$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa File: 17f5970d-36e4-3b44-a225-2f83a9437273.roa (raw, json) Hash identifier: LJzqAIdiJShZPCewXbUOiWJ7I+X68slrvOIOS1cTCqA= Subject key identifier: 67:BE:37:BF:48:57:ED:B5:7A:0F:B6:31:5A:F5:B5:D8:3F:FC:FA:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA78852535412671BA83AA700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 35994 IP address blocks: 23.223.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:52:53:54:12:67:1b:a8:3a:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e9dbcbc6-5ab2-4f28-879d-f9e20a6f32ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:68:2b:05:44:00:79:c6:c0:d6:23:bc:38: a0:58:a3:71:22:8e:bd:3a:a5:ac:c3:25:02:e9:70: 4a:4f:81:d1:13:9b:af:be:46:6e:b2:1a:97:61:4c: 77:a6:2f:08:6e:b6:84:31:71:0f:a5:5a:80:39:9c: 59:92:b0:01:92:7c:c2:97:40:b2:ca:ef:86:be:8b: 69:06:c6:d2:ef:28:5e:18:87:3b:49:0c:12:85:d5: 71:3f:51:a6:08:f1:a4:fb:85:16:19:c7:fd:23:c3: 83:87:a0:7b:cf:2b:4f:36:71:d7:68:ef:f3:62:a1: 0d:a0:7d:3d:20:15:6f:f9:d4:60:9e:af:4e:53:ab: ac:fe:9c:7d:f5:1e:d3:04:16:6f:2c:44:bf:99:bb: a0:7a:1d:f8:95:2a:d9:87:40:25:ee:6f:7d:ab:17: 71:b4:68:73:8a:9b:23:58:3f:73:7f:fe:15:51:c7: 20:6b:5a:90:15:11:36:21:e2:43:d0:17:85:a6:c7: 7f:d2:af:33:73:4c:c0:4f:9c:dc:57:19:f5:e8:8b: d5:00:75:b9:6c:16:2f:9a:ac:cb:c9:c7:b1:40:29: ff:50:bd:fb:23:8b:5c:57:f9:04:22:95:e6:8f:c6: 83:08:e2:04:6a:57:dd:99:96:53:db:09:69:fb:70: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BE:37:BF:48:57:ED:B5:7A:0F:B6:31:5A:F5:B5:D8:3F:FC:FA:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17f5970d-36e4-3b44-a225-2f83a9437273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ea:ce:7d:f5:7a:a5:c2:d2:24:b1:72:1b:3a:36:a5:99:5a: 26:38:ab:53:98:bf:47:be:ee:2e:dc:e0:8c:95:52:20:62:54: 9b:15:c0:f7:cb:af:04:a8:5f:81:b7:70:a3:42:41:64:46:bf: 41:13:cf:bb:88:66:83:f9:0c:f3:b3:cd:36:c0:c1:8d:02:96: 97:c1:40:38:b4:96:bf:8f:cf:35:61:2b:7a:21:11:c1:f0:2b: 05:97:76:55:08:43:21:0c:c5:85:81:86:6a:c1:3d:cd:b2:fe: ec:dd:12:c5:d1:c8:ec:2e:6e:f9:78:b1:97:c0:4f:5d:3f:26: 8b:71:bc:c5:c7:00:3c:4f:96:c4:03:23:aa:55:e3:c0:42:73: b6:e5:70:2a:45:8f:65:84:60:d3:74:03:71:06:38:86:5f:cd: a4:d0:2e:01:1d:ac:33:51:e7:eb:56:03:6a:65:bd:5a:5c:77: 78:7d:e0:0d:62:79:b3:be:47:76:e1:e2:32:ef:e5:0d:b7:1d: e7:d6:25:e0:8b:d8:40:9e:5a:0a:21:fb:d3:ee:64:63:26:1d: 75:91:ea:8c:39:8e:09:78:dc:69:f8:57:f4:71:03:32:f1:d3: e8:bf:70:d3:e0:ee:52:f7:39:33:4d:59:f3:22:bf:e3:ef:da: f6:63:52:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFJTVBJnG6g6pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTlkYmNiYzYtNWFiMi00ZjI4LTg3OWQtZjllMjBhNmYzMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtShoKwVEAHnGwNYjvDigWKNxIo69OqWswyUC 6XBKT4HRE5uvvkZushqXYUx3pi8IbraEMXEPpVqAOZxZkrABknzCl0Cyyu+Gvotp BsbS7yheGIc7SQwShdVxP1GmCPGk+4UWGcf9I8ODh6B7zytPNnHXaO/zYqENoH09 IBVv+dRgnq9OU6us/px99R7TBBZvLES/mbugeh34lSrZh0Al7m99qxdxtGhzipsj WD9zf/4VUccga1qQFRE2IeJD0BeFpsd/0q8zc0zAT5zcVxn16IvVAHW5bBYvmqzL ycexQCn/UL37I4tcV/kEIpXmj8aDCOIEalfdmZZT2wlp+3BTJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe+N79IV+21eg+2MVr1tdg//PrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdmNTk3MGQtMzZlNC0z YjQ0LWEyMjUtMmY4M2E5NDM3MjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvqzn31eqXC0iSxchs6NqWZWiY4q1OYv0e+7i7c4IyVUiBiVJsVwPfL rwSoX4G3cKNCQWRGv0ETz7uIZoP5DPOzzTbAwY0ClpfBQDi0lr+PzzVhK3ohEcHw KwWXdlUIQyEMxYWBhmrBPc2y/uzdEsXRyOwubvl4sZfAT10/JotxvMXHADxPlsQD I6pV48BCc7blcCpFj2WEYNN0A3EGOIZfzaTQLgEdrDNR5+tWA2plvVpcd3h94A1i ebO+R3bh4jLv5Q23HefWJeCL2ECeWgoh+9PuZGMmHXWR6ow5jgl43Gn4V/RxAzLx 0+i/cNPg7lL3OTNNWfMiv+Pv2vZjUtA= -----END CERTIFICATE-----Generated at Sat Sep 5 01:29:20 2026 by rpki-client