$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a11e44b-82b1-3c08-a505-4aa9bda5e236.roa File: 1a11e44b-82b1-3c08-a505-4aa9bda5e236.roa (raw, json) Hash identifier: eMdDkWEg+Qym3IUVJBgpAKB6f7uJGx31MnCrYs3JHxk= Subject key identifier: F8:A4:D1:E1:26:48:51:A7:9E:40:3D:E6:93:E5:13:D7:CB:1C:98:09 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE38C9D92BA4B4D6E3DA99CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a11e44b-82b1-3c08-a505-4aa9bda5e236.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 35994 IP address blocks: 23.34.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:9d:92:ba:4b:4d:6e:3d:a9:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=41b6a506-b4da-4ffd-b1b4-5a30b6237245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d4:20:3d:5d:68:20:05:b1:62:be:cf:ab:5d: 0c:8f:16:4e:83:6d:be:5b:d3:f7:d9:49:d3:21:66: 59:7b:8a:f1:c4:b8:d8:38:20:ab:b7:3d:d1:33:5e: 09:6a:3a:c7:6e:9d:5b:7d:dd:f3:3b:f2:01:ab:5a: fb:e8:6b:b6:22:cc:f2:17:72:11:65:56:d3:9c:f6: b9:98:5a:da:24:4a:a3:e5:5d:55:4d:30:51:54:77: 3c:d1:5f:9b:d4:d1:97:a6:c1:b5:d6:d0:f0:b9:4b: 39:d0:39:af:e1:57:d2:64:77:eb:d7:ea:ab:78:c1: 05:bf:33:4e:b9:05:05:8e:c5:f0:e5:49:b1:af:88: 48:5a:85:66:c9:a1:05:7d:ad:1f:1a:37:6a:2f:92: d0:dd:48:d7:40:30:b5:1a:5e:74:22:d2:cf:63:8a: d6:05:ad:70:30:9d:f8:4c:07:6b:47:65:2f:cb:e4: 12:0d:f9:90:71:a1:57:b0:51:92:d5:98:c2:ed:40: 9b:fa:b5:e1:a3:28:9b:1f:00:cd:da:6a:5c:ca:6d: 38:b4:c1:a4:55:bc:eb:03:bf:70:32:93:2b:f9:55: 27:6f:05:2c:86:a9:44:59:04:6c:ff:2d:2b:6d:8a: c4:83:c0:ab:d4:18:ab:87:a2:8c:7c:5f:36:7b:07: 0c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:D1:E1:26:48:51:A7:9E:40:3D:E6:93:E5:13:D7:CB:1C:98:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a11e44b-82b1-3c08-a505-4aa9bda5e236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:4c:6a:7e:a9:9b:37:c8:44:88:8c:e4:32:d6:bc:7e:3e:02: a6:2c:5d:48:47:16:b2:88:2a:dc:ba:21:bc:e6:c1:7f:db:39: b4:d1:7c:33:db:f3:3d:f9:21:47:ff:d2:bb:7e:7a:bb:ce:41: 2c:d4:1b:c2:41:cc:ec:d6:0c:e7:f0:20:62:71:ab:f3:ae:ad: a2:44:71:d7:b9:62:0a:71:45:54:57:f5:f6:3f:27:37:1f:cb: c6:2e:4b:b2:0c:cd:76:fb:43:35:7c:e7:1e:60:81:84:77:11: 6f:e9:f8:21:3e:d0:89:48:f7:db:96:6b:b4:49:56:b8:3c:ee: 0c:b0:3c:bd:00:82:af:fc:b0:2c:78:8f:e6:1b:e6:87:78:25: 04:dd:90:2e:cc:5a:06:0b:32:49:a6:26:f3:d5:aa:8a:f9:42: a6:bc:d9:a5:4d:6a:1c:6d:1c:f9:c5:a6:8f:e1:37:d6:d9:e2: f9:9d:44:c6:0b:49:99:89:ad:e4:58:bc:70:59:04:a6:ee:b0: 20:4a:3a:42:78:a6:2b:88:b6:66:cd:3b:7f:2c:4e:da:54:9b: a6:ae:d6:bc:4c:b7:98:89:60:93:ed:8c:20:6b:03:60:d1:23: cf:eb:53:bd:db:6a:b7:7b:1d:0b:98:61:49:ef:e8:75:b5:1f: 0f:69:aa:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJ2SuktNbj2pnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NDFiNmE1MDYtYjRkYS00ZmZkLWIxYjQtNWEzMGI2MjM3MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9QgPV1oIAWxYr7Pq10MjxZOg22+W9P32UnT IWZZe4rxxLjYOCCrtz3RM14JajrHbp1bfd3zO/IBq1r76Gu2IszyF3IRZVbTnPa5 mFraJEqj5V1VTTBRVHc80V+b1NGXpsG11tDwuUs50Dmv4VfSZHfr1+qreMEFvzNO uQUFjsXw5Umxr4hIWoVmyaEFfa0fGjdqL5LQ3UjXQDC1Gl50ItLPY4rWBa1wMJ34 TAdrR2Uvy+QSDfmQcaFXsFGS1ZjC7UCb+rXhoyibHwDN2mpcym04tMGkVbzrA79w MpMr+VUnbwUshqlEWQRs/y0rbYrEg8Cr1Birh6KMfF82ewcMGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPik0eEmSFGnnkA95pPlE9fLHJgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWExMWU0NGItODJiMS0z YzA4LWE1MDUtNGFhOWJkYTVlMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyKJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRMan6pmzfIRIiM5DLWvH4+AqYsXUhHFrKIKty6IbzmwX/bObTRfDPb 8z35IUf/0rt+ervOQSzUG8JBzOzWDOfwIGJxq/OuraJEcde5YgpxRVRX9fY/Jzcf y8YuS7IMzXb7QzV85x5ggYR3EW/p+CE+0IlI99uWa7RJVrg87gywPL0Agq/8sCx4 j+Yb5od4JQTdkC7MWgYLMkmmJvPVqor5Qqa82aVNahxtHPnFpo/hN9bZ4vmdRMYL SZmJreRYvHBZBKbusCBKOkJ4piuItmbNO38sTtpUm6au1rxMt5iJYJPtjCBrA2DR I8/rU73bard7HQuYYUnv6HW1Hw9pqjQ= -----END CERTIFICATE-----Generated at Sat Sep 5 06:55:02 2026 by rpki-client