$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/096474bd-6110-3ad3-9b19-fdcaaa2ade4b.roa File: 096474bd-6110-3ad3-9b19-fdcaaa2ade4b.roa (raw, json) Hash identifier: yp0BUPsvY1cDTKf7P9B8Ux59Z1XIGAAX7S5EhBTtTns= Subject key identifier: 08:69:05:4A:86:13:CA:43:A3:5B:0E:AF:12:84:01:6E:14:D5:66:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA79830F4B31545996B4DF220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/096474bd-6110-3ad3-9b19-fdcaaa2ade4b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.208.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:30:f4:b3:15:45:99:6b:4d:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cdfc40fb-e9c7-4204-8808-0922f9f88003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:70:9d:e1:07:a2:05:4c:b3:d3:af:eb:32:8c: 5f:32:45:18:b0:50:18:d9:01:cc:21:7d:fe:72:6f: aa:04:5b:02:55:c5:05:bf:54:ab:c8:f4:95:c2:a1: b4:0f:5a:ae:3c:ba:01:c3:7e:09:d8:4f:b8:59:d9: 3d:81:80:e0:e9:42:3a:84:ef:50:eb:12:ea:dc:91: 73:d3:af:b4:72:e7:d6:27:ca:58:5b:92:1f:70:6a: ae:ff:16:3d:28:e2:84:ef:ad:f7:4c:f1:1d:38:ce: d9:1d:d3:c3:03:16:0d:51:b3:15:b3:d5:a4:ae:63: 05:43:b7:f9:54:d7:2b:da:b5:1f:be:d7:2a:53:c0: 2d:11:c0:a9:bd:13:5f:94:62:d7:94:2b:74:57:7b: 63:d0:eb:1b:34:f8:86:a3:dc:66:09:b0:11:3d:58: cd:ab:bd:22:5a:09:b0:60:d2:43:f5:ed:d6:6a:84: ea:eb:ae:69:7a:c2:f6:2e:10:39:2a:16:e3:fe:ab: ba:65:db:46:9e:a2:30:8b:22:39:c1:7c:de:9e:e0: c3:df:44:b4:40:fb:4d:38:0e:6d:78:27:aa:3a:0c: a0:a3:d3:50:50:a5:d2:70:51:23:0c:7f:ee:22:ac: 2b:51:a9:e1:ae:d6:71:8b:50:50:29:f0:1e:61:9f: 75:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:69:05:4A:86:13:CA:43:A3:5B:0E:AF:12:84:01:6E:14:D5:66:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/096474bd-6110-3ad3-9b19-fdcaaa2ade4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:60:70:7c:c9:56:33:1b:de:41:de:ce:29:d9:79:63:e6:2c: 6a:4e:ff:5d:ba:dc:6e:7b:aa:ab:77:0b:be:61:33:9b:dd:3b: 35:84:4a:80:2b:f2:50:2d:5d:b1:ba:fb:24:85:d5:92:45:fa: ad:e1:24:6e:97:40:92:9c:98:7c:c4:32:1f:f5:01:ae:3d:82: 22:00:4e:45:94:0f:ec:d3:f5:8e:42:98:9d:52:0e:f0:62:ce: f7:a2:4d:9c:f8:ef:63:29:01:00:3c:a6:f4:44:b8:98:47:0f: 21:25:8c:7c:ef:18:85:75:34:36:87:63:85:c9:e6:b2:1e:db: fe:c6:e1:68:d7:9b:40:d3:2e:66:37:74:1a:ab:9a:6d:4b:0e: 49:92:2c:6b:e5:86:d7:a2:bb:70:a3:68:bd:a1:35:a9:e7:66: 2f:d8:d2:5a:0b:a5:ab:28:4c:0a:e3:f0:46:3b:fb:df:7d:2d: f9:e7:90:29:55:43:e4:bb:db:18:cb:3b:08:d2:4c:68:d5:19: 18:72:6d:af:e9:1b:38:03:af:97:fd:77:6d:ea:5a:76:df:72: e4:61:5f:66:6d:13:3f:29:f2:dd:64:b2:01:c7:59:b5:d0:4f: 56:b2:46:be:ff:38:aa:dd:a1:c8:e6:e5:29:fa:f5:5f:95:a8: 93:99:11:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmDD0sxVFmWtN8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2RmYzQwZmItZTljNy00MjA0LTg4MDgtMDkyMmY5Zjg4MDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHCd4QeiBUyz06/rMoxfMkUYsFAY2QHMIX3+ cm+qBFsCVcUFv1SryPSVwqG0D1quPLoBw34J2E+4Wdk9gYDg6UI6hO9Q6xLq3JFz 06+0cufWJ8pYW5IfcGqu/xY9KOKE7633TPEdOM7ZHdPDAxYNUbMVs9WkrmMFQ7f5 VNcr2rUfvtcqU8AtEcCpvRNflGLXlCt0V3tj0OsbNPiGo9xmCbARPVjNq70iWgmw YNJD9e3WaoTq665pesL2LhA5Khbj/qu6ZdtGnqIwiyI5wXzenuDD30S0QPtNOA5t eCeqOgygo9NQUKXScFEjDH/uIqwrUanhrtZxi1BQKfAeYZ91DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhpBUqGE8pDo1sOrxKEAW4U1WaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDk2NDc0YmQtNjExMC0z YWQzLTliMTktZmRjYWFhMmFkZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9BYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxgcHzJVjMb3kHezinZeWPmLGpO/1263G57qqt3C75hM5vdOzWESoAr 8lAtXbG6+ySF1ZJF+q3hJG6XQJKcmHzEMh/1Aa49giIATkWUD+zT9Y5CmJ1SDvBi zveiTZz472MpAQA8pvREuJhHDyEljHzvGIV1NDaHY4XJ5rIe2/7G4WjXm0DTLmY3 dBqrmm1LDkmSLGvlhteiu3CjaL2hNannZi/Y0loLpasoTArj8EY7+999LfnnkClV Q+S72xjLOwjSTGjVGRhyba/pGzgDr5f9d23qWnbfcuRhX2ZtEz8p8t1ksgHHWbXQ T1ayRr7/OKrdocjm5Sn69V+VqJOZEVo= -----END CERTIFICATE-----Generated at Fri Sep 4 22:44:22 2026 by rpki-client