$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7618c4-a67a-3f97-a105-2e8136fb0dad.roa File: df7618c4-a67a-3f97-a105-2e8136fb0dad.roa (raw, json) Hash identifier: yYDEgZQpOqySGF/p2t5aZCpCr6zS+H1TYW+nmuSBc4Y= Subject key identifier: 92:A3:D8:E4:AD:FD:1F:BA:4E:B5:36:16:60:BF:26:E9:BB:05:31:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA5AA93AB05DFE3D5896E3580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7618c4-a67a-3f97-a105-2e8136fb0dad.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 45899 IP address blocks: 23.53.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:93:ab:05:df:e3:d5:89:6e:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=fc1a44f9-b562-435c-a956-e25839bbffd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:83:66:1e:c7:6a:6a:59:6b:e7:9a:ff:d6: a0:20:e5:b7:a0:2c:d5:e8:d8:56:00:e8:f0:5d:7c: 7c:f0:a3:7e:c6:fc:a7:72:73:79:ba:c9:29:37:97: 9e:af:48:fd:dd:08:aa:4d:80:4c:a9:a0:97:a7:4c: db:46:39:4e:df:a8:a7:6d:06:af:92:42:59:ef:17: 32:b1:fb:4b:13:3b:bd:44:50:47:e4:f5:77:93:0e: c3:b4:31:d2:85:16:55:12:fb:1b:7d:8b:26:ed:8b: c0:aa:1e:c0:29:3b:9e:de:5d:54:ea:bb:cc:ac:15: 81:6e:a9:84:bb:f8:71:cd:a3:71:60:a5:82:d1:8b: 31:94:31:d2:f8:4c:35:ed:cd:38:f9:d1:47:a3:37: c7:be:f1:6f:7c:28:6a:b1:54:e4:c2:00:af:00:cb: 94:70:15:5b:9b:b2:cc:3f:2e:5c:44:20:4a:32:65: bf:c1:0a:d4:c8:1d:4a:c0:81:00:99:12:9e:f2:2d: 98:68:ab:11:8b:e6:1e:d3:27:48:63:29:fa:11:3a: 1b:0a:bf:a3:fd:52:15:1e:7c:75:85:e7:b4:30:0a: 4f:0f:3d:a8:56:bc:24:1e:b4:03:6b:37:a5:48:b3: 9f:89:06:07:98:be:cd:a2:69:3c:73:4c:55:1f:26: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A3:D8:E4:AD:FD:1F:BA:4E:B5:36:16:60:BF:26:E9:BB:05:31:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7618c4-a67a-3f97-a105-2e8136fb0dad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c4:45:73:e5:5d:b6:1b:34:4f:d5:ae:0e:c7:fc:d3:a3:fc: 30:ab:6a:5d:06:87:15:e7:65:bd:0e:c2:e5:de:cf:19:02:5c: 3f:6a:f9:79:cb:fa:65:fd:2f:b4:11:18:d9:3e:88:cb:aa:b6: 3f:cb:bf:5c:fc:52:d4:90:01:05:92:34:55:45:cf:9f:90:35: 8a:60:c6:91:3e:95:08:8e:11:80:92:1f:6a:07:63:95:43:d8: a7:35:7e:66:ec:ce:60:c3:57:e7:84:b2:fc:6c:6e:5e:2f:06: 03:00:b1:a3:1f:74:04:12:9f:7e:7e:22:d9:21:78:97:07:35: 2b:16:c0:63:96:8d:06:6c:2c:1f:98:49:08:90:df:91:af:d1: d0:4d:8b:02:a9:6a:da:20:fa:34:55:fb:8c:e1:af:89:59:94: 52:1b:1a:6d:fc:f1:e0:8c:f0:5c:e1:df:45:5b:bc:29:a9:a7: dc:cf:32:d5:d7:56:67:82:c9:8d:e7:95:85:04:51:57:60:49: bf:f8:22:b7:08:3b:a7:a2:9a:2c:0b:f8:3e:16:f3:af:0b:a9: 99:88:68:05:29:c0:0e:3a:30:34:21:77:4a:7b:f0:40:cd:57: 47:bc:e0:5a:9a:59:fd:a0:a7:92:b6:d5:a5:b1:88:b5:e8:fc: 34:40:ba:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqpOrBd/j1YluNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk ZmMxYTQ0ZjktYjU2Mi00MzVjLWE5NTYtZTI1ODM5YmJmZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCODZh7HampZa+ea/9agIOW3oCzV6NhWAOjw XXx88KN+xvyncnN5uskpN5eer0j93QiqTYBMqaCXp0zbRjlO36inbQavkkJZ7xcy sftLEzu9RFBH5PV3kw7DtDHShRZVEvsbfYsm7YvAqh7AKTue3l1U6rvMrBWBbqmE u/hxzaNxYKWC0YsxlDHS+Ew17c04+dFHozfHvvFvfChqsVTkwgCvAMuUcBVbm7LM Py5cRCBKMmW/wQrUyB1KwIEAmRKe8i2YaKsRi+Ye0ydIYyn6ETobCr+j/VIVHnx1 hee0MApPDz2oVrwkHrQDazelSLOfiQYHmL7Nomk8c0xVHybT9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKj2OSt/R+6TrU2FmC/Jum7BTHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY3NjE4YzQtYTY3YS0z Zjk3LWExMDUtMmU4MTM2ZmIwZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXERXPlXbYbNE/Vrg7H/NOj/DCral0GhxXnZb0OwuXezxkCXD9q+XnL +mX9L7QRGNk+iMuqtj/Lv1z8UtSQAQWSNFVFz5+QNYpgxpE+lQiOEYCSH2oHY5VD 2Kc1fmbszmDDV+eEsvxsbl4vBgMAsaMfdAQSn35+ItkheJcHNSsWwGOWjQZsLB+Y SQiQ35Gv0dBNiwKpatog+jRV+4zhr4lZlFIbGm388eCM8Fzh30VbvCmpp9zPMtXX VmeCyY3nlYUEUVdgSb/4IrcIO6eimiwL+D4W868LqZmIaAUpwA46MDQhd0p78EDN V0e84FqaWf2gp5K21aWxiLXo/DRAuoU= -----END CERTIFICATE-----Generated at Wed Jul 29 03:00:18 2026 by rpki-client