$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a064665-f118-3541-b242-c5dfd88cc122.roa File: 1a064665-f118-3541-b242-c5dfd88cc122.roa (raw, json) Hash identifier: DlwdUAyGhuSsymt3c+GfKcPGlz70EOR43zJJdrOoUSM= Subject key identifier: 22:61:29:D0:80:29:24:F5:D8:10:CA:F9:69:0F:6C:58:7A:02:CA:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E8DEFB133EFC4B00C6FCBBB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a064665-f118-3541-b242-c5dfd88cc122.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 7713 IP address blocks: 23.32.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:b1:33:ef:c4:b0:0c:6f:cb:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=9f8ee2dc-26ed-46a4-b1ce-4bd971b85c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a6:3b:34:64:38:2a:89:d3:e1:80:61:ae:43: a7:77:de:d7:45:b0:a9:df:19:d4:b4:d9:ea:b3:c0: b2:9f:2f:30:5a:5b:27:bc:20:e9:3c:b8:43:53:18: a1:c2:f1:3b:07:f7:5e:98:4c:90:91:35:ee:48:43: 21:88:4e:c4:e6:65:80:35:96:93:f8:9e:bd:fc:a3: 22:0a:b1:ad:8b:e9:6f:7d:93:12:4a:a6:b9:e6:a7: af:ee:e5:10:fa:b7:72:8b:ab:b5:b9:c3:e8:33:95: 30:07:fa:41:79:d9:b2:e4:2c:87:72:98:8a:a8:3d: 79:56:7f:0f:28:d3:c0:19:9a:cb:84:c5:1a:2f:58: 7a:8f:92:1b:72:06:d7:9a:54:20:5e:a4:20:78:07: 30:bd:ff:14:14:39:93:2a:57:60:2b:ed:af:79:51: 57:d6:8f:9a:30:c1:65:23:e5:8f:7f:c0:f0:ce:72: 9a:63:0e:4f:9a:d2:f8:0c:c5:b5:94:1e:4a:9a:45: 53:0a:db:72:e8:3a:65:6a:8f:38:5c:13:62:17:ef: ee:89:25:ae:c1:b2:d8:e7:e7:dc:ad:65:ba:60:c5: ac:2c:fb:e5:56:6b:53:4c:6d:63:67:76:84:13:e5: d8:14:fb:35:c8:ab:c6:85:61:90:09:a2:19:a1:db: d5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:61:29:D0:80:29:24:F5:D8:10:CA:F9:69:0F:6C:58:7A:02:CA:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a064665-f118-3541-b242-c5dfd88cc122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:42:fe:b9:95:b5:54:79:de:32:2a:e3:a2:3a:cf:d0:90:4e: ce:da:50:54:59:9c:bc:20:f4:53:34:f4:13:0b:0d:1b:a7:3d: 15:52:04:da:49:94:4e:56:03:4d:2d:11:18:53:af:0e:53:02: 3a:2f:46:9c:d8:e1:a9:bd:9d:76:fa:d0:30:99:7c:3e:1c:56: d3:cc:5a:05:a4:1b:81:97:24:a4:00:80:38:5a:60:82:ca:8b: d6:de:8f:86:ca:41:85:d2:bc:c2:de:24:bd:19:d1:a8:f4:51: aa:f6:dd:9d:f9:89:fc:51:8e:00:59:fa:4c:70:e0:c2:64:08: 10:b4:4f:c0:6b:fd:1a:c3:c3:f0:6a:d6:25:dc:1f:2a:95:d1: 44:c1:32:ef:e1:f2:92:d4:11:c1:61:22:c8:93:4e:98:ee:8d: 08:32:30:9e:ae:cf:f4:c5:f0:42:dc:7c:87:13:de:2a:04:03: 37:7c:e3:7f:b4:29:89:3e:cd:02:5f:f0:05:64:6e:90:7f:f4: 48:40:82:53:62:94:f4:62:25:2b:d2:00:b9:c1:2e:c1:df:77: dd:93:9f:35:c9:35:53:08:dd:1b:ae:76:aa:00:97:da:33:2e: 6b:dd:64:85:82:38:90:0a:91:1a:57:3f:d8:6d:d0:52:48:dd: 7a:a6:d8:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N77Ez78SwDG/Lu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk OWY4ZWUyZGMtMjZlZC00NmE0LWIxY2UtNGJkOTcxYjg1YzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6Y7NGQ4KonT4YBhrkOnd97XRbCp3xnUtNnq s8Cyny8wWlsnvCDpPLhDUxihwvE7B/demEyQkTXuSEMhiE7E5mWANZaT+J69/KMi CrGti+lvfZMSSqa55qev7uUQ+rdyi6u1ucPoM5UwB/pBedmy5CyHcpiKqD15Vn8P KNPAGZrLhMUaL1h6j5IbcgbXmlQgXqQgeAcwvf8UFDmTKldgK+2veVFX1o+aMMFl I+WPf8DwznKaYw5PmtL4DMW1lB5KmkVTCtty6Dplao84XBNiF+/uiSWuwbLY5+fc rWW6YMWsLPvlVmtTTG1jZ3aEE+XYFPs1yKvGhWGQCaIZodvVMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJhKdCAKST12BDK+WkPbFh6AsqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWEwNjQ2NjUtZjExOC0z NTQxLWIyNDItYzVkZmQ4OGNjMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1C/rmVtVR53jIq46I6z9CQTs7aUFRZnLwg9FM09BMLDRunPRVSBNpJ lE5WA00tERhTrw5TAjovRpzY4am9nXb60DCZfD4cVtPMWgWkG4GXJKQAgDhaYILK i9bej4bKQYXSvMLeJL0Z0aj0Uar23Z35ifxRjgBZ+kxw4MJkCBC0T8Br/RrDw/Bq 1iXcHyqV0UTBMu/h8pLUEcFhIsiTTpjujQgyMJ6uz/TF8ELcfIcT3ioEAzd843+0 KYk+zQJf8AVkbpB/9EhAglNilPRiJSvSALnBLsHfd92TnzXJNVMI3RuudqoAl9oz LmvdZIWCOJAKkRpXP9ht0FJI3Xqm2CU= -----END CERTIFICATE-----Generated at Fri Jul 24 11:58:36 2026 by rpki-client