7272b19.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:9e:96:7a:0c:b3:bd:3a:23:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=0ee6a53f-d382-4713-9098-da112fd06f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:7a:94:1c:46:df:df:fd:2e:76:df:63:23: 87:53:bd:4f:56:c4:5c:52:cf:fc:21:49:fa:dd:0f: d0:76:60:e2:f9:da:f5:f9:72:0d:c5:ea:e8:a7:ac: 3e:18:4b:8e:eb:20:c9:8e:52:23:12:d9:8a:14:cd: 46:87:0c:53:c3:b7:08:c9:ea:7c:4b:72:9e:74:a1: dd:8a:c3:2c:41:6b:4f:81:80:d7:b4:e9:0c:ff:79: f5:26:d7:10:7e:89:46:4c:cc:d4:c7:4d:56:b7:3a: 41:7d:9c:9f:67:fa:33:3e:82:1d:a0:91:79:cc:3f: c2:4b:51:89:7b:01:7e:4e:79:5a:83:20:c2:5c:b7: b7:91:74:e3:e5:03:8c:ec:4d:b3:41:fd:4f:9c:c0: d7:e4:b6:f2:0d:51:35:c2:40:8e:36:66:b6:5a:d6: e1:e0:8c:52:ad:d3:09:88:71:07:36:59:39:75:5f: 0d:64:bf:dd:b4:1c:1a:95:c3:cc:67:cd:2a:94:e4: a0:c0:20:f3:38:47:bf:f4:14:eb:55:65:59:85:08: ff:0b:d7:a3:c8:04:55:1c:ae:9d:8d:c1:3f:ae:42: 72:0e:47:be:f8:76:31:25:56:04:b2:ad:ab:70:65: 39:90:a6:9d:f4:99:07:28:eb:83:93:23:24:01:b6: b9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A0:49:E6:43:24:41:2C:BA:6E:7E:30:29:CC:9C:8E:B8:AE:0D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8e826b6-9cb5-3ebb-89a1-1253c7272b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:0e:7a:55:89:dd:69:d4:53:aa:e2:79:12:ee:d8:8e:12:94: e8:43:38:70:53:74:15:4b:bf:94:19:3a:a0:b8:3c:7c:e7:19: b8:35:74:dc:f7:bf:9f:48:bf:bd:ce:df:7d:2e:30:26:87:8d: 45:2c:d3:fc:16:cd:a3:a8:fc:c5:cc:77:12:8f:3d:e9:ba:92: 4d:38:51:f1:b8:85:ab:b6:e5:e5:f4:1e:d5:bd:90:9f:bb:c5: 94:b1:5d:74:ad:6b:bf:9e:00:cf:7e:ba:a8:2c:7c:40:14:e9: 2b:e1:86:3b:83:a2:2f:d8:a9:d7:bd:4d:e6:fe:f1:6b:fe:5c: a7:09:39:5a:e4:54:ca:7a:6c:f9:59:7a:5c:9f:60:95:a4:3f: a4:22:1a:a4:41:a4:38:cb:eb:58:3b:70:34:b4:15:a2:cb:7c: 48:42:3c:1a:01:d4:25:de:f8:6f:30:ec:84:90:b2:28:61:2b: 42:bf:a2:ab:3b:a5:35:08:9b:34:e5:45:28:67:62:b8:c8:90: 4d:5a:be:da:68:fd:f3:6d:7d:1b:e1:c2:78:80:07:43:94:b5: ac:f0:cc:b8:bf:19:d1:88:60:85:ca:78:6c:1b:25:fc:84:d4: 40:dd:ff:55:c2:41:b5:63:33:22:92:63:65:6b:34:56:9a:02: ac:68:f9:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSp6WegyzvTojqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MGVlNmE1M2YtZDM4Mi00NzEzLTkwOTgtZGExMTJmZDA2ZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9p6lBxG39/9LnbfYyOHU71PVsRcUs/8IUn6 3Q/QdmDi+dr1+XINxerop6w+GEuO6yDJjlIjEtmKFM1GhwxTw7cIyep8S3KedKHd isMsQWtPgYDXtOkM/3n1JtcQfolGTMzUx01WtzpBfZyfZ/ozPoIdoJF5zD/CS1GJ ewF+TnlagyDCXLe3kXTj5QOM7E2zQf1PnMDX5LbyDVE1wkCONma2Wtbh4IxSrdMJ iHEHNlk5dV8NZL/dtBwalcPMZ80qlOSgwCDzOEe/9BTrVWVZhQj/C9ejyARVHK6d jcE/rkJyDke++HYxJVYEsq2rcGU5kKad9JkHKOuDkyMkAba5PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKgSeZDJEEsum5+MCnMnI64rg1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDhlODI2YjYtOWNiNS0z ZWJiLTg5YTEtMTI1M2M3MjcyYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIOelWJ3WnUU6rieRLu2I4SlOhDOHBTdBVLv5QZOqC4PHznGbg1dNz3 v59Iv73O330uMCaHjUUs0/wWzaOo/MXMdxKPPem6kk04UfG4hau25eX0HtW9kJ+7 xZSxXXSta7+eAM9+uqgsfEAU6SvhhjuDoi/Yqde9Teb+8Wv+XKcJOVrkVMp6bPlZ elyfYJWkP6QiGqRBpDjL61g7cDS0FaLLfEhCPBoB1CXe+G8w7ISQsihhK0K/oqs7 pTUImzTlRShnYrjIkE1avtpo/fNtfRvhwniAB0OUtazwzLi/GdGIYIXKeGwbJfyE 1EDd/1XCQbVjMyKSY2VrNFaaAqxo+bM= -----END CERTIFICATE-----Generated at Wed Jul 29 03:00:44 2026 by rpki-client