$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ceeb21d-dda0-3d59-8e9e-146baf0721b2.roa File: 0ceeb21d-dda0-3d59-8e9e-146baf0721b2.roa (raw, json) Hash identifier: 1+u+W3P3Vrx/paxCga8SJxdCW034vnuAgL2rs9GoxtI= Subject key identifier: 71:03:EC:70:8D:37:7D:B0:10:6A:FD:30:2C:25:CF:3F:4B:16:1B:F4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093D0257CD67350A1C0811C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ceeb21d-dda0-3d59-8e9e-146baf0721b2.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.2.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:02:57:cd:67:35:0a:1c:08:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=3eadd1aa-933f-4964-85ee-545aba17e460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4c:2d:e1:0b:1f:dd:41:5e:5b:41:20:94:0a: eb:b9:01:b2:0d:36:cb:96:32:a6:03:96:33:b3:64: f7:b0:51:3a:e1:1e:d2:3a:7d:5e:7b:c0:98:85:fa: d5:33:cd:86:31:74:c4:ee:79:1e:b7:04:63:09:d2: a1:ef:da:cd:de:bf:c6:00:72:95:8e:13:9d:f8:a4: 3f:ab:07:ab:c0:41:c3:9e:5d:6e:39:23:7f:57:ab: db:86:e7:9e:a7:54:56:98:9e:4c:b3:fe:e2:df:bf: 5d:a4:32:5b:85:a7:a7:dd:2a:11:bf:fb:62:13:a7: 60:9c:7b:b4:ad:10:2b:0a:ca:3c:ca:9e:b1:52:f1: 35:8e:bc:1c:5e:5a:59:4d:fb:cc:43:b2:2b:2b:03: a0:0e:ee:5a:91:3e:69:5d:02:42:4a:36:28:33:7b: 57:0e:29:1c:83:b9:e4:17:cc:50:7a:31:88:6f:22: fa:c5:5d:8e:54:c2:7c:65:11:fd:1e:c7:4f:81:55: bb:be:69:f2:ce:6a:8e:0e:4b:8d:d9:15:e2:06:f7: 2a:fa:77:53:e7:4c:95:2d:ff:9a:f9:7e:8e:96:01: 2d:67:7f:a0:3c:2b:2e:89:92:ec:9d:bc:70:e8:d8: 86:d8:59:2a:42:51:d1:21:b4:0c:6f:01:9f:d5:66: 1e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:EC:70:8D:37:7D:B0:10:6A:FD:30:2C:25:CF:3F:4B:16:1B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ceeb21d-dda0-3d59-8e9e-146baf0721b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6b:4a:f8:7c:3a:23:37:75:b1:79:a7:60:48:73:9b:44:15: e6:eb:0b:39:cc:b6:3b:25:6e:6e:d3:65:f0:88:0b:d5:c2:bb: 79:c7:33:18:bb:c0:a2:f8:a2:8d:8a:62:46:97:b7:8f:07:e6: 2b:74:32:75:65:3a:3b:81:3c:dd:44:da:50:a8:3c:06:16:3e: 58:80:9e:68:1b:cc:f5:d6:67:52:c6:d3:5e:19:74:70:8a:47: ee:eb:86:38:23:ac:0d:0e:29:78:f0:af:08:96:a4:b3:3d:7b: be:77:89:2a:71:b2:12:0f:cb:b0:7f:5a:00:b3:fa:cd:df:1e: cb:e6:f4:2d:bd:a3:b6:ec:a0:9d:87:7d:35:e1:c4:42:27:e4: 0f:b1:07:de:28:83:ed:3a:7a:6c:02:dd:61:46:ae:34:8d:88: 45:dc:22:4a:45:06:b8:bf:20:2d:97:30:a3:63:64:2e:e2:20: 83:62:09:71:ba:ef:77:90:d9:cf:fd:03:b7:30:81:78:a4:1d: 9f:a8:89:df:1b:34:df:2a:4f:2b:e4:a7:0e:2c:f6:ad:c3:3a: 81:d3:78:2a:16:30:09:d0:7f:70:7d:3c:2d:52:3e:86:8f:00: ad:e4:cf:5d:42:e8:f9:78:00:d0:a4:dd:e9:49:d5:ab:7c:92: a3:ca:e0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQJXzWc1ChwIEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk M2VhZGQxYWEtOTMzZi00OTY0LTg1ZWUtNTQ1YWJhMTdlNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0wt4Qsf3UFeW0EglArruQGyDTbLljKmA5Yz s2T3sFE64R7SOn1ee8CYhfrVM82GMXTE7nketwRjCdKh79rN3r/GAHKVjhOd+KQ/ qwerwEHDnl1uOSN/V6vbhueep1RWmJ5Ms/7i379dpDJbhaen3SoRv/tiE6dgnHu0 rRArCso8yp6xUvE1jrwcXlpZTfvMQ7IrKwOgDu5akT5pXQJCSjYoM3tXDikcg7nk F8xQejGIbyL6xV2OVMJ8ZRH9HsdPgVW7vmnyzmqODkuN2RXiBvcq+ndT50yVLf+a +X6OlgEtZ3+gPCsuiZLsnbxw6NiG2FkqQlHRIbQMbwGf1WYefwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHED7HCNN32wEGr9MCwlzz9LFhv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGNlZWIyMWQtZGRhMC0z ZDU5LThlOWUtMTQ2YmFmMDcyMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElrSvh8OiM3dbF5p2BIc5tEFebrCznMtjslbm7TZfCIC9XCu3nHMxi7 wKL4oo2KYkaXt48H5it0MnVlOjuBPN1E2lCoPAYWPliAnmgbzPXWZ1LG014ZdHCK R+7rhjgjrA0OKXjwrwiWpLM9e753iSpxshIPy7B/WgCz+s3fHsvm9C29o7bsoJ2H fTXhxEIn5A+xB94og+06emwC3WFGrjSNiEXcIkpFBri/IC2XMKNjZC7iIINiCXG6 73eQ2c/9A7cwgXikHZ+oid8bNN8qTyvkpw4s9q3DOoHTeCoWMAnQf3B9PC1SPoaP AK3kz11C6Pl4ANCk3elJ1at8kqPK4A4= -----END CERTIFICATE-----Generated at Sat Sep 5 04:32:27 2026 by rpki-client