$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1589d741-f995-3eb0-97b9-aea31377713e.roa File: 1589d741-f995-3eb0-97b9-aea31377713e.roa (raw, json) Hash identifier: 2y++gzqwQqsGovQ7i3WXaMumUvbrgyQ0DV0ptw6/Ry8= Subject key identifier: 9E:6C:50:51:4B:72:D6:56:63:CD:E3:03:F8:58:51:32:C3:3A:DA:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EFF777FA143143BE55F5B6700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1589d741-f995-3eb0-97b9-aea31377713e.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.53.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:7f:a1:43:14:3b:e5:5f:5b:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=bb4b3bb6-74bd-438f-af3f-963188121480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:f3:9a:ae:84:c2:30:8e:b1:5f:0d:e6:e2: a2:7a:c7:25:7e:83:af:14:59:9c:04:4a:7a:cd:cb: 30:7e:cf:8d:6f:b4:6f:eb:04:c8:5d:55:1d:b2:bf: e7:49:5e:6d:0c:d7:dc:5e:38:9f:20:68:fc:2d:86: ad:20:2c:06:33:a7:f0:d9:a3:02:08:be:ae:7f:5c: e0:94:1f:99:83:0f:53:0c:a7:ab:24:bd:91:e5:90: e4:3b:b7:06:f1:65:7f:88:47:b1:a0:96:64:09:90: ce:4d:1f:f8:16:c0:40:ea:47:41:cb:ee:a4:2c:35: 2c:30:0a:c8:82:89:8c:19:51:ae:56:a5:e7:56:6f: f0:cc:43:77:6b:93:80:e0:15:57:88:92:75:76:c9: a6:98:0e:40:ef:b3:0a:4e:9c:ea:35:ae:94:b0:d6: cf:c2:b7:90:32:11:64:f4:dc:4c:e9:de:95:03:0b: 1c:db:b8:db:22:97:d4:c5:96:e6:41:57:d7:9f:f5: c1:64:69:60:f9:a4:49:00:51:c5:b1:cb:ac:ce:80: a3:25:2f:87:76:ff:83:1a:02:ea:b1:0c:42:15:76: 43:cc:8e:56:f1:58:1d:d6:81:3c:bc:47:3b:41:34: d4:ac:ae:98:1a:ac:3d:ab:79:dc:4b:35:1e:21:06: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6C:50:51:4B:72:D6:56:63:CD:E3:03:F8:58:51:32:C3:3A:DA:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1589d741-f995-3eb0-97b9-aea31377713e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ff:cb:97:1e:06:89:e0:9c:b3:1c:62:1a:0b:77:c5:d6:e8: 1f:75:62:6d:65:b2:d5:ce:6a:7f:9e:1e:d9:47:ba:af:1a:b3: 7e:91:4c:d8:ef:b9:25:7f:cb:62:6e:a7:08:99:5d:7f:55:7c: 13:7a:b5:f9:89:9b:2a:4b:6c:45:ff:00:46:39:27:eb:be:ca: 4a:3b:98:f0:ba:fa:d1:bc:28:fe:b6:f8:41:59:7c:ed:5e:68: 9a:98:81:fd:6e:d1:e4:03:3f:bd:5f:41:33:fb:c9:ea:10:ba: c3:62:14:41:15:a3:8b:b7:e8:d6:fe:ee:03:60:38:0a:b5:bc: c1:b2:44:d4:50:f5:69:9c:c9:df:bc:4a:80:9c:b3:6e:b0:d0: b7:5b:74:a7:75:db:11:f7:c8:e5:88:55:8d:18:39:ef:91:8c: 92:8f:0d:f1:fd:b8:0c:6a:ca:39:89:c3:ca:a3:6f:21:2a:f5: 23:26:60:a1:2a:fe:21:89:71:82:59:6c:70:08:60:66:01:2f: 70:ac:71:f7:18:06:71:78:39:78:bd:93:c8:79:ea:1a:39:d1: fe:1a:68:1d:c3:be:10:ba:93:1f:23:1f:2a:76:cf:e6:a4:f7: 01:dd:ac:60:24:d4:e9:2b:b7:c7:3a:c0:9f:86:a8:2f:3b:de: 91:ab:73:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3+hQxQ75V9bZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk YmI0YjNiYjYtNzRiZC00MzhmLWFmM2YtOTYzMTg4MTIxNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf/zmq6EwjCOsV8N5uKiesclfoOvFFmcBEp6 zcswfs+Nb7Rv6wTIXVUdsr/nSV5tDNfcXjifIGj8LYatICwGM6fw2aMCCL6uf1zg lB+Zgw9TDKerJL2R5ZDkO7cG8WV/iEexoJZkCZDOTR/4FsBA6kdBy+6kLDUsMArI gomMGVGuVqXnVm/wzEN3a5OA4BVXiJJ1dsmmmA5A77MKTpzqNa6UsNbPwreQMhFk 9NxM6d6VAwsc27jbIpfUxZbmQVfXn/XBZGlg+aRJAFHFscuszoCjJS+Hdv+DGgLq sQxCFXZDzI5W8Vgd1oE8vEc7QTTUrK6YGqw9q3ncSzUeIQZC9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5sUFFLctZWY83jA/hYUTLDOtoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU4OWQ3NDEtZjk5NS0z ZWIwLTk3YjktYWVhMzEzNzc3MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFzU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv/y5ceBongnLMcYhoLd8XW6B91Ym1lstXOan+eHtlHuq8as36RTNjv uSV/y2JupwiZXX9VfBN6tfmJmypLbEX/AEY5J+u+yko7mPC6+tG8KP62+EFZfO1e aJqYgf1u0eQDP71fQTP7yeoQusNiFEEVo4u36Nb+7gNgOAq1vMGyRNRQ9Wmcyd+8 SoCcs26w0LdbdKd12xH3yOWIVY0YOe+RjJKPDfH9uAxqyjmJw8qjbyEq9SMmYKEq /iGJcYJZbHAIYGYBL3CscfcYBnF4OXi9k8h56ho50f4aaB3DvhC6kx8jHyp2z+ak 9wHdrGAk1Okrt8c6wJ+GqC873pGrc5A= -----END CERTIFICATE-----Generated at Sat Sep 5 05:52:26 2026 by rpki-client