$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1659a49-9f85-3475-8d37-2a0268782663.roa File: d1659a49-9f85-3475-8d37-2a0268782663.roa (raw, json) Hash identifier: liz70wSDZ+/P7PIZoAHPKVkUHGVyhAvL+Gy5e0oqJz4= Subject key identifier: 70:C0:74:4B:23:C8:B0:A1:A2:0C:24:32:F0:55:0B:02:27:72:73:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E66DA23CE789D7AFC63AA877A Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1659a49-9f85-3475-8d37-2a0268782663.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16625 IP address blocks: 23.2.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:23:ce:78:9d:7a:fc:63:aa:87:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=97d4d01b-508d-4b2f-9182-fba7ddbfddad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:2e:72:e3:f5:55:ee:8f:7e:7b:cc:b1:8c: 10:e8:5e:43:ee:7c:09:6a:14:42:e5:c5:e3:8e:82: 4b:0b:c2:db:0b:b9:aa:e0:b2:cf:8a:b9:c6:f9:0d: 5e:23:8b:ea:bc:71:6b:8c:01:8c:d5:ac:81:b1:b6: dd:21:f5:e8:e8:dd:27:84:d2:a0:d1:d2:87:be:0e: a9:71:5a:e8:fb:86:59:1a:ff:40:a5:66:f6:52:14: 28:a6:a6:3d:48:34:a4:19:1c:38:f9:24:e5:35:76: a8:97:b3:36:8b:6f:bf:0b:d8:0f:c8:8e:94:99:e2: 33:f6:6f:64:3c:9a:ee:1d:ba:23:91:2c:ca:9d:a2: 04:87:63:ad:5c:92:9a:bd:6a:7f:4b:eb:cf:49:d4: e6:cd:b3:26:68:e3:50:06:c1:64:fb:5e:3c:f0:0b: a4:b9:a2:44:95:5d:06:9b:0c:87:0d:ad:f6:bc:73: f5:ae:be:57:84:0b:ed:d1:b2:77:1e:74:fc:0a:a8: 2a:ac:2f:36:77:9a:96:64:d1:37:da:0d:0a:04:89: 88:87:b1:cb:e6:1e:81:cc:2a:0a:e2:3e:b7:8d:27: e1:74:26:8f:26:e4:52:98:04:ac:4f:87:18:50:9d: 52:2a:de:3e:91:e4:cf:13:5d:16:8c:a6:08:82:d7: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C0:74:4B:23:C8:B0:A1:A2:0C:24:32:F0:55:0B:02:27:72:73:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1659a49-9f85-3475-8d37-2a0268782663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:32:79:aa:4b:81:b4:33:67:43:86:a6:19:d2:80:14:96:ee: f5:9f:66:33:8f:07:c2:9e:4d:60:8b:62:87:31:36:71:7f:b9: 83:11:02:22:6c:e1:83:9c:55:6b:e1:e3:f1:2e:0e:a8:0e:64: c2:ec:31:1b:65:bf:60:7d:2f:0e:8a:09:29:f0:47:65:37:c1: 6b:fa:b3:8e:8b:ae:f5:62:71:b5:e3:8d:69:1b:31:75:b5:50: e6:40:aa:1b:7b:b0:b6:33:43:1c:0e:7c:1e:b7:2f:ce:35:b7: da:12:d1:ca:42:5f:a7:af:b5:11:aa:13:fd:28:6c:97:f5:9d: c9:2a:67:56:82:ab:9e:1b:1e:05:13:5d:36:e6:39:8e:cc:22: 0f:04:40:ba:20:c5:02:a6:05:81:67:74:bc:25:37:1b:7d:48: 37:9c:4e:c4:f6:9b:f5:f2:5d:15:54:c6:9b:cf:91:a3:51:59: f6:72:d6:c8:a7:8c:bf:78:90:af:45:d6:db:f3:ca:8a:c6:14: fd:89:6d:b5:9c:f0:18:f3:fa:3f:5f:eb:e0:51:52:02:9e:42: 1c:4a:14:c1:38:17:2b:77:41:9f:e9:3a:1c:a1:42:48:49:b8: ac:66:1d:fd:59:7a:63:97:22:a9:ed:9b:59:29:e5:fb:48:3f: f3:b1:da:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2iPOeJ16/GOqh3owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk OTdkNGQwMWItNTA4ZC00YjJmLTkxODItZmJhN2RkYmZkZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb4ucuP1Ve6PfnvMsYwQ6F5D7nwJahRC5cXj joJLC8LbC7mq4LLPirnG+Q1eI4vqvHFrjAGM1ayBsbbdIfXo6N0nhNKg0dKHvg6p cVro+4ZZGv9ApWb2UhQopqY9SDSkGRw4+STlNXaol7M2i2+/C9gPyI6UmeIz9m9k PJruHbojkSzKnaIEh2OtXJKavWp/S+vPSdTmzbMmaONQBsFk+1488AukuaJElV0G mwyHDa32vHP1rr5XhAvt0bJ3HnT8CqgqrC82d5qWZNE32g0KBImIh7HL5h6BzCoK 4j63jSfhdCaPJuRSmASsT4cYUJ1SKt4+keTPE10WjKYIgtcssQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDAdEsjyLChogwkMvBVCwIncnPrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDE2NTlhNDktOWY4NS0z NDc1LThkMzctMmEwMjY4NzgyNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4yeapLgbQzZ0OGphnSgBSW7vWfZjOPB8KeTWCLYocxNnF/uYMRAiJs 4YOcVWvh4/EuDqgOZMLsMRtlv2B9Lw6KCSnwR2U3wWv6s46LrvVicbXjjWkbMXW1 UOZAqht7sLYzQxwOfB63L841t9oS0cpCX6evtRGqE/0obJf1nckqZ1aCq54bHgUT XTbmOY7MIg8EQLogxQKmBYFndLwlNxt9SDecTsT2m/XyXRVUxpvPkaNRWfZy1sin jL94kK9F1tvzyorGFP2JbbWc8Bjz+j9f6+BRUgKeQhxKFME4Fyt3QZ/pOhyhQkhJ uKxmHf1ZemOXIqntm1kp5ftIP/Ox2nc= -----END CERTIFICATE-----Generated at Fri Jul 24 12:50:46 2026 by rpki-client