$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa File: dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa (raw, json) Hash identifier: BdRQrFj67/SOqEihrkcmymiUm1SG2RMu3iP7bhlMBkU= Subject key identifier: 98:61:E7:D6:3E:7B:D1:CA:C1:14:F1:C8:BF:D8:7F:22:FB:E8:CE:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA78815F5140152F704F17840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7713 IP address blocks: 23.212.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:15:f5:14:01:52:f7:04:f1:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8716b304-85bf-422f-ba0a-64c04bb9eef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:70:35:01:3d:2f:af:39:ad:ad:83:d2:43:23: 00:b0:89:4d:d3:71:45:a4:ae:03:ee:41:47:48:2d: 45:7d:45:6a:dd:0f:52:6b:48:13:61:4c:18:8b:d0: 68:5e:dc:58:73:b1:db:ba:66:72:d1:fd:2e:47:21: f7:fa:98:43:36:06:b3:9d:fc:39:f3:9f:ae:16:3a: ea:8b:92:61:f1:10:37:1f:13:22:41:ad:87:42:20: 1f:ed:66:bd:bd:f2:17:3d:e6:12:43:a2:68:8b:45: 46:da:47:a0:e0:90:d2:e8:d1:55:0d:f5:9e:c3:a3: 81:d2:fa:72:92:a4:e5:a6:a0:b5:a0:4a:ed:f5:d4: d7:a8:70:75:e2:b1:42:62:3a:98:cc:0e:e2:81:d2: 9c:3f:58:51:38:be:14:67:02:a5:30:86:13:cf:73: 84:2d:a3:e7:79:19:e9:06:f4:93:40:eb:e5:27:44: 15:df:93:90:3c:19:20:64:3c:7b:bd:da:bb:81:db: 0b:b0:3c:14:2e:df:ed:ef:4c:a6:24:f7:fb:17:82: c4:9b:97:76:ef:ef:c9:53:6b:22:d2:3b:32:9b:75: d0:c0:d5:ac:03:ca:3d:f2:d9:1b:43:56:53:e6:3a: 8b:50:a2:f4:b8:4f:57:85:eb:20:3e:f8:09:7a:7d: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:61:E7:D6:3E:7B:D1:CA:C1:14:F1:C8:BF:D8:7F:22:FB:E8:CE:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0c:cf:97:9d:6b:48:bd:f3:9b:00:b0:e2:60:80:b1:15:e5: fd:4f:4d:57:b3:12:a9:59:51:0f:5b:68:fd:4a:51:d4:7d:be: 4e:0f:6f:0f:9d:54:1b:20:7e:2f:cb:c1:80:35:7f:55:02:28: d6:8b:7b:b4:b9:19:b0:7f:4b:f8:1c:c7:73:11:3b:7f:17:6d: fd:31:e6:41:fd:b3:67:17:0b:ea:08:f4:61:32:8d:36:e1:ec: b9:f1:aa:c6:0d:2e:44:bd:5e:04:c4:9a:f3:2b:37:e0:80:29: b4:f6:ab:41:6f:4b:e3:26:c3:b1:a5:3f:1f:6b:16:d8:fd:d0: f0:de:bb:8e:94:32:04:06:5e:30:0e:85:76:3d:2d:4c:a0:91: a8:bf:20:43:d6:67:48:81:06:43:87:41:46:d5:ee:5b:6f:ea: 36:68:58:f9:f6:21:1c:25:1c:5f:a9:e9:a2:b8:91:05:8e:9a: bd:c8:d4:25:75:53:8c:84:e3:21:56:c7:1d:a7:52:a3:74:79: 3c:c4:7f:6b:bb:57:5b:c1:0c:38:a5:f0:d6:2a:45:fa:ff:b0: ac:0e:b8:f9:b6:e9:57:a3:c9:a3:37:ce:14:ec:98:fb:55:2f: a8:7d:1b:a3:ae:72:da:c3:01:8d:1f:f0:ee:d7:1d:07:2c:0a: e3:ed:1c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niBX1FAFS9wTxeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODcxNmIzMDQtODViZi00MjJmLWJhMGEtNjRjMDRiYjllZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXA1AT0vrzmtrYPSQyMAsIlN03FFpK4D7kFH SC1FfUVq3Q9Sa0gTYUwYi9BoXtxYc7HbumZy0f0uRyH3+phDNgaznfw585+uFjrq i5Jh8RA3HxMiQa2HQiAf7Wa9vfIXPeYSQ6Joi0VG2keg4JDS6NFVDfWew6OB0vpy kqTlpqC1oErt9dTXqHB14rFCYjqYzA7igdKcP1hROL4UZwKlMIYTz3OELaPneRnp BvSTQOvlJ0QV35OQPBkgZDx7vdq7gdsLsDwULt/t70ymJPf7F4LEm5d27+/JU2si 0jsym3XQwNWsA8o98tkbQ1ZT5jqLUKL0uE9XhesgPvgJen2h1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhh59Y+e9HKwRTxyL/YfyL76M43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZjY2Q5OWQtYTA3ZS0z ZGRiLWEyNDYtYzY2ZDQ0ODEyZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9RwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4Mz5eda0i985sAsOJggLEV5f1PTVezEqlZUQ9baP1KUdR9vk4Pbw+d VBsgfi/LwYA1f1UCKNaLe7S5GbB/S/gcx3MRO38Xbf0x5kH9s2cXC+oI9GEyjTbh 7LnxqsYNLkS9XgTEmvMrN+CAKbT2q0FvS+Mmw7GlPx9rFtj90PDeu46UMgQGXjAO hXY9LUygkai/IEPWZ0iBBkOHQUbV7ltv6jZoWPn2IRwlHF+p6aK4kQWOmr3I1CV1 U4yE4yFWxx2nUqN0eTzEf2u7V1vBDDil8NYqRfr/sKwOuPm26VejyaM3zhTsmPtV L6h9G6OuctrDAY0f8O7XHQcsCuPtHGU= -----END CERTIFICATE-----Generated at Wed Jul 29 08:04:03 2026 by rpki-client