$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d80eaeb-7511-3899-be1a-3bf7a1deae20.roa File: 2d80eaeb-7511-3899-be1a-3bf7a1deae20.roa (raw, json) Hash identifier: sVhuPbbrcPTQ+iYSc1f/QhOfjpKC9/ARkFGj5xh/8UI= Subject key identifier: 4A:52:D2:B2:72:12:78:30:5E:A6:97:27:B2:F9:62:99:83:CC:7F:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EB6E1ACF7A8BF414B56EF0900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d80eaeb-7511-3899-be1a-3bf7a1deae20.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.219.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:ac:f7:a8:bf:41:4b:56:ef:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=87d0a9c5-93f2-4e76-bb6d-d93de4ff6146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:6f:70:0e:2d:74:e2:65:57:0a:76:d3:fd: 70:36:54:80:56:98:b3:4c:35:dc:03:c6:67:00:0c: 43:3e:db:03:ab:1e:a7:7b:39:58:b5:fb:91:c5:71: 57:aa:ce:7e:dd:23:a6:e2:d4:4d:92:e2:a1:94:89: 8a:7f:a7:24:4f:d4:24:cb:39:75:9f:ae:a0:2d:a4: 5f:08:bf:17:96:ae:99:2e:98:eb:29:49:b8:fe:f0: 61:41:bd:75:de:51:43:9a:7d:f5:01:d3:96:4b:61: 11:fe:9b:65:3a:22:73:f5:63:11:25:5c:ee:b6:c9: e2:bf:52:43:85:bc:e0:3e:25:5e:c3:ea:c8:3e:7d: 0c:ef:04:36:4d:e4:6d:ab:3b:8f:fe:82:99:25:59: bf:f6:e3:b0:72:7c:87:e1:b1:62:8c:6d:3e:0d:6f: 4e:0e:bd:57:4f:36:20:d3:66:82:40:f0:c0:4d:55: 67:c2:4f:4e:cb:62:ec:01:89:39:13:8d:1f:35:f0: 86:38:a8:1b:fa:fa:83:18:87:f9:b3:11:42:55:f9: 4e:e2:1d:e9:c5:85:7d:1d:d8:0b:ba:fd:3f:c4:ae: 0b:a3:69:0a:aa:7e:33:c6:e6:55:67:2a:e5:83:78: 5b:9b:97:08:e0:32:75:62:43:23:66:83:11:e9:d1: 2e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:52:D2:B2:72:12:78:30:5E:A6:97:27:B2:F9:62:99:83:CC:7F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d80eaeb-7511-3899-be1a-3bf7a1deae20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:da:c7:00:34:db:0f:ff:89:ec:74:a7:23:85:22:dd:c3:11: 49:40:00:56:7d:0d:db:95:c9:74:b9:fa:64:f6:b1:6f:9c:11: ea:70:60:7c:10:48:0a:e9:c2:c7:18:0b:77:ac:ce:30:c9:c3: a4:40:cd:dd:e6:53:cd:8f:f1:6e:52:51:c4:ea:aa:85:07:6e: 6e:f9:f0:71:5c:5b:80:23:f0:5b:d5:70:95:b9:d1:94:08:55: 44:39:5d:51:ac:c4:70:cf:39:6d:12:be:8a:a2:0c:ac:9c:7c: 2d:49:0c:00:07:a6:9d:a1:a0:f1:4d:50:36:be:cf:41:75:ad: 59:c1:fb:cb:18:6b:62:9e:8c:47:a4:4d:ec:98:2a:75:5a:12: 42:01:c0:ba:13:f2:70:3f:3a:4c:68:49:1c:c0:a0:fd:c6:07: d8:8c:07:63:e3:96:e0:36:74:51:10:66:c9:e2:4a:ec:62:6a: 9c:73:30:c3:f3:54:44:34:cd:74:af:38:b1:b7:49:6b:8d:70: 51:39:25:5f:03:d9:bf:5c:0f:86:c9:b5:2f:b9:af:be:af:f8: e4:cb:e2:1f:f9:1f:19:11:c9:bd:54:a6:83:65:02:42:3c:9b: b7:a1:7c:d3:44:ca:0b:2a:bc:99:96:d6:2d:b9:bc:7d:b5:33: df:62:82:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624az3qL9BS1bvCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk ODdkMGE5YzUtOTNmMi00ZTc2LWJiNmQtZDkzZGU0ZmY2MTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEdvcA4tdOJlVwp20/1wNlSAVpizTDXcA8Zn AAxDPtsDqx6nezlYtfuRxXFXqs5+3SOm4tRNkuKhlImKf6ckT9Qkyzl1n66gLaRf CL8Xlq6ZLpjrKUm4/vBhQb113lFDmn31AdOWS2ER/ptlOiJz9WMRJVzutsniv1JD hbzgPiVew+rIPn0M7wQ2TeRtqzuP/oKZJVm/9uOwcnyH4bFijG0+DW9ODr1XTzYg 02aCQPDATVVnwk9Oy2LsAYk5E40fNfCGOKgb+vqDGIf5sxFCVflO4h3pxYV9HdgL uv0/xK4Lo2kKqn4zxuZVZyrlg3hbm5cI4DJ1YkMjZoMR6dEuQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpS0rJyEngwXqaXJ7L5YpmDzH8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQ4MGVhZWItNzUxMS0z ODk5LWJlMWEtM2JmN2ExZGVhZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfaxwA02w//iex0pyOFIt3DEUlAAFZ9DduVyXS5+mT2sW+cEepwYHwQ SArpwscYC3eszjDJw6RAzd3mU82P8W5SUcTqqoUHbm758HFcW4Aj8FvVcJW50ZQI VUQ5XVGsxHDPOW0SvoqiDKycfC1JDAAHpp2hoPFNUDa+z0F1rVnB+8sYa2KejEek TeyYKnVaEkIBwLoT8nA/OkxoSRzAoP3GB9iMB2PjluA2dFEQZsniSuxiapxzMMPz VEQ0zXSvOLG3SWuNcFE5JV8D2b9cD4bJtS+5r76v+OTL4h/5HxkRyb1UpoNlAkI8 m7ehfNNEygsqvJmW1i25vH21M99igrA= -----END CERTIFICATE-----Generated at Sat Sep 5 02:49:09 2026 by rpki-client