$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a41375-a83a-33b8-9935-9f5804eb373d.roa File: 07a41375-a83a-33b8-9935-9f5804eb373d.roa (raw, json) Hash identifier: zHE6ICSTx5+Qg0/2D+ikh/0Ud5Oo5YLDnQkp4HYRWaw= Subject key identifier: F4:69:D1:7B:D1:23:FC:98:41:68:5B:7E:CE:84:89:D4:62:B9:4D:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7984E53230F5690AD01FC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a41375-a83a-33b8-9935-9f5804eb373d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.208.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:4e:53:23:0f:56:90:ad:01:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=96555d53-c886-4d48-afea-295af6b3ec7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:12:19:54:68:cc:80:1d:49:19:da:f9:f5: 27:57:d5:fb:cc:20:5f:80:75:4d:81:a5:63:3c:5e: cf:0a:d8:1e:22:2a:34:04:ea:f4:dd:ae:24:27:62: cf:e3:54:ac:1b:16:93:21:41:e2:54:91:e8:0b:fb: a5:78:d6:47:25:24:19:b2:a1:2c:9b:41:be:a1:3b: 8f:17:2b:3d:e9:b3:5b:a8:81:8c:74:dd:8b:58:ba: 80:4f:a3:21:27:26:4e:d1:20:db:72:49:30:cf:94: b6:9b:71:89:1c:4f:76:ad:3d:82:78:87:6e:47:2f: 12:da:49:9e:4b:b9:fe:b8:f4:9c:c3:d0:61:8c:6c: 7b:69:25:d3:9d:87:0c:b6:67:e1:ae:89:11:ec:41: 91:e8:99:3d:5c:f2:8e:a9:ba:63:db:25:49:52:a6: b2:f0:60:98:73:de:7e:d2:28:e1:55:78:80:ce:4c: 49:7b:7b:63:d4:78:d5:c1:0e:69:ad:82:d3:df:55: 37:51:51:e0:eb:88:ee:2a:1c:3d:91:3d:53:00:dd: 65:a5:42:a7:a7:9f:9f:50:05:50:51:82:6b:a4:5a: c4:0a:ca:47:ab:e9:41:d1:d4:4a:2b:ad:fb:90:58: d9:41:d8:32:d2:87:9f:b6:d5:7e:7f:a3:eb:f2:fb: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:69:D1:7B:D1:23:FC:98:41:68:5B:7E:CE:84:89:D4:62:B9:4D:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a41375-a83a-33b8-9935-9f5804eb373d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:6d:3f:02:57:b3:54:8f:fa:b6:97:68:fb:cf:1d:d4:9a:93: 3e:38:75:86:f7:db:3e:d1:fd:fa:9a:f3:ff:02:0f:4c:c1:30: 4c:2c:85:d4:1b:2d:d5:f2:b6:56:b2:3c:00:4d:b9:7a:ec:14: 83:0f:4d:5c:b3:60:ba:06:30:e5:10:c3:67:41:fb:68:7d:37: 97:af:c4:ba:7a:b8:7b:11:de:70:b4:7b:71:9a:7d:74:28:ea: f2:7a:c1:33:28:2a:76:03:e2:d3:aa:c3:e0:b3:f0:bc:81:1b: ff:77:4b:99:92:8b:5c:99:e4:0a:48:31:80:39:66:fb:bc:74: 87:08:0e:d0:ac:d9:46:f8:b3:10:98:c1:91:1d:40:e5:d6:ed: 4f:aa:41:ff:a4:c8:a6:67:82:24:9a:90:bb:df:71:49:17:91: 3f:00:d5:d5:16:d7:75:5b:49:fd:49:58:d0:38:c5:fe:c5:bd: 5e:06:21:62:87:c1:1e:55:9d:c3:54:06:49:68:d2:dc:8c:dc: 2c:37:41:9b:a5:7a:64:85:ec:93:a3:20:75:f1:a5:ca:6d:ed: ca:a5:0f:44:03:ec:f4:ed:0e:f0:45:97:ca:d0:43:b5:4f:11: c9:d9:24:dc:9f:17:26:8e:c5:c5:75:5c:07:01:38:28:18:38: 5b:c1:25:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmE5TIw9WkK0B/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTY1NTVkNTMtYzg4Ni00ZDQ4LWFmZWEtMjk1YWY2YjNlYzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAcSGVRozIAdSRna+fUnV9X7zCBfgHVNgaVj PF7PCtgeIio0BOr03a4kJ2LP41SsGxaTIUHiVJHoC/uleNZHJSQZsqEsm0G+oTuP Fys96bNbqIGMdN2LWLqAT6MhJyZO0SDbckkwz5S2m3GJHE92rT2CeIduRy8S2kme S7n+uPScw9BhjGx7aSXTnYcMtmfhrokR7EGR6Jk9XPKOqbpj2yVJUqay8GCYc95+ 0ijhVXiAzkxJe3tj1HjVwQ5prYLT31U3UVHg64juKhw9kT1TAN1lpUKnp5+fUAVQ UYJrpFrECspHq+lB0dRKK637kFjZQdgy0oefttV+f6Pr8vsQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRp0XvRI/yYQWhbfs6EidRiuU2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDdhNDEzNzUtYTgzYS0z M2I4LTk5MzUtOWY1ODA0ZWIzNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9DcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9tPwJXs1SP+raXaPvPHdSakz44dYb32z7R/fqa8/8CD0zBMEwshdQb LdXytlayPABNuXrsFIMPTVyzYLoGMOUQw2dB+2h9N5evxLp6uHsR3nC0e3GafXQo 6vJ6wTMoKnYD4tOqw+Cz8LyBG/93S5mSi1yZ5ApIMYA5Zvu8dIcIDtCs2Ub4sxCY wZEdQOXW7U+qQf+kyKZngiSakLvfcUkXkT8A1dUW13VbSf1JWNA4xf7FvV4GIWKH wR5VncNUBklo0tyM3Cw3QZulemSF7JOjIHXxpcpt7cqlD0QD7PTtDvBFl8rQQ7VP EcnZJNyfFyaOxcV1XAcBOCgYOFvBJQI= -----END CERTIFICATE-----Generated at Sat Sep 5 01:27:14 2026 by rpki-client