$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0650a461-c116-30df-86f3-9f9f2ff047f2.roa File: 0650a461-c116-30df-86f3-9f9f2ff047f2.roa (raw, json) Hash identifier: 8ECip5X0jWn5jvBHbVTpmj+FGmuf0RkUTU9FDPQ1+F4= Subject key identifier: 4A:AD:61:18:9C:39:E2:95:09:AE:4D:9D:A2:54:B4:BA:B2:8A:C5:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA790BC0AD2E26E92ABE18100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0650a461-c116-30df-86f3-9f9f2ff047f2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.196.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:bc:0a:d2:e2:6e:92:ab:e1:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=645109a5-caaf-4723-a940-75a7ba7f35c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:b1:fc:fd:9e:32:f6:7c:b9:c6:4d:0c:80: 7c:8b:9a:d8:ba:c0:95:e1:0b:13:29:7e:e2:1e:71: db:a1:ae:7f:e8:bd:78:0b:24:73:c2:55:f4:83:c6: 53:34:30:9e:6f:ad:8f:6d:5c:3e:b3:57:88:3c:8a: c7:a0:51:9f:58:34:f6:81:24:80:3f:c1:83:65:66: 5f:29:c1:42:03:81:4b:2a:c0:b5:92:7d:97:9b:57: c9:b9:c0:9d:a9:d3:2b:1f:96:08:8b:2e:5b:bd:ef: ba:98:3f:fa:a8:4f:d0:98:d8:99:3d:35:59:f4:1c: a5:dd:c4:ee:51:ef:e7:09:30:e7:d9:5d:81:6e:0b: cc:0e:d4:eb:96:55:79:94:22:77:62:7d:16:bf:e2: 26:57:00:c1:75:65:cf:20:dd:28:5d:82:9b:02:97: 32:4e:b4:ef:f3:6f:1c:48:87:1e:c3:9a:62:6f:c9: af:c6:84:8c:bb:b6:7e:b5:93:98:42:40:dd:b1:9b: d7:18:49:8b:7b:98:e8:94:6d:42:82:3d:78:8d:8a: a7:80:bd:b2:a2:23:55:d8:f4:83:23:db:6f:f4:a6: 16:eb:18:e1:b2:b2:29:6b:8c:72:2c:d9:b1:8b:65: 92:8e:c4:73:e2:3f:66:73:0a:9b:d9:cd:1b:b1:0e: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AD:61:18:9C:39:E2:95:09:AE:4D:9D:A2:54:B4:BA:B2:8A:C5:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0650a461-c116-30df-86f3-9f9f2ff047f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c0:f1:c6:00:44:74:75:be:c9:da:e3:0f:e9:3a:f8:f1:6d: 2c:e3:70:5d:63:a5:c3:62:95:88:5a:ca:95:98:bb:46:9d:7f: 67:3a:f2:f4:ff:8f:9b:84:fb:ae:7b:44:bd:99:49:a7:93:13: da:e2:d5:33:2f:15:c9:75:65:f0:1e:7c:3d:27:f2:c7:ea:85: d2:9e:0a:b9:bb:85:c6:d2:17:97:80:8a:72:0d:38:70:df:9c: eb:64:7d:2e:a1:ca:9e:ed:d2:3f:a1:15:ce:84:b7:91:fe:2a: 24:0e:e2:83:54:cc:64:06:75:3f:4c:d4:dd:8e:86:31:ca:4a: 32:4e:59:60:dc:d2:ab:20:a0:d8:68:5a:bb:8d:6d:c3:55:b7: 51:26:01:44:8a:8c:2b:b4:ef:26:30:83:d7:77:7d:36:a4:4d: 8a:eb:93:b1:0c:bd:d9:60:b4:3c:d6:38:fc:c5:2a:00:64:25: 97:6d:39:25:f5:b5:6a:49:6c:a6:e2:d1:ef:2e:bb:d9:cf:ef: 05:a8:c3:0c:72:c3:84:b1:1d:dc:35:b5:cc:8e:2b:7e:e2:f7: 8f:44:5c:29:da:df:6b:e2:b0:c8:0d:cf:53:1f:20:b8:d1:0c: 05:87:e8:4a:b3:d8:d8:fa:8d:73:4d:a7:b6:b1:d3:bc:e2:c4: 0b:d0:fa:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkLwK0uJukqvhgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjQ1MTA5YTUtY2FhZi00NzIzLWE5NDAtNzVhN2JhN2YzNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H6x/P2eMvZ8ucZNDIB8i5rYusCV4QsTKX7i HnHboa5/6L14CyRzwlX0g8ZTNDCeb62PbVw+s1eIPIrHoFGfWDT2gSSAP8GDZWZf KcFCA4FLKsC1kn2Xm1fJucCdqdMrH5YIiy5bve+6mD/6qE/QmNiZPTVZ9Byl3cTu Ue/nCTDn2V2BbgvMDtTrllV5lCJ3Yn0Wv+ImVwDBdWXPIN0oXYKbApcyTrTv828c SIcew5pib8mvxoSMu7Z+tZOYQkDdsZvXGEmLe5jolG1Cgj14jYqngL2yoiNV2PSD I9tv9KYW6xjhsrIpa4xyLNmxi2WSjsRz4j9mcwqb2c0bsQ58ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqtYRicOeKVCa5NnaJUtLqyisUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY1MGE0NjEtYzExNi0z MGRmLTg2ZjMtOWY5ZjJmZjA0N2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8QwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDA8cYARHR1vsna4w/pOvjxbSzjcF1jpcNilYhaypWYu0adf2c68vT/ j5uE+657RL2ZSaeTE9ri1TMvFcl1ZfAefD0n8sfqhdKeCrm7hcbSF5eAinINOHDf nOtkfS6hyp7t0j+hFc6Et5H+KiQO4oNUzGQGdT9M1N2OhjHKSjJOWWDc0qsgoNho WruNbcNVt1EmAUSKjCu07yYwg9d3fTakTYrrk7EMvdlgtDzWOPzFKgBkJZdtOSX1 tWpJbKbi0e8uu9nP7wWowwxyw4SxHdw1tcyOK37i949EXCna32visMgNz1MfILjR DAWH6Eqz2Nj6jXNNp7ax07zixAvQ+lU= -----END CERTIFICATE-----Generated at Sat Sep 5 06:54:14 2026 by rpki-client