$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f0e65a0-265d-385e-800d-9a7782e80307.roa File: 0f0e65a0-265d-385e-800d-9a7782e80307.roa (raw, json) Hash identifier: 9CjJs/XuxiO8OpjePNEwwqBgq9iO4NSSOcvnpvcOO7U= Subject key identifier: 21:CE:FF:B4:49:F4:DB:63:5F:BE:6A:55:11:DA:7F:6A:3E:D6:C3:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7982B40472A8994A914B6A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f0e65a0-265d-385e-800d-9a7782e80307.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.206.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:2b:40:47:2a:89:94:a9:14:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=563705ad-6fb5-403b-82c6-d2fc24f69e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:72:1c:b6:3a:a2:8f:1a:7a:53:5d:e5:40:b9: ed:c6:cd:8e:fc:ad:71:e6:e2:ff:40:53:6c:2c:6a: f2:9d:81:de:8b:02:c9:f2:8a:13:d3:2e:7e:04:7d: 49:36:d4:99:ed:8f:9d:66:07:eb:67:09:09:4d:5a: 93:68:b7:c5:9a:c2:8b:f5:84:c9:a3:bc:62:d5:9c: 4f:9d:e6:fb:7c:3a:19:99:5f:33:29:b0:07:86:fe: 73:c2:bb:66:9a:24:71:d5:1c:5b:5e:85:e6:d0:dd: f4:26:64:98:4d:51:71:51:e2:9f:c4:c2:6d:a6:1d: 03:f8:04:92:0a:f0:d1:6b:f9:5a:73:8e:82:b6:f5: 89:46:4b:05:99:ec:fa:b2:0c:22:d5:c5:53:86:a6: 6d:35:f1:1a:c3:02:86:a7:17:78:5e:71:66:60:50: 4b:48:e9:b3:2f:82:62:3f:38:e9:90:43:b3:63:d2: 85:90:31:cd:3c:fb:a4:57:31:dc:96:0b:48:19:55: 3e:c6:92:e8:16:f1:3f:b6:27:58:e9:75:bf:0d:ff: b3:c8:f1:92:2a:09:f5:7d:f7:31:02:aa:4e:8a:b2: 5e:d0:04:de:61:a6:f9:68:ae:90:02:dd:41:ad:89: 99:43:ea:a6:51:2e:0e:a5:e1:b6:a6:65:bf:a2:5a: 77:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CE:FF:B4:49:F4:DB:63:5F:BE:6A:55:11:DA:7F:6A:3E:D6:C3:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f0e65a0-265d-385e-800d-9a7782e80307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:eb:71:94:1c:76:8f:ef:65:1f:11:b4:c6:95:cb:32:ae:1b: ec:45:81:6d:3a:38:11:02:53:de:f7:2b:21:77:93:00:88:21: 9f:2a:03:cb:cb:56:8a:3d:4a:37:5a:7d:03:22:03:92:71:48: 6c:27:6f:ff:e3:7c:a3:3b:b1:f3:67:6b:0e:b7:0e:b8:cc:7a: dd:ab:e6:67:2d:1c:ed:21:d5:f8:f3:21:11:fc:3f:dc:69:8b: f1:12:d7:4a:51:44:ea:d8:3e:ae:d3:40:11:b9:e6:68:69:3f: 53:07:a2:d4:3f:8b:53:f6:92:ce:81:4c:72:98:4b:12:c7:6d: 69:69:dc:54:69:c7:52:41:33:63:72:b9:77:2b:aa:89:20:f9: 46:f0:71:bc:30:9d:73:09:67:53:0f:ab:64:1b:64:2a:8c:c0: 62:04:87:5d:00:85:90:ba:ad:e8:89:be:93:81:bf:c6:f7:d2: 2d:3b:d4:1b:8f:66:97:b9:d9:d1:c3:10:67:45:1c:2f:32:7e: dc:4b:f4:f2:63:a4:c1:16:4a:ec:02:fb:9b:7f:47:b8:a8:d9: 70:8b:7b:fa:07:fd:c9:bc:2f:eb:38:b5:90:95:33:f7:0d:94: 81:a4:0e:c4:c5:78:6b:0c:6b:f7:2d:1f:1b:32:c0:8a:cc:64: 99:e8:61:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmCtARyqJlKkUtqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTYzNzA1YWQtNmZiNS00MDNiLTgyYzYtZDJmYzI0ZjY5ZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnIctjqijxp6U13lQLntxs2O/K1x5uL/QFNs LGrynYHeiwLJ8ooT0y5+BH1JNtSZ7Y+dZgfrZwkJTVqTaLfFmsKL9YTJo7xi1ZxP neb7fDoZmV8zKbAHhv5zwrtmmiRx1RxbXoXm0N30JmSYTVFxUeKfxMJtph0D+ASS CvDRa/lac46CtvWJRksFmez6sgwi1cVThqZtNfEawwKGpxd4XnFmYFBLSOmzL4Ji PzjpkEOzY9KFkDHNPPukVzHclgtIGVU+xpLoFvE/tidY6XW/Df+zyPGSKgn1ffcx AqpOirJe0ATeYab5aK6QAt1BrYmZQ+qmUS4OpeG2pmW/olp3AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHO/7RJ9NtjX75qVRHaf2o+1sOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGYwZTY1YTAtMjY1ZC0z ODVlLTgwMGQtOWE3NzgyZTgwMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrrcZQcdo/vZR8RtMaVyzKuG+xFgW06OBECU973KyF3kwCIIZ8qA8vL Voo9SjdafQMiA5JxSGwnb//jfKM7sfNnaw63DrjMet2r5mctHO0h1fjzIRH8P9xp i/ES10pRROrYPq7TQBG55mhpP1MHotQ/i1P2ks6BTHKYSxLHbWlp3FRpx1JBM2Ny uXcrqokg+UbwcbwwnXMJZ1MPq2QbZCqMwGIEh10AhZC6reiJvpOBv8b30i071BuP Zpe52dHDEGdFHC8yftxL9PJjpMEWSuwC+5t/R7io2XCLe/oH/cm8L+s4tZCVM/cN lIGkDsTFeGsMa/ctHxsywIrMZJnoYZk= -----END CERTIFICATE-----Generated at Fri Sep 4 22:21:17 2026 by rpki-client