$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa225f3d-a836-3950-8ac9-d3ad2332dc4b.roa File: aa225f3d-a836-3950-8ac9-d3ad2332dc4b.roa (raw, json) Hash identifier: +kvxOnSIK9AMInIlT11oDOtyrCT6J7gpZdZreUvE47U= Subject key identifier: 06:71:72:89:E5:08:11:0F:1E:90:38:9F:28:37:92:E0:4D:34:32:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E66DA26390D477E3D1F9BB900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa225f3d-a836-3950-8ac9-d3ad2332dc4b.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16625 IP address blocks: 23.14.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:26:39:0d:47:7e:3d:1f:9b:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=56c8bb88-b839-4740-8236-6921742102c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:9c:3d:29:56:ca:27:0a:c8:d9:7f:0d:84: 08:45:c3:d5:71:40:8f:75:4d:7d:97:af:c6:23:4d: e6:42:91:c2:22:8e:94:61:83:fa:2d:a4:6a:99:9c: 83:87:df:bf:af:3c:52:36:52:49:bf:1b:1d:d0:e6: 23:32:32:44:af:be:aa:ec:65:79:2f:9f:bf:c4:bf: 5f:4c:81:4c:d3:65:6b:c5:15:06:82:2e:91:13:53: ab:bd:2d:97:c3:c6:1e:18:d1:43:8f:35:56:c0:8e: 27:b6:65:1f:ff:44:59:ad:12:f3:86:21:eb:b8:a4: 3b:9e:a6:6c:53:0c:76:36:a2:42:0b:2e:50:f8:8b: 68:43:05:00:ed:5d:51:07:54:2a:b9:58:56:d4:9b: 94:ba:40:68:cb:bd:c4:70:87:22:4a:a1:0b:49:bf: 5e:d8:77:ae:d0:e8:21:8b:bf:42:61:4c:fa:0e:0c: 9c:d9:d2:b5:35:47:5d:a0:a9:23:17:05:07:3a:55: 5c:71:f1:9a:0e:ee:86:71:1e:a3:e1:dc:41:29:e6: ea:bc:d9:5e:83:1b:14:54:61:5c:cb:5a:e1:c8:9d: 94:09:9d:e5:b8:fc:0e:1b:98:9f:9f:a9:dd:f5:27: 9f:58:d7:9a:11:4d:5a:29:ff:f8:2f:bd:f1:1a:43: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:71:72:89:E5:08:11:0F:1E:90:38:9F:28:37:92:E0:4D:34:32:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa225f3d-a836-3950-8ac9-d3ad2332dc4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.14.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:95:5a:c6:95:b5:e6:38:e5:00:ed:22:99:d4:c5:a2:8a:7a: 1c:dd:36:c1:80:e5:2f:6e:58:ec:9f:d5:5c:97:49:c9:ce:67: 0b:b2:57:06:1c:5c:27:5e:50:7b:92:70:10:63:45:7d:c3:38: e5:f4:10:14:09:2f:4b:ff:b5:33:b7:89:75:06:d9:da:38:98: 0f:7d:33:19:20:38:a6:05:01:d3:b9:7e:fe:ea:06:57:d9:6a: 7a:6c:31:0e:74:b4:b9:0c:86:b7:be:32:f5:ca:5b:83:3e:51: 36:ee:51:a4:3b:37:36:85:f7:fd:06:6e:d3:22:43:3f:96:19: 50:67:3f:0c:fa:4f:60:50:f3:52:cb:bb:e7:a4:df:a0:1b:33: e7:83:e7:53:63:4e:4a:ae:5e:64:bd:06:77:3f:14:94:48:69: 13:f0:be:d6:c2:e2:87:dd:0f:dc:c1:52:c0:dc:3f:3f:3b:7f: b6:4e:cb:c2:3b:dc:ee:eb:47:9b:26:66:47:40:3a:0d:a8:00: ad:65:ca:b9:c2:9a:39:7e:b5:9f:2b:03:02:aa:21:59:5e:a6: 6f:f3:54:49:4a:25:c3:63:24:f1:ba:42:f2:da:5b:cb:ff:f6: f9:0e:d2:fe:03:c7:24:b6:c3:c6:2b:c2:a1:9d:21:9d:89:67: 7f:52:a0:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2iY5DUd+PR+buQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NTZjOGJiODgtYjgzOS00NzQwLTgyMzYtNjkyMTc0MjEwMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uOcPSlWyicKyNl/DYQIRcPVcUCPdU19l6/G I03mQpHCIo6UYYP6LaRqmZyDh9+/rzxSNlJJvxsd0OYjMjJEr76q7GV5L5+/xL9f TIFM02VrxRUGgi6RE1OrvS2Xw8YeGNFDjzVWwI4ntmUf/0RZrRLzhiHruKQ7nqZs Uwx2NqJCCy5Q+ItoQwUA7V1RB1QquVhW1JuUukBoy73EcIciSqELSb9e2Heu0Ogh i79CYUz6Dgyc2dK1NUddoKkjFwUHOlVccfGaDu6GcR6j4dxBKebqvNlegxsUVGFc y1rhyJ2UCZ3luPwOG5ifn6nd9SefWNeaEU1aKf/4L73xGkP9+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZxconlCBEPHpA4nyg3kuBNNDLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEyMjVmM2QtYTgzNi0z OTUwLThhYzktZDNhZDIzMzJkYzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFw7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyVWsaVteY45QDtIpnUxaKKehzdNsGA5S9uWOyf1VyXScnOZwuyVwYc XCdeUHuScBBjRX3DOOX0EBQJL0v/tTO3iXUG2do4mA99MxkgOKYFAdO5fv7qBlfZ anpsMQ50tLkMhre+MvXKW4M+UTbuUaQ7NzaF9/0GbtMiQz+WGVBnPwz6T2BQ81LL u+ek36AbM+eD51NjTkquXmS9Bnc/FJRIaRPwvtbC4ofdD9zBUsDcPz87f7ZOy8I7 3O7rR5smZkdAOg2oAK1lyrnCmjl+tZ8rAwKqIVlepm/zVElKJcNjJPG6QvLaW8v/ 9vkO0v4DxyS2w8YrwqGdIZ2JZ39SoHM= -----END CERTIFICATE-----Generated at Fri Jul 24 12:47:49 2026 by rpki-client