$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98e41502-8a7a-391b-bf43-3f5b8a3126d2.roa File: 98e41502-8a7a-391b-bf43-3f5b8a3126d2.roa (raw, json) Hash identifier: FsMA/IbK3EBf0mZQkkoR2wKrzNK131TQMhXupfUgINo= Subject key identifier: BF:47:1E:95:02:DF:82:ED:0C:E3:00:DD:CA:C8:58:2B:CA:9C:13:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E9A7FD910AA4903E9E30D2040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98e41502-8a7a-391b-bf43-3f5b8a3126d2.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 16625 IP address blocks: 23.211.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:d9:10:aa:49:03:e9:e3:0d:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=c0cbab12-c0c3-42e4-9b46-017fc188505a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b8:37:10:0c:9d:51:d6:63:75:b0:1c:83:e2: 0e:1b:79:69:65:96:da:75:78:48:f6:0c:36:b2:4f: 22:41:f7:98:72:26:37:23:d6:01:72:44:ad:e8:c9: dc:eb:a0:24:19:8b:dd:74:10:03:7f:37:91:f3:24: f8:61:67:8d:7d:94:a7:9d:3b:44:68:57:94:35:79: bf:e5:c9:d8:3a:9f:cf:f9:36:af:5f:db:a3:26:a6: b3:8a:91:38:6e:fa:84:8d:9c:39:05:34:46:5f:b4: 32:19:a5:1c:77:65:7b:2b:85:e5:34:ff:8d:47:40: f1:ba:64:08:dc:65:85:b7:41:63:7d:4f:07:53:55: ca:53:7c:41:2d:3d:9c:31:9e:96:72:0e:8c:da:23: 36:d9:d6:c5:2a:cf:19:1a:cb:ab:82:5b:b4:8f:89: 2f:da:45:8c:14:9e:04:bd:c0:8c:49:bf:38:4c:86: 21:b7:60:ee:49:68:f3:8f:b4:c2:83:d9:57:4c:ce: 6b:36:78:d8:ea:83:2c:38:3d:fa:40:9a:21:bb:72: ee:90:8c:49:38:c5:50:6e:cc:72:c9:0a:56:66:92: 9b:69:98:8a:af:d7:9a:9c:2c:1b:54:40:22:1f:5f: a5:f1:be:f6:1d:24:33:84:05:24:1c:30:f4:6d:f1: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:47:1E:95:02:DF:82:ED:0C:E3:00:DD:CA:C8:58:2B:CA:9C:13:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/98e41502-8a7a-391b-bf43-3f5b8a3126d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:70:7c:b5:70:5e:32:e3:71:77:e0:e3:5d:75:c7:f1:d7:8c: 62:3d:e3:99:94:d7:2a:52:ba:a7:ea:a4:59:07:e9:72:f6:c9: 72:b9:a0:f0:04:2e:3b:4f:17:b1:3a:b6:ae:81:44:79:08:7f: 66:e6:9c:8a:f0:9b:a7:79:5d:42:2a:2a:ad:c7:6d:05:e0:46: c7:d2:b4:73:cb:47:3a:c2:82:56:ec:e5:2b:90:2e:88:a8:91: 2b:71:33:35:46:b9:80:92:e5:5f:61:47:79:95:f8:f6:f5:16: 7b:dd:d8:99:af:e9:54:8f:4c:7e:95:ed:48:99:a2:fa:d7:57: ec:a3:31:5d:5a:5f:c5:2d:e6:fa:e7:cd:8c:24:7d:34:5c:57: f3:ab:dc:c6:20:57:0f:cb:d7:18:77:f2:1e:f5:41:bb:9b:c3: 3d:2f:33:e4:7a:dc:26:c6:2e:14:2d:58:6f:86:82:3e:e0:1f: c0:d3:a1:f6:63:bb:36:f2:7b:1b:f7:d0:ab:e9:94:c8:26:8a: 1e:80:fd:a3:23:4e:3a:82:e4:1b:62:fa:a4:94:e8:8f:13:c9: 2f:b9:f5:97:99:cb:13:7e:64:c8:f5:d0:fd:f5:11:1d:4b:2b: a6:d3:ab:66:c3:48:4b:54:d0:72:1f:96:1d:e7:89:23:ba:3a: 63:b1:d3:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9kQqkkD6eMNIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk YzBjYmFiMTItYzBjMy00MmU0LTliNDYtMDE3ZmMxODg1MDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbg3EAydUdZjdbAcg+IOG3lpZZbadXhI9gw2 sk8iQfeYciY3I9YBckSt6Mnc66AkGYvddBADfzeR8yT4YWeNfZSnnTtEaFeUNXm/ 5cnYOp/P+TavX9ujJqazipE4bvqEjZw5BTRGX7QyGaUcd2V7K4XlNP+NR0DxumQI 3GWFt0FjfU8HU1XKU3xBLT2cMZ6Wcg6M2iM22dbFKs8ZGsurglu0j4kv2kWMFJ4E vcCMSb84TIYht2DuSWjzj7TCg9lXTM5rNnjY6oMsOD36QJohu3LukIxJOMVQbsxy yQpWZpKbaZiKr9eanCwbVEAiH1+l8b72HSQzhAUkHDD0bfFRgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9HHpUC34LtDOMA3crIWCvKnBM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOThlNDE1MDItOGE3YS0z OTFiLWJmNDMtM2Y1YjhhMzEyNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9PYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1wfLVwXjLjcXfg4111x/HXjGI945mU1ypSuqfqpFkH6XL2yXK5oPAE LjtPF7E6tq6BRHkIf2bmnIrwm6d5XUIqKq3HbQXgRsfStHPLRzrCglbs5SuQLoio kStxMzVGuYCS5V9hR3mV+Pb1Fnvd2Jmv6VSPTH6V7UiZovrXV+yjMV1aX8Ut5vrn zYwkfTRcV/Or3MYgVw/L1xh38h71Qbubwz0vM+R63CbGLhQtWG+Ggj7gH8DTofZj uzbyexv30KvplMgmih6A/aMjTjqC5Bti+qSU6I8TyS+59ZeZyxN+ZMj10P31ER1L K6bTq2bDSEtU0HIflh3niSO6OmOx0z4= -----END CERTIFICATE-----Generated at Fri Jul 24 15:08:26 2026 by rpki-client