$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143ff501-dd75-3ce0-b814-efa6331916a5.roa File: 143ff501-dd75-3ce0-b814-efa6331916a5.roa (raw, json) Hash identifier: HeqRqHzDcYvOiC+zi5YaEXTuUcQCrvPk5oqbp56kwFg= Subject key identifier: D1:99:92:89:D1:12:63:5C:CD:7B:40:25:E0:F4:6F:00:3F:06:03:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81AC1BF8419F32690B6400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143ff501-dd75-3ce0-b814-efa6331916a5.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 16625 IP address blocks: 23.223.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:ac:1b:f8:41:9f:32:69:0b:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=b4f0d920-3685-42d0-a889-b7685f8bd132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:9b:9f:7e:11:a2:88:b5:26:bf:8f:df:16: 51:e5:e0:55:8f:9a:4c:c3:c2:f0:6d:5f:6f:f5:8a: 9d:2d:c1:86:83:ce:4b:3d:80:28:df:16:b0:10:88: 9b:6d:58:d3:5d:a5:d7:0c:5b:80:60:b1:a1:97:b3: b0:40:c1:b8:d6:53:bb:42:12:cd:42:aa:75:94:9a: 15:de:16:d8:3b:f2:39:4a:2d:6e:e0:55:44:a5:a2: 80:4b:fa:86:82:eb:45:70:e9:54:06:d1:e6:77:9a: 93:cd:97:4c:5c:18:2a:97:26:3c:5d:b5:cc:91:2c: a7:bf:01:cf:72:00:18:17:e4:0a:6e:92:79:68:91: 37:3b:26:fa:e7:0e:04:d0:7a:2e:f5:66:d4:df:37: d3:f3:c8:d0:52:7b:9d:01:27:bb:48:98:86:04:19: 24:45:46:84:a0:6e:e5:ad:a2:2c:5a:f8:eb:2a:16: 31:d6:ce:e9:16:b4:d0:cf:ec:3c:9a:0e:5e:82:97: 6b:1b:26:be:6c:2d:20:31:d2:92:a3:47:b7:4b:ce: e9:ef:62:8a:14:3a:ca:14:d2:79:8d:24:74:77:50: d3:d9:57:0f:05:86:85:7d:02:e4:36:8a:7a:03:92: d9:86:bf:4e:8a:65:88:40:0f:be:81:d7:4b:54:e0: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:99:92:89:D1:12:63:5C:CD:7B:40:25:E0:F4:6F:00:3F:06:03:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/143ff501-dd75-3ce0-b814-efa6331916a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:63:46:68:36:d3:38:a8:12:e6:d5:ef:a9:53:f5:5c:86:3c: 9a:e4:1c:fa:b7:9d:47:35:7a:d3:81:65:cb:9c:de:42:a1:46: 47:88:1b:ff:63:e1:2e:5b:1b:5f:4d:14:a7:c0:5f:29:74:31: b0:a8:7e:08:3f:b4:1c:89:18:94:62:1c:6e:36:88:06:7d:20: 86:7d:be:55:17:0a:98:71:d8:6f:a5:04:e7:68:0b:2c:c3:1f: 38:9e:2c:e0:44:ef:4a:7e:52:31:af:b5:22:7d:2d:47:0d:34: ea:ee:d5:6f:fd:9f:03:0f:77:72:b0:0e:bd:08:a9:a6:94:07: 12:81:df:0e:b2:b7:30:fc:70:25:bd:85:5d:e5:c9:42:7d:18: 8e:95:00:7f:dd:cb:01:3e:a9:8b:aa:cb:9a:5d:a3:4d:09:8a: b4:43:99:37:d2:89:4f:51:17:7f:a3:9d:38:ce:f3:88:85:de: 3e:0d:63:06:f5:9f:fa:2c:af:86:20:8d:f4:59:36:21:4e:60: 4d:0a:91:9b:d2:71:2c:15:7a:71:1a:a0:92:66:9c:fe:0f:09: 16:04:96:21:19:68:73:20:65:2d:55:6d:e5:91:69:fa:f2:70: ab:1c:be:9a:c3:2e:5f:70:cb:9d:db:7d:ee:47:1f:95:52:86: bd:1c:6f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugawb+EGfMmkLZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YjRmMGQ5MjAtMzY4NS00MmQwLWE4ODktYjc2ODVmOGJkMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGqbn34Rooi1Jr+P3xZR5eBVj5pMw8LwbV9v 9YqdLcGGg85LPYAo3xawEIibbVjTXaXXDFuAYLGhl7OwQMG41lO7QhLNQqp1lJoV 3hbYO/I5Si1u4FVEpaKAS/qGgutFcOlUBtHmd5qTzZdMXBgqlyY8XbXMkSynvwHP cgAYF+QKbpJ5aJE3Oyb65w4E0Hou9WbU3zfT88jQUnudASe7SJiGBBkkRUaEoG7l raIsWvjrKhYx1s7pFrTQz+w8mg5egpdrGya+bC0gMdKSo0e3S87p72KKFDrKFNJ5 jSR0d1DT2VcPBYaFfQLkNop6A5LZhr9OimWIQA++gddLVOBYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGZkonREmNczXtAJeD0bwA/BgOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTQzZmY1MDEtZGQ3NS0z Y2UwLWI4MTQtZWZhNjMzMTkxNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF99QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVjRmg20zioEubV76lT9VyGPJrkHPq3nUc1etOBZcuc3kKhRkeIG/9j 4S5bG19NFKfAXyl0MbCofgg/tByJGJRiHG42iAZ9IIZ9vlUXCphx2G+lBOdoCyzD HzieLOBE70p+UjGvtSJ9LUcNNOru1W/9nwMPd3KwDr0IqaaUBxKB3w6ytzD8cCW9 hV3lyUJ9GI6VAH/dywE+qYuqy5pdo00JirRDmTfSiU9RF3+jnTjO84iF3j4NYwb1 n/osr4YgjfRZNiFOYE0KkZvScSwVenEaoJJmnP4PCRYEliEZaHMgZS1VbeWRafry cKscvprDLl9wy53bfe5HH5VShr0cb/o= -----END CERTIFICATE-----Generated at Sat Sep 5 02:10:41 2026 by rpki-client