$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa File: 99040fbd-052b-3815-9f8d-3f48368c2a90.roa (raw, json) Hash identifier: q0v6ROlE6gNxDhY9HXaR/T29mZ9sU24l48zPTsWV2wA= Subject key identifier: F9:F3:4B:0E:0F:29:48:80:EA:25:D5:57:D2:DB:95:15:93:28:5C:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E683F610FF82E926028AAF780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa Signing time: Mon 06 Jul 2026 09:00:12 +0000 ROA not before: Mon 06 Jul 2026 09:00:12 +0000 ROA not after: Sun 04 Oct 2026 09:00:12 +0000 asID: 16625 IP address blocks: 23.1.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:3f:61:0f:f8:2e:92:60:28:aa:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 6 09:00:12 2026 GMT Not After : Oct 4 09:00:12 2026 GMT Subject: CN=ba61a0bd-73d7-4b78-9f96-316f38997ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8e:9c:c2:04:eb:13:3b:d5:a8:fa:bc:c0:47: 8c:34:53:38:e2:03:8f:d9:39:6b:18:81:dc:cd:0e: fb:c1:2c:f3:03:f8:6d:e1:4c:3f:b7:a5:ab:01:58: 62:5f:0e:aa:a3:3c:3a:1e:47:ec:c5:ca:37:b9:8b: 06:d8:c8:39:7b:db:75:fb:38:18:cc:81:2a:24:7d: 8a:a0:2a:7c:f4:73:dc:71:d1:ee:ed:a6:02:73:37: 77:6f:00:7b:60:5f:3f:dd:cc:53:4e:06:d1:ec:90: a5:5e:6d:ae:54:3e:6f:83:9b:14:ab:4a:04:ec:a4: a7:80:f0:ca:58:d6:b1:e3:5e:17:58:9e:cb:c9:ea: d1:9a:6c:97:4e:a6:5e:86:52:82:1f:66:9c:5a:43: 68:e7:8f:e0:5e:d5:d7:3e:9e:23:df:a0:8b:fd:1e: 8a:2d:7b:e6:8b:ba:8b:8f:1f:8a:81:f3:2f:16:d5: 79:fc:4e:05:a8:44:1b:55:e0:6d:9b:d2:6d:c1:b8: 32:a4:3f:cf:74:29:96:c0:ce:ae:40:d0:f3:72:b4: 04:a9:d7:0d:5a:a5:c6:6a:72:bf:38:42:ee:b7:d4: b0:e9:69:55:98:6d:3a:7d:17:7a:ae:97:3b:24:6f: a2:4f:76:04:cc:a5:0d:d9:42:59:09:d3:8a:c8:52: 2c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F3:4B:0E:0F:29:48:80:EA:25:D5:57:D2:DB:95:15:93:28:5C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99040fbd-052b-3815-9f8d-3f48368c2a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9f:eb:ea:3b:3b:96:ac:4e:d8:b1:dc:34:35:4e:7b:42:0a: 11:34:6e:59:e3:34:75:80:3a:59:fc:87:3f:14:41:8b:68:d1: 99:ea:68:aa:ef:7d:2a:fa:d0:94:50:45:a8:09:32:69:a3:29: 21:08:a7:19:a6:4c:0b:b2:9c:f5:79:3e:0a:4b:b5:4d:86:ce: 44:80:76:d5:7e:70:69:8b:63:ce:c6:5a:63:35:7a:89:82:5a: 7e:89:1e:81:46:28:82:fc:23:48:11:46:64:55:e0:98:c6:ab: d8:b1:6e:f5:2b:ae:79:f3:3d:78:37:70:2c:53:4b:92:2b:4f: 69:42:18:4b:f6:50:ab:bc:ad:72:a7:f3:8b:c9:f8:ea:36:b0: 11:7a:40:61:6f:b9:a3:47:09:97:a1:35:cb:7c:71:ce:f0:12: 1e:73:4f:01:6d:0e:ea:0a:1b:57:ff:a4:e7:a1:6f:2c:05:43: 86:70:cf:12:9a:10:19:2a:8d:4c:74:23:12:76:0c:7d:0a:2d: df:c7:fc:f4:11:f7:b0:2d:06:eb:24:53:fb:d0:6d:a9:ea:7b: cf:f8:3e:31:9e:73:a1:ed:ba:7a:ad:1c:e2:78:08:84:e4:a3: f7:3e:cd:d6:2d:31:09:35:ac:94:79:68:3d:93:9a:92:db:28: e9:d9:fd:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP2EP+C6SYCiq94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk YmE2MWEwYmQtNzNkNy00Yjc4LTlmOTYtMzE2ZjM4OTk3ZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI6cwgTrEzvVqPq8wEeMNFM44gOP2TlrGIHc zQ77wSzzA/ht4Uw/t6WrAVhiXw6qozw6Hkfsxco3uYsG2Mg5e9t1+zgYzIEqJH2K oCp89HPccdHu7aYCczd3bwB7YF8/3cxTTgbR7JClXm2uVD5vg5sUq0oE7KSngPDK WNax414XWJ7LyerRmmyXTqZehlKCH2acWkNo54/gXtXXPp4j36CL/R6KLXvmi7qL jx+KgfMvFtV5/E4FqEQbVeBtm9JtwbgypD/PdCmWwM6uQNDzcrQEqdcNWqXGanK/ OELut9Sw6WlVmG06fRd6rpc7JG+iT3YEzKUN2UJZCdOKyFIsAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnzSw4PKUiA6iXVV9LblRWTKFy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTkwNDBmYmQtMDUyYi0z ODE1LTlmOGQtM2Y0ODM2OGMyYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqf6+o7O5asTtix3DQ1TntCChE0blnjNHWAOln8hz8UQYto0ZnqaKrv fSr60JRQRagJMmmjKSEIpxmmTAuynPV5PgpLtU2GzkSAdtV+cGmLY87GWmM1eomC Wn6JHoFGKIL8I0gRRmRV4JjGq9ixbvUrrnnzPXg3cCxTS5IrT2lCGEv2UKu8rXKn 84vJ+Oo2sBF6QGFvuaNHCZehNct8cc7wEh5zTwFtDuoKG1f/pOehbywFQ4ZwzxKa EBkqjUx0IxJ2DH0KLd/H/PQR97AtBuskU/vQbanqe8/4PjGec6HtunqtHOJ4CITk o/c+zdYtMQk1rJR5aD2TmpLbKOnZ/fc= -----END CERTIFICATE-----Generated at Fri Jul 24 13:59:31 2026 by rpki-client