$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7cb9fa4-961b-353f-9441-dcf13999b263.roa File: e7cb9fa4-961b-353f-9441-dcf13999b263.roa (raw, json) Hash identifier: FgIbEVfXXyLEgb3wWBellz0mtTlIMgokXKoDmbmsv1w= Subject key identifier: EC:21:53:13:97:29:86:DB:4A:F2:C2:64:55:BE:25:E1:59:2B:40:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9BE52B32B7D4F734508F36C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7cb9fa4-961b-353f-9441-dcf13999b263.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 16625 IP address blocks: 23.40.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:2b:32:b7:d4:f7:34:50:8f:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=9d16e3a8-d606-46f1-93f9-0dda2fcfa664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:61:e4:b0:f4:69:07:81:61:24:3f:5d:bd:0d: 36:72:f7:00:50:35:ab:20:7a:ec:25:3a:93:e6:7d: 56:1c:63:8a:54:43:d3:f9:67:b7:d3:49:af:9d:4a: c3:73:e1:86:f8:3c:4d:3f:76:7a:53:9b:de:ac:ee: c7:01:fc:51:28:3b:53:e7:43:e1:e9:50:da:22:2b: bc:7e:b8:d4:39:b0:e4:12:85:36:5d:19:2e:a1:cd: 6c:28:b6:c3:ab:e4:9d:45:e1:54:72:1f:29:37:0c: 5c:d2:df:c8:64:2e:8c:ab:08:a4:ec:59:3a:0b:12: bf:e0:96:24:0d:8b:bb:c7:03:87:06:3a:ce:a1:1f: e5:ed:46:6d:6e:83:28:67:f7:db:e1:6b:af:61:89: b4:28:f5:38:ae:e7:ab:f5:f2:34:07:2a:d1:03:82: d6:50:1b:2d:6b:40:3c:e3:d8:af:2f:4b:70:ee:ba: ee:45:a2:13:b9:b3:2d:f8:bc:46:87:b1:ec:91:7d: d7:65:4f:53:c5:f3:62:b4:49:a4:df:7d:6a:de:0e: cb:17:ce:a9:22:52:61:0b:88:df:07:95:64:6b:44: c9:ed:a8:f0:5e:88:87:14:cd:1e:b2:b6:ad:63:65: 3f:69:64:3f:07:52:e2:3c:4e:9c:aa:8d:b1:d4:b9: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:21:53:13:97:29:86:DB:4A:F2:C2:64:55:BE:25:E1:59:2B:40:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7cb9fa4-961b-353f-9441-dcf13999b263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:41:9a:f0:a0:5e:47:8e:9c:12:7a:02:a2:ea:59:9f:cf:7c: 2b:9d:9e:99:95:d5:ba:ae:99:dc:d4:1e:9e:2e:cb:39:45:11: c9:33:d1:e1:04:52:69:3d:b3:07:84:f2:d4:53:9a:81:f1:cf: 5b:9b:c9:c1:87:38:7e:12:0e:a6:68:1d:e7:bc:63:86:ce:44: dd:a2:ef:7a:c3:2f:e7:7a:6b:08:94:9b:80:84:cd:3d:12:0e: 80:60:d1:96:35:38:82:cb:ac:de:01:89:f3:0b:0d:56:10:59: ce:37:cf:e8:dc:14:e0:56:af:de:07:bf:35:ee:e4:f6:36:31: ef:30:73:76:4f:f0:c2:ab:82:3e:95:85:3b:39:88:da:18:84: fe:b3:6e:93:6f:52:06:d0:6f:8c:5b:89:68:23:b7:8c:84:ee: 49:28:92:4d:f9:49:46:9e:24:1c:8c:17:cf:e7:91:83:b4:5f: 11:c7:76:5c:a4:1d:41:dd:e3:fa:7a:5f:d9:a9:fa:8a:10:96: 39:41:86:db:9a:5e:ba:2f:7b:fa:d1:20:d3:81:00:9e:f7:46: 67:97:84:ce:84:b7:af:fa:52:3b:9f:25:b2:8a:53:b4:81:de: 68:52:69:25:b6:9c:55:1b:42:da:94:3d:30:bd:78:63:b1:ab: 1b:9c:fe:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Ssyt9T3NFCPNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk OWQxNmUzYTgtZDYwNi00NmYxLTkzZjktMGRkYTJmY2ZhNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmHksPRpB4FhJD9dvQ02cvcAUDWrIHrsJTqT 5n1WHGOKVEPT+We300mvnUrDc+GG+DxNP3Z6U5verO7HAfxRKDtT50Ph6VDaIiu8 frjUObDkEoU2XRkuoc1sKLbDq+SdReFUch8pNwxc0t/IZC6Mqwik7Fk6CxK/4JYk DYu7xwOHBjrOoR/l7UZtboMoZ/fb4WuvYYm0KPU4ruer9fI0ByrRA4LWUBsta0A8 49ivL0tw7rruRaITubMt+LxGh7HskX3XZU9TxfNitEmk331q3g7LF86pIlJhC4jf B5Vka0TJ7ajwXoiHFM0esratY2U/aWQ/B1LiPE6cqo2x1LnWcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwhUxOXKYbbSvLCZFW+JeFZK0BbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTdjYjlmYTQtOTYxYi0z NTNmLTk0NDEtZGNmMTM5OTliMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5BmvCgXkeOnBJ6AqLqWZ/PfCudnpmV1bqumdzUHp4uyzlFEckz0eEE Umk9sweE8tRTmoHxz1ubycGHOH4SDqZoHee8Y4bORN2i73rDL+d6awiUm4CEzT0S DoBg0ZY1OILLrN4BifMLDVYQWc43z+jcFOBWr94HvzXu5PY2Me8wc3ZP8MKrgj6V hTs5iNoYhP6zbpNvUgbQb4xbiWgjt4yE7kkokk35SUaeJByMF8/nkYO0XxHHdlyk HUHd4/p6X9mp+ooQljlBhtuaXrove/rRINOBAJ73RmeXhM6Et6/6UjufJbKKU7SB 3mhSaSW2nFUbQtqUPTC9eGOxqxuc/oI= -----END CERTIFICATE-----Generated at Wed Jul 29 01:50:42 2026 by rpki-client