$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f14625b4-a283-3a33-9ea9-b23b0dabf708.roa File: f14625b4-a283-3a33-9ea9-b23b0dabf708.roa (raw, json) Hash identifier: vMHh5CR6e14/6VWmTfBGuQXJUu7on+w5XWQqCrLBjBk= Subject key identifier: F4:5F:62:F8:2E:37:46:DA:35:21:4C:78:D0:41:C8:DB:84:66:6F:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9D4A9E5D0319697A0B03C280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f14625b4-a283-3a33-9ea9-b23b0dabf708.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.43.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:9e:5d:03:19:69:7a:0b:03:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=aa0750b4-2995-4d3b-89b0-0c4dad13f1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:8f:af:03:09:c1:5e:a1:cc:0e:f0:0e:c0: ed:e6:2f:af:64:6d:95:c6:ef:dc:21:71:31:b6:d1: 13:db:fb:0f:83:d3:51:a9:99:30:b4:11:3f:d9:8e: 54:54:39:e8:a4:02:9c:d5:e5:45:8c:60:04:2b:d0: c5:c2:07:a1:f8:10:14:23:1b:50:46:d3:5e:42:2b: 65:12:c7:54:00:77:b3:9d:fd:cd:e1:13:49:7c:a9: 7c:48:6c:e2:fa:60:a4:ed:6c:c5:b4:e9:7e:a6:86: 1a:e4:12:8e:d1:dc:c6:da:ca:ac:73:e8:9f:f4:5a: 77:96:c3:93:38:79:fe:24:37:67:bb:9d:9b:80:e2: 24:94:22:de:72:58:56:3e:a4:29:02:f8:29:a9:87: c3:e8:74:38:88:1a:a3:50:d0:1e:95:22:1d:0d:05: a3:43:f2:c4:78:f1:d6:21:05:bd:51:2f:9f:47:d4: 9a:ef:84:69:d9:a6:4c:2c:e7:4e:71:f5:b3:72:8c: d0:8c:a3:8e:f5:99:22:be:70:cf:37:5d:93:23:a3: 28:5c:77:20:50:bb:e9:43:57:15:d7:f2:36:b3:eb: 52:34:99:4b:97:0e:39:34:a5:17:90:1f:f1:45:52: 00:4a:23:35:04:b8:87:fa:43:3f:a6:7d:c7:a2:a4: d5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5F:62:F8:2E:37:46:DA:35:21:4C:78:D0:41:C8:DB:84:66:6F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f14625b4-a283-3a33-9ea9-b23b0dabf708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:75:b3:5a:8d:54:36:ca:8e:62:52:e7:6d:27:27:2f:78:2a: 51:77:dc:9f:79:d9:96:3b:70:d4:da:2c:70:dc:82:da:62:43: be:01:92:f1:b0:df:4d:c9:29:85:d5:fe:20:8a:df:1b:2c:92: 3f:e9:be:cb:c2:b8:14:36:0d:5b:ff:84:79:dd:f1:12:de:cf: 90:b1:69:fc:7f:96:32:38:d7:76:7b:40:d3:8c:e4:24:72:8b: f4:a1:c5:2f:38:f4:bf:b1:e0:b4:0c:a1:49:d4:cf:b7:b5:2f: e0:a1:36:23:a7:c0:49:ce:88:bb:84:0f:7a:ae:f3:87:f8:d2: 1a:3e:04:df:88:6a:d5:34:d4:98:18:2a:bf:30:bb:78:de:53: bf:40:0a:f0:fd:98:13:1c:61:d4:6b:19:0f:4b:4a:a5:fb:fb: 8f:01:9b:57:b1:df:c6:b1:67:a7:dd:14:f2:57:07:23:a0:67: df:b6:18:d6:23:db:37:70:94:c7:54:e3:5e:3e:47:b1:2c:81: c6:40:99:f4:94:04:a1:29:09:ff:38:0b:1c:04:0e:ac:9e:18: 0e:89:b0:86:cd:30:9a:a3:51:80:80:af:2c:b5:85:1d:a7:0d: 0a:7d:ea:42:51:3d:07:65:28:36:7d:1d:31:b4:f4:05:82:bd: 76:bf:e8:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSp5dAxlpegsDwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk YWEwNzUwYjQtMjk5NS00ZDNiLTg5YjAtMGM0ZGFkMTNmMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEWPrwMJwV6hzA7wDsDt5i+vZG2Vxu/cIXEx ttET2/sPg9NRqZkwtBE/2Y5UVDnopAKc1eVFjGAEK9DFwgeh+BAUIxtQRtNeQitl EsdUAHeznf3N4RNJfKl8SGzi+mCk7WzFtOl+poYa5BKO0dzG2sqsc+if9Fp3lsOT OHn+JDdnu52bgOIklCLeclhWPqQpAvgpqYfD6HQ4iBqjUNAelSIdDQWjQ/LEePHW IQW9US+fR9Sa74Rp2aZMLOdOcfWzcozQjKOO9ZkivnDPN12TI6MoXHcgULvpQ1cV 1/I2s+tSNJlLlw45NKUXkB/xRVIASiM1BLiH+kM/pn3HoqTVkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRfYvguN0baNSFMeNBByNuEZm9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjE0NjI1YjQtYTI4My0z YTMzLTllYTktYjIzYjBkYWJmNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ1s1qNVDbKjmJS520nJy94KlF33J952ZY7cNTaLHDcgtpiQ74BkvGw 303JKYXV/iCK3xsskj/pvsvCuBQ2DVv/hHnd8RLez5Cxafx/ljI413Z7QNOM5CRy i/ShxS849L+x4LQMoUnUz7e1L+ChNiOnwEnOiLuED3qu84f40ho+BN+IatU01JgY Kr8wu3jeU79ACvD9mBMcYdRrGQ9LSqX7+48Bm1ex38axZ6fdFPJXByOgZ9+2GNYj 2zdwlMdU414+R7EsgcZAmfSUBKEpCf84CxwEDqyeGA6JsIbNMJqjUYCAryy1hR2n DQp96kJRPQdlKDZ9HTG09AWCvXa/6Ac= -----END CERTIFICATE-----Generated at Wed Jul 29 02:58:02 2026 by rpki-client