$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2ebd1a2-537d-3a67-810c-8662ce050754.roa File: e2ebd1a2-537d-3a67-810c-8662ce050754.roa (raw, json) Hash identifier: bfjFVfkmUIsFU4c1UA0sC0p4w2tHKVhaqBrfMBn9QoM= Subject key identifier: 02:62:42:BF:9F:62:2F:86:2E:0B:CF:E6:73:0D:4C:62:FA:EB:B3:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9D4A9E3BF6C072CBFCAE1A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2ebd1a2-537d-3a67-810c-8662ce050754.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.43.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:9e:3b:f6:c0:72:cb:fc:ae:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=4536b0ed-af2e-43a2-aca7-4cfe63300894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d7:55:1c:23:bb:fd:b4:7f:89:e9:bc:f9:cf: 1e:39:df:29:0b:22:7e:de:65:b5:d6:14:2e:85:70: d3:5e:4f:b0:92:5d:f7:ee:05:71:d4:3f:c4:89:27: 87:ef:2e:7c:bb:a1:14:91:7d:40:22:66:35:12:b4: cf:c2:43:c0:ff:87:60:13:86:91:7b:bb:f1:b4:4a: 11:e8:cf:aa:b5:14:54:4a:f1:f4:4f:dd:64:7e:73: 0f:39:8a:25:fd:da:cf:ce:d1:45:7f:0c:64:79:03: 6b:18:d7:15:81:5c:80:ea:fc:b9:f0:7b:14:84:c4: 17:e0:ba:47:45:67:d8:d9:4b:68:11:fb:17:8c:70: 1c:e1:9c:89:8d:4d:21:f5:00:53:fe:73:64:ef:ac: 99:df:d3:e8:92:7f:a5:b6:69:5f:cc:2e:8a:83:75: 3d:97:0b:6e:27:47:b2:cc:bc:44:46:9d:89:2a:4f: ab:f1:60:b2:ed:a9:dd:d0:16:69:cf:22:ae:55:52: b3:2f:d1:bd:d0:c3:32:5d:3b:7c:b8:28:d5:9e:ae: 7a:f2:6e:e1:83:7f:df:59:02:f6:c1:71:30:84:ee: f7:f0:ea:93:f9:73:7c:b7:3e:a9:a1:d0:4d:ad:9e: 86:44:ec:62:f1:79:c1:d5:35:4a:5f:61:eb:4f:88: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:62:42:BF:9F:62:2F:86:2E:0B:CF:E6:73:0D:4C:62:FA:EB:B3:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2ebd1a2-537d-3a67-810c-8662ce050754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:89:68:ad:da:8f:00:3a:ab:95:cf:d0:27:87:8c:8d:7f:1f: c3:b6:01:ed:fe:5d:6a:f5:87:26:68:a1:cd:dc:b6:cc:a9:46: 93:95:8c:fb:42:40:6d:eb:2f:8f:2b:f7:ab:00:14:29:7f:05: 81:6b:ab:16:7d:32:f4:b1:8c:08:0a:25:0c:26:f4:23:2a:a8: 8d:45:ab:56:0e:63:52:63:2d:ce:5e:0c:6b:13:69:b8:45:95: 85:40:e1:a7:96:69:28:46:f2:2e:73:3d:ad:bf:ed:13:3b:e7: 05:8a:ad:25:f6:bc:09:c6:45:65:c3:1e:bb:ed:29:7e:b1:45: ff:f5:06:a6:31:70:1d:34:95:d1:3d:0c:0a:73:b1:9b:6a:55: e0:17:40:ac:32:43:7a:ca:6a:2f:83:b9:9e:91:32:2b:98:0c: 5f:e7:14:00:89:4d:43:0f:d6:19:3a:b9:84:19:6e:9e:50:3b: 30:6c:7c:33:86:09:68:f3:b5:e7:97:3b:94:be:d9:68:e7:af: f9:31:53:cf:dc:c4:79:fd:d7:45:67:7d:d5:5b:5c:e3:8a:04: b9:19:4d:8b:28:36:72:b3:df:d3:b9:ac:54:c2:c3:e9:bf:46: c7:b3:e6:cf:85:35:7d:ab:b7:e3:11:e4:36:55:09:3f:e2:9c: 19:d8:46:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSp479sByy/yuGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NDUzNmIwZWQtYWYyZS00M2EyLWFjYTctNGNmZTYzMzAwODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNdVHCO7/bR/iem8+c8eOd8pCyJ+3mW11hQu hXDTXk+wkl337gVx1D/EiSeH7y58u6EUkX1AImY1ErTPwkPA/4dgE4aRe7vxtEoR 6M+qtRRUSvH0T91kfnMPOYol/drPztFFfwxkeQNrGNcVgVyA6vy58HsUhMQX4LpH RWfY2UtoEfsXjHAc4ZyJjU0h9QBT/nNk76yZ39Pokn+ltmlfzC6Kg3U9lwtuJ0ey zLxERp2JKk+r8WCy7and0BZpzyKuVVKzL9G90MMyXTt8uCjVnq568m7hg3/fWQL2 wXEwhO738OqT+XN8tz6podBNrZ6GROxi8XnB1TVKX2HrT4gnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJiQr+fYi+GLgvP5nMNTGL667MOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTJlYmQxYTItNTM3ZC0z YTY3LTgxMGMtODY2MmNlMDUwNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFytWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyJaK3ajwA6q5XP0CeHjI1/H8O2Ae3+XWr1hyZooc3ctsypRpOVjPtC QG3rL48r96sAFCl/BYFrqxZ9MvSxjAgKJQwm9CMqqI1Fq1YOY1JjLc5eDGsTabhF lYVA4aeWaShG8i5zPa2/7RM75wWKrSX2vAnGRWXDHrvtKX6xRf/1BqYxcB00ldE9 DApzsZtqVeAXQKwyQ3rKai+DuZ6RMiuYDF/nFACJTUMP1hk6uYQZbp5QOzBsfDOG CWjzteeXO5S+2Wjnr/kxU8/cxHn910VnfdVbXOOKBLkZTYsoNnKz39O5rFTCw+m/ Rsez5s+FNX2rt+MR5DZVCT/inBnYRhg= -----END CERTIFICATE-----Generated at Wed Jul 29 02:57:30 2026 by rpki-client