$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa File: 1ba38731-e254-3980-ade3-0f1947ffc32a.roa (raw, json) Hash identifier: YMTqddDzitUkVC1zAoR3zbMzExq4najmtaz4T3cSQzY= Subject key identifier: AD:1D:6A:E1:35:F2:94:BD:48:93:10:3F:AC:8B:C1:14:7A:FF:53:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EBB11C2347AE162AC0F10B880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.207.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c2:34:7a:e1:62:ac:0f:10:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=b6fd22a4-daf0-44f2-9bc7-d49e27932a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:19:03:d8:3e:c0:6a:2f:41:e6:0a:ca:07:9f: 01:c4:81:e7:3c:ec:f8:cc:ad:dc:2f:37:69:e5:63: 50:a2:27:54:06:6f:c4:b4:4b:a3:d2:f5:c4:6c:10: c9:d5:17:a4:76:2b:24:84:b8:12:26:51:3b:e6:33: bb:38:66:c4:2b:2d:82:8b:40:4d:b0:63:0f:18:80: 80:02:44:08:89:47:fc:85:7c:02:5b:fa:ef:5e:1e: a8:ea:09:ff:b7:b2:90:cd:15:0d:42:fc:8f:86:e6: 83:b6:b4:d5:16:3a:d5:bd:0b:e3:38:0a:eb:30:c4: 77:48:10:3c:8f:c7:e8:21:b8:80:ff:9c:f1:ff:77: 69:c1:b9:dd:1b:13:10:f4:1c:a6:a2:e7:41:14:2a: 72:15:9d:43:ae:e2:d6:82:1e:e3:de:22:b4:95:b2: 9b:05:0f:ba:d5:c6:49:22:c7:73:b9:a9:54:e6:7b: d4:6d:91:c5:49:cf:65:49:e5:a2:71:08:f3:7a:e0: 71:c4:aa:17:f0:b5:3b:16:27:b3:35:b3:60:e2:85: c3:f6:dd:3e:57:cd:29:5f:ae:9d:57:97:dc:12:84: 73:15:68:a2:8c:95:11:4e:cc:b8:49:b9:11:a1:7f: 18:43:30:7b:4f:79:0b:0c:fd:49:ce:f2:03:c5:7f: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1D:6A:E1:35:F2:94:BD:48:93:10:3F:AC:8B:C1:14:7A:FF:53:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1c:76:34:68:18:5a:41:59:68:6a:03:7d:bf:3f:6b:45:10: 95:96:df:86:d3:86:a5:b0:77:56:ff:b0:91:04:30:86:83:c2: 14:2d:6a:4c:ac:07:c7:36:b9:45:ae:77:77:3a:b2:0e:c1:d0: 5f:d7:ca:db:c4:e5:7d:f6:03:55:12:67:a2:a6:f7:1c:4c:d5: ec:2f:3d:17:07:bc:2c:63:f4:e2:5c:97:ae:99:99:1f:c6:81: 43:10:a9:00:8b:b4:65:cd:b6:12:66:25:36:0d:4f:35:7e:22: cb:3d:3c:d6:e3:88:40:9d:45:0e:78:41:59:b3:ea:a5:45:dd: a4:4c:8a:27:77:66:af:ec:d3:71:6a:48:e3:29:21:b6:61:ca: f7:bd:57:13:98:0f:94:13:d8:dd:7d:1e:05:f7:43:5a:04:68: 61:18:1a:7b:7c:2e:90:1d:49:42:29:7c:df:73:a4:10:c2:f6: 9d:77:f3:0d:74:df:10:3c:34:6a:14:63:90:58:13:80:a6:ae: 02:97:f1:8e:ca:6a:f8:2d:11:ed:f0:39:09:2d:3e:20:25:2e: 5f:4d:92:79:2a:a7:53:2d:bc:9d:93:fb:fa:cb:4f:29:d2:48: 4b:2b:06:6b:dd:dc:6a:56:c5:44:21:bc:27:ae:cc:cf:66:f5: ed:51:7f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EcI0euFirA8QuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YjZmZDIyYTQtZGFmMC00NGYyLTliYzctZDQ5ZTI3OTMyYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xkD2D7Aai9B5grKB58BxIHnPOz4zK3cLzdp 5WNQoidUBm/EtEuj0vXEbBDJ1RekdiskhLgSJlE75jO7OGbEKy2Ci0BNsGMPGICA AkQIiUf8hXwCW/rvXh6o6gn/t7KQzRUNQvyPhuaDtrTVFjrVvQvjOArrMMR3SBA8 j8foIbiA/5zx/3dpwbndGxMQ9BymoudBFCpyFZ1DruLWgh7j3iK0lbKbBQ+61cZJ IsdzualU5nvUbZHFSc9lSeWicQjzeuBxxKoX8LU7FiezNbNg4oXD9t0+V80pX66d V5fcEoRzFWiijJURTsy4SbkRoX8YQzB7T3kLDP1JzvIDxX+sFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0dauE18pS9SJMQP6yLwRR6/1NsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWJhMzg3MzEtZTI1NC0z OTgwLWFkZTMtMGYxOTQ3ZmZjMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACccdjRoGFpBWWhqA32/P2tFEJWW34bThqWwd1b/sJEEMIaDwhQtakys B8c2uUWud3c6sg7B0F/XytvE5X32A1USZ6Km9xxM1ewvPRcHvCxj9OJcl66ZmR/G gUMQqQCLtGXNthJmJTYNTzV+Iss9PNbjiECdRQ54QVmz6qVF3aRMiid3Zq/s03Fq SOMpIbZhyve9VxOYD5QT2N19HgX3Q1oEaGEYGnt8LpAdSUIpfN9zpBDC9p138w10 3xA8NGoUY5BYE4CmrgKX8Y7KavgtEe3wOQktPiAlLl9Nknkqp1MtvJ2T+/rLTynS SEsrBmvd3GpWxUQhvCeuzM9m9e1Rf5I= -----END CERTIFICATE-----Generated at Sat Sep 5 08:59:42 2026 by rpki-client