$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239fa796-6ebe-383b-8b8f-131c91e9338b.roa File: 239fa796-6ebe-383b-8b8f-131c91e9338b.roa (raw, json) Hash identifier: b/zvXg0faRe9fmL9oJQokQP6zmMfOCG+NNIN8B+CCIg= Subject key identifier: B7:21:02:62:85:0B:A6:45:6B:7C:96:14:C8:98:11:65:66:EF:98:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F0242356E8AFC773A956B4180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239fa796-6ebe-383b-8b8f-131c91e9338b.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 16625 IP address blocks: 23.219.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:35:6e:8a:fc:77:3a:95:6b:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=fb61df37-de40-4961-b04e-03d7f55d02fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c9:fd:5a:a8:b2:cf:09:89:d3:34:ac:b6:cf: a8:64:72:65:54:fb:00:c4:bf:86:74:8a:2c:40:c8: da:a0:59:21:63:a4:00:16:c6:21:95:48:ba:ab:c4: 93:51:ce:fc:ee:5a:b6:d0:67:11:9e:83:5a:ba:a5: 8b:e3:69:62:11:fc:40:e6:21:c5:5e:7c:68:7b:76: 82:18:4f:47:7c:44:b0:36:c5:57:18:14:8b:1f:a0: 31:ed:73:6f:4d:e8:86:25:a9:05:1d:27:ac:07:68: 01:05:dc:d8:8a:2e:40:c9:9d:01:1b:fb:c3:5e:f1: 76:e4:77:6f:48:37:c4:65:d7:16:d6:e5:eb:13:4c: ec:05:35:6b:11:52:f1:bf:29:2c:dc:6f:ab:d9:c0: b7:4c:3a:83:60:73:ff:21:81:07:98:7d:c9:95:9c: b9:97:b2:f7:ec:24:61:fb:69:79:da:1f:ab:2c:c5: 0f:c8:4d:90:28:30:39:23:18:93:ee:c8:9b:39:b3: 7b:01:f6:4a:9a:42:34:a1:7f:fd:98:b8:71:2d:22: e9:89:ef:ee:d7:5f:0b:85:82:57:29:7f:db:9f:7d: 4d:ca:0c:99:6b:c6:ab:7f:32:18:12:7d:68:3d:20: 6a:2b:8d:be:5d:ec:1c:47:f3:12:92:95:cd:53:e8: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:02:62:85:0B:A6:45:6B:7C:96:14:C8:98:11:65:66:EF:98:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/239fa796-6ebe-383b-8b8f-131c91e9338b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e2:5c:73:12:5d:e5:e6:a2:a3:dd:eb:a0:71:7d:97:49:e8: dc:01:b3:99:ea:eb:0a:42:88:4b:f1:a4:71:9d:af:71:11:1c: eb:17:9a:31:b9:a8:f8:94:6a:fd:3e:b4:a8:f1:aa:db:bb:4a: c1:ee:be:3d:aa:5c:2d:bd:f8:8d:1b:40:16:a9:b7:8b:d6:b4: 4a:c4:e2:8f:37:a6:f5:3b:05:95:19:a0:f6:29:0f:76:d3:72: 11:a0:cf:f3:0e:63:88:ce:45:c7:11:6e:fb:fe:0b:e6:da:57: 0c:19:f2:e3:10:5f:1a:55:4e:b5:ec:0d:d9:fa:00:bc:70:28: 42:d9:e7:78:9a:5f:80:c6:f7:dc:e8:61:6e:8c:5b:28:60:54: 29:2d:18:a9:5f:0f:36:f8:17:fa:2b:54:1a:20:0e:74:90:c2: c2:52:d1:9d:b5:31:47:b3:00:f7:66:0d:3c:9a:02:b4:33:12: 16:b0:b8:04:e7:83:b6:ae:7a:11:17:09:86:8d:43:63:8e:9e: 2f:cf:34:68:f9:00:b1:7c:97:a8:1e:fe:d8:5d:2f:52:f1:bd: fd:6e:30:e6:e8:f8:a6:7d:a2:d1:30:ed:79:2e:ce:f8:02:7b: 76:94:69:08:18:1e:c5:85:e6:46:ae:cf:b6:4f:98:bb:5a:02: 94:14:96:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjVuivx3OpVrQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZmI2MWRmMzctZGU0MC00OTYxLWIwNGUtMDNkN2Y1NWQwMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcn9WqiyzwmJ0zSsts+oZHJlVPsAxL+GdIos QMjaoFkhY6QAFsYhlUi6q8STUc787lq20GcRnoNauqWL42liEfxA5iHFXnxoe3aC GE9HfESwNsVXGBSLH6Ax7XNvTeiGJakFHSesB2gBBdzYii5AyZ0BG/vDXvF25Hdv SDfEZdcW1uXrE0zsBTVrEVLxvyks3G+r2cC3TDqDYHP/IYEHmH3JlZy5l7L37CRh +2l52h+rLMUPyE2QKDA5IxiT7sibObN7AfZKmkI0oX/9mLhxLSLpie/u118LhYJX KX/bn31NygyZa8arfzIYEn1oPSBqK42+XewcR/MSkpXNU+j+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLchAmKFC6ZFa3yWFMiYEWVm75h4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjM5ZmE3OTYtNmViZS0z ODNiLThiOGYtMTMxYzkxZTkzMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9twMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDiXHMSXeXmoqPd66BxfZdJ6NwBs5nq6wpCiEvxpHGdr3ERHOsXmjG5 qPiUav0+tKjxqtu7SsHuvj2qXC29+I0bQBapt4vWtErE4o83pvU7BZUZoPYpD3bT chGgz/MOY4jORccRbvv+C+baVwwZ8uMQXxpVTrXsDdn6ALxwKELZ53iaX4DG99zo YW6MWyhgVCktGKlfDzb4F/orVBogDnSQwsJS0Z21MUezAPdmDTyaArQzEhawuATn g7auehEXCYaNQ2OOni/PNGj5ALF8l6ge/thdL1Lxvf1uMObo+KZ9otEw7XkuzvgC e3aUaQgYHsWF5kauz7ZPmLtaApQUlsA= -----END CERTIFICATE-----Generated at Sat Sep 5 02:09:35 2026 by rpki-client