$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3448e7a0-ec93-3c68-841f-6bf50913d5df.roa File: 3448e7a0-ec93-3c68-841f-6bf50913d5df.roa (raw, json) Hash identifier: mBNY51WT0F03MsSQMXznvZlMBCbyytt/m5gqLY168J4= Subject key identifier: 9F:DB:94:00:98:30:4A:19:A8:7C:B4:95:5B:35:FC:12:D0:DB:D6:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81B196ED6ADC01CD155200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3448e7a0-ec93-3c68-841f-6bf50913d5df.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.222.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b1:96:ed:6a:dc:01:cd:15:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=5a6fce3c-eb13-4968-b0c2-4ecd919ad76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:f2:81:b6:6a:4f:e6:40:48:8b:bc:fd:77: c7:73:1c:66:c6:2f:4b:01:23:d0:ef:09:bc:a1:11: 18:6d:b2:f6:d1:c0:18:7d:71:f7:ac:b6:fa:25:d3: 06:e4:e2:65:fe:60:d6:c3:3a:06:60:05:5e:74:8a: c3:6e:bd:e0:32:f4:77:1f:18:80:d3:1f:cf:ed:77: d7:c9:51:e1:ba:5d:c7:63:a7:e4:94:28:fa:35:a4: 79:60:92:2f:78:fb:fa:1e:ee:62:4b:8d:dd:19:49: bd:89:bb:85:07:a8:8e:e2:c0:4e:ea:8b:fe:87:0e: f1:3d:1c:dc:74:05:59:bb:50:8d:a3:86:6d:09:06: 4a:17:44:b9:84:74:6c:10:04:d5:34:82:84:4e:45: ea:11:15:64:e7:39:0b:78:99:25:05:73:4e:60:f0: 84:db:d4:86:cb:d1:31:eb:2d:d0:c7:a7:59:f4:e3: 9e:15:8f:30:e1:52:f8:c6:2f:12:31:ab:ce:9f:61: c3:73:be:76:53:af:47:fc:57:dd:f7:5e:48:f9:18: 3f:fb:dc:b1:76:db:55:30:df:46:87:7f:16:e9:d5: 2f:dc:37:33:8c:a0:01:bb:3d:20:11:72:b7:50:a0: e3:c5:4b:10:61:0d:79:0a:df:65:ed:f6:8a:59:fc: f1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DB:94:00:98:30:4A:19:A8:7C:B4:95:5B:35:FC:12:D0:DB:D6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3448e7a0-ec93-3c68-841f-6bf50913d5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:03:ce:06:91:f8:7d:19:39:26:2f:24:a7:91:e2:7c:7f:99: c4:43:f1:5c:fc:2a:03:44:12:33:fa:ba:dc:a4:bb:85:bf:81: 5f:75:ad:d0:cd:4d:c9:88:04:31:fd:23:4f:70:a0:be:2d:78: 91:60:1f:17:20:ca:9e:06:b7:b6:a7:40:ce:a5:bc:1c:fc:34: a8:17:b0:ad:f7:c5:53:40:3c:b6:d7:98:b3:e0:64:b3:41:2c: 53:48:5e:ce:c0:9c:7d:b7:34:d2:5f:cc:3d:ba:a5:cc:f6:27: 17:81:34:68:30:2e:72:54:16:51:d6:75:c1:73:05:b7:17:61: 41:7c:0f:ab:e8:c5:f8:94:5a:f2:60:69:96:d4:36:e0:46:99: 0f:f0:af:9d:44:5b:93:67:f1:e3:07:71:74:39:6b:d4:11:7f: 1c:cd:a9:84:5f:c7:4d:a2:6c:75:87:df:f8:8c:cb:cd:f0:b7: 0d:53:2a:f2:e5:c3:c1:9f:15:9c:0b:c0:dc:89:7c:d7:12:52: 57:d7:fc:62:f4:ca:f7:6d:58:f9:6d:b3:31:99:bf:df:8f:2a: 69:6d:57:55:56:6e:61:68:e4:56:be:59:8c:18:a9:85:43:e0: cc:f3:a4:3b:3d:96:c5:7c:b1:98:31:91:33:2f:2f:d3:7d:de: 47:f7:f9:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbGW7WrcAc0VUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk NWE2ZmNlM2MtZWIxMy00OTY4LWIwYzItNGVjZDkxOWFkNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV3ygbZqT+ZASIu8/XfHcxxmxi9LASPQ7wm8 oREYbbL20cAYfXH3rLb6JdMG5OJl/mDWwzoGYAVedIrDbr3gMvR3HxiA0x/P7XfX yVHhul3HY6fklCj6NaR5YJIvePv6Hu5iS43dGUm9ibuFB6iO4sBO6ov+hw7xPRzc dAVZu1CNo4ZtCQZKF0S5hHRsEATVNIKETkXqERVk5zkLeJklBXNOYPCE29SGy9Ex 6y3Qx6dZ9OOeFY8w4VL4xi8SMavOn2HDc752U69H/Ffd915I+Rg/+9yxdttVMN9G h38W6dUv3DczjKABuz0gEXK3UKDjxUsQYQ15Ct9l7faKWfzx1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/blACYMEoZqHy0lVs1/BLQ29YpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ0OGU3YTAtZWM5My0z YzY4LTg0MWYtNmJmNTA5MTNkNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF95MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwDzgaR+H0ZOSYvJKeR4nx/mcRD8Vz8KgNEEjP6utyku4W/gV91rdDN TcmIBDH9I09woL4teJFgHxcgyp4Gt7anQM6lvBz8NKgXsK33xVNAPLbXmLPgZLNB LFNIXs7AnH23NNJfzD26pcz2JxeBNGgwLnJUFlHWdcFzBbcXYUF8D6voxfiUWvJg aZbUNuBGmQ/wr51EW5Nn8eMHcXQ5a9QRfxzNqYRfx02ibHWH3/iMy83wtw1TKvLl w8GfFZwLwNyJfNcSUlfX/GL0yvdtWPltszGZv9+PKmltV1VWbmFo5Fa+WYwYqYVD 4MzzpDs9lsV8sZgxkTMvL9N93kf3+RA= -----END CERTIFICATE-----Generated at Sat Sep 5 01:25:43 2026 by rpki-client