$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa File: 89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa (raw, json) Hash identifier: McWhy25ZgI/zNpbeV1paiLzop7LVFY85tzAYwOzWRm8= Subject key identifier: 21:B5:63:21:8E:EF:3E:CD:CB:7A:0D:25:9E:51:C3:DE:B0:D3:D8:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E6B0A2749CA0E2A0DEE5C8940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 16625 IP address blocks: 23.0.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:27:49:ca:0e:2a:0d:ee:5c:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=7ce6d319-8814-4f99-a25c-8b941cdf3d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:12:ac:15:2f:e4:3a:c3:4d:92:c6:dd:8b:1d: 24:2c:73:6c:62:88:5b:5a:fe:c2:d6:c6:39:ef:0f: 00:17:1e:06:c3:c3:4e:24:60:bd:40:b3:13:cc:e9: da:df:7e:4f:9b:4d:5b:e8:0e:dd:1f:c8:19:08:8d: bd:ba:18:80:14:96:44:72:e7:63:6b:41:cc:52:04: a5:aa:0f:03:e2:d3:cb:78:1a:11:fb:f0:1d:37:f0: e9:f9:36:d4:f5:e4:81:ac:31:1a:cd:9a:1b:10:4d: 12:68:aa:9a:df:33:15:6e:be:a3:49:f1:af:c1:d4: 60:bf:ac:e3:cf:99:f9:2f:a2:b5:dd:33:45:54:4a: d3:2e:6b:0b:bb:e8:f9:aa:38:07:c7:b1:ee:be:96: 6c:62:2a:cf:5d:0b:92:72:ab:88:e9:bd:fe:7a:69: 5b:71:25:93:a6:01:06:26:b3:ce:ba:e5:7d:76:2e: ac:94:b0:9a:ea:40:c9:ce:50:f4:fa:74:5a:89:f1: 93:eb:0d:ed:a9:58:78:c2:7b:04:c9:de:08:63:39: 5b:37:f1:b2:7f:e3:f1:e8:a5:61:eb:2d:05:9e:02: d6:44:03:7a:46:15:1a:15:34:0d:2a:34:2c:07:27: d0:cd:a6:e4:94:1c:e9:e9:aa:89:0c:08:1c:b2:14: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B5:63:21:8E:EF:3E:CD:CB:7A:0D:25:9E:51:C3:DE:B0:D3:D8:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89afa793-4e1b-338b-8d16-78d6b96f5ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5a:50:5d:15:23:a6:80:ef:7c:09:97:58:e6:ce:3e:d7:67: a4:18:df:7b:4c:9a:b7:a2:f3:66:c8:4f:9c:b5:78:a1:d3:f3: 6a:64:82:35:34:7f:26:4f:4f:e0:22:20:6b:49:ef:22:09:c5: 02:71:99:8b:c8:10:22:9a:f5:21:cc:30:1e:a8:13:11:eb:1b: ab:b6:b0:d8:88:7c:45:84:9f:4d:fe:c8:2c:a2:27:52:0b:4e: d0:8b:75:93:db:73:60:a8:90:c9:93:8d:89:cd:0a:9e:9d:6e: a5:65:84:70:47:33:84:56:b6:fa:e9:a8:05:a6:de:5a:99:54: 4c:48:25:5c:74:6e:4c:88:3d:e9:08:01:2c:04:3f:69:12:18: b6:17:9a:04:fa:88:7b:9c:0f:d2:05:32:a6:91:08:b4:05:fc: da:0b:90:ea:5b:6f:06:97:eb:28:f6:81:f6:81:d7:b2:5d:5b: c7:c8:71:7b:24:1c:9b:60:7a:42:fd:5a:fc:d7:86:0b:e1:7d: 72:26:82:43:e2:2a:48:3d:6b:c9:35:aa:75:19:42:96:ff:39: f9:9c:f0:70:8d:a3:e4:ec:2f:5d:b7:ab:cd:22:ca:bc:00:6c: 06:01:59:dd:c2:2c:56:b1:4c:35:20:09:31:18:3b:a8:6b:da: fb:1c:2d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCidJyg4qDe5ciUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk N2NlNmQzMTktODgxNC00Zjk5LWEyNWMtOGI5NDFjZGYzZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBKsFS/kOsNNksbdix0kLHNsYohbWv7C1sY5 7w8AFx4Gw8NOJGC9QLMTzOna335Pm01b6A7dH8gZCI29uhiAFJZEcudja0HMUgSl qg8D4tPLeBoR+/AdN/Dp+TbU9eSBrDEazZobEE0SaKqa3zMVbr6jSfGvwdRgv6zj z5n5L6K13TNFVErTLmsLu+j5qjgHx7HuvpZsYirPXQuScquI6b3+emlbcSWTpgEG JrPOuuV9di6slLCa6kDJzlD0+nRaifGT6w3tqVh4wnsEyd4IYzlbN/Gyf+Px6KVh 6y0FngLWRAN6RhUaFTQNKjQsByfQzabklBzp6aqJDAgcshTonwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG1YyGO7z7Ny3oNJZ5Rw96w09iHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODlhZmE3OTMtNGUxYi0z MzhiLThkMTYtNzhkNmI5NmY1YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhaUF0VI6aA73wJl1jmzj7XZ6QY33tMmrei82bIT5y1eKHT82pkgjU0 fyZPT+AiIGtJ7yIJxQJxmYvIECKa9SHMMB6oExHrG6u2sNiIfEWEn03+yCyiJ1IL TtCLdZPbc2CokMmTjYnNCp6dbqVlhHBHM4RWtvrpqAWm3lqZVExIJVx0bkyIPekI ASwEP2kSGLYXmgT6iHucD9IFMqaRCLQF/NoLkOpbbwaX6yj2gfaB17JdW8fIcXsk HJtgekL9WvzXhgvhfXImgkPiKkg9a8k1qnUZQpb/Ofmc8HCNo+TsL123q80iyrwA bAYBWd3CLFaxTDUgCTEYO6hr2vscLTk= -----END CERTIFICATE-----Generated at Fri Jul 24 13:55:54 2026 by rpki-client