$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fce4644-9bc1-3c62-bd63-67bcc9448e2a.roa File: 1fce4644-9bc1-3c62-bd63-67bcc9448e2a.roa (raw, json) Hash identifier: AOjTaq7rI7YoBaAkw1e9qZ2yIk4yZCCu0qFe/YZr1ZM= Subject key identifier: C4:56:BE:C7:F3:BC:A5:F1:5C:87:3B:9C:5A:7C:56:8F:AA:E3:49:A9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF44CBEF39A67F9C6C7EC9E24 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fce4644-9bc1-3c62-bd63-67bcc9448e2a.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.40.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:be:f3:9a:67:f9:c6:c7:ec:9e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=079ea129-36d2-4b4e-9748-10ca36f485c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:d7:c4:fe:bd:a5:9d:c4:8b:8c:cf:66:5d: f8:bb:36:3b:7e:60:2b:8e:6e:f8:0c:f0:ed:40:a7: 6a:5b:ad:c0:0d:e4:91:cf:7d:42:57:af:33:5f:3a: df:6b:23:8b:0c:3a:f3:87:69:37:60:15:a2:8e:4b: 1e:cf:a7:cd:5c:b0:da:36:6c:e9:a3:91:78:e0:3f: 66:2f:3a:51:aa:dc:d2:2d:5c:c1:f5:c4:26:b5:43: 41:00:d6:6c:3e:ac:44:4e:54:9e:e3:fa:dd:76:c1: f2:f8:3b:65:85:6f:4d:40:17:cd:19:f8:3f:36:4d: 06:16:7b:ef:36:05:15:80:ba:59:07:17:51:e4:73: 1d:27:7d:17:b6:e8:43:c6:f2:26:5f:fe:2b:af:91: 3e:64:0e:8a:4c:a6:e7:47:87:be:c1:aa:52:4d:6b: 40:29:ad:47:e8:6e:ed:d1:f6:24:44:13:8a:10:96: 92:82:32:60:92:f8:33:af:20:4f:58:2b:b2:04:05: db:de:43:d8:e1:40:29:af:a2:49:4b:93:ae:68:80: e6:e5:63:a9:d1:91:2f:e6:5b:81:d6:1a:82:99:67: a5:f8:fd:ca:2b:a5:2e:4f:7e:34:e7:d9:cf:13:3e: a2:a7:d4:0d:9e:9d:f5:3e:9e:f1:ce:65:38:a9:11: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:BE:C7:F3:BC:A5:F1:5C:87:3B:9C:5A:7C:56:8F:AA:E3:49:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1fce4644-9bc1-3c62-bd63-67bcc9448e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:33:78:0a:2b:70:8e:d2:51:4a:6b:3d:65:e2:0c:32:8b:b2: 54:f2:1e:8e:2e:b8:2b:49:b2:26:de:3f:cd:70:d7:46:2c:f2: 99:13:2a:4a:bc:91:3e:f1:bf:0b:6b:97:63:00:4a:2c:87:30: b1:13:24:80:1e:49:e5:fa:f8:8d:25:80:25:e3:2e:58:a3:5f: b3:25:a6:4e:f0:b8:8d:02:b6:0f:73:e1:db:2d:de:32:9c:3a: fc:75:8c:8f:06:69:8a:d5:e7:f7:8c:a6:82:05:a8:e9:3b:78: a7:84:61:28:a5:3a:fd:97:e4:0d:01:02:f7:ae:02:e8:6a:1c: 6a:df:d3:bb:5c:2b:d5:5e:d8:7f:38:f7:5c:62:a9:81:67:a6: 79:f3:4f:5c:96:c7:40:ce:c6:0f:a5:16:01:8b:30:c1:77:68: 51:08:f1:4d:88:f3:5a:ad:e8:3c:65:e5:c2:60:39:61:1c:7e: db:ea:b8:da:8b:1e:81:fe:6c:0c:17:c8:1c:4f:9d:f5:49:14: 30:77:62:51:d1:7f:4c:bc:39:12:26:55:19:4b:1f:37:8f:50: cd:1a:5d:73:62:38:f0:96:68:3d:20:b3:1f:07:0d:86:99:e8: a7:32:0c:27:99:f3:5d:44:ce:8b:e0:5f:8e:c6:ca:c8:08:4c: 9b:ff:33:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TL7zmmf5xsfsniQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MDc5ZWExMjktMzZkMi00YjRlLTk3NDgtMTBjYTM2ZjQ4NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7HXxP69pZ3Ei4zPZl34uzY7fmArjm74DPDt QKdqW63ADeSRz31CV68zXzrfayOLDDrzh2k3YBWijksez6fNXLDaNmzpo5F44D9m LzpRqtzSLVzB9cQmtUNBANZsPqxETlSe4/rddsHy+DtlhW9NQBfNGfg/Nk0GFnvv NgUVgLpZBxdR5HMdJ30XtuhDxvImX/4rr5E+ZA6KTKbnR4e+wapSTWtAKa1H6G7t 0fYkRBOKEJaSgjJgkvgzryBPWCuyBAXb3kPY4UApr6JJS5OuaIDm5WOp0ZEv5luB 1hqCmWel+P3KK6UuT34059nPEz6ip9QNnp31Pp7xzmU4qRE3EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRWvsfzvKXxXIc7nFp8Vo+q40mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWZjZTQ2NDQtOWJjMS0z YzYyLWJkNjMtNjdiY2M5NDQ4ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyg/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQzeAorcI7SUUprPWXiDDKLslTyHo4uuCtJsibeP81w10Ys8pkTKkq8 kT7xvwtrl2MASiyHMLETJIAeSeX6+I0lgCXjLlijX7Mlpk7wuI0Ctg9z4dst3jKc Ovx1jI8GaYrV5/eMpoIFqOk7eKeEYSilOv2X5A0BAveuAuhqHGrf07tcK9Ve2H84 91xiqYFnpnnzT1yWx0DOxg+lFgGLMMF3aFEI8U2I81qt6Dxl5cJgOWEcftvquNqL HoH+bAwXyBxPnfVJFDB3YlHRf0y8ORImVRlLHzePUM0aXXNiOPCWaD0gsx8HDYaZ 6KcyDCeZ811EzovgX47GysgITJv/M8M= -----END CERTIFICATE-----Generated at Sat Sep 5 04:37:48 2026 by rpki-client