$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fca956-6f8d-3af0-8e26-f6eaa8d1dc8d.roa File: 39fca956-6f8d-3af0-8e26-f6eaa8d1dc8d.roa (raw, json) Hash identifier: /I3ZyTR0I44E9n/mo80/eE2dn7i6MTn6XsJXF/D7zLQ= Subject key identifier: 4A:8B:84:70:EA:76:E5:A4:1F:74:BF:14:48:C8:FC:18:2C:61:D0:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EB2B1D39CEFBA405990023700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fca956-6f8d-3af0-8e26-f6eaa8d1dc8d.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 16625 IP address blocks: 23.32.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:d3:9c:ef:ba:40:59:90:02:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=c1c80796-779b-4c19-a173-da9265bd034b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c1:62:26:bc:b6:ef:0e:7f:ab:41:00:ba:54: 16:fe:c8:fd:5e:f9:8d:45:ef:03:ee:30:35:af:d0: 3a:dd:5d:c3:81:a1:5c:25:81:2f:80:95:15:71:ef: b8:27:e3:3a:35:3f:27:bc:aa:71:19:4c:3c:df:57: 45:30:81:2a:0c:63:a7:1e:d3:e7:a8:3a:3d:0d:93: 4e:0e:fc:77:bb:b6:c8:40:30:0c:97:8c:25:e0:b3: 5f:d3:52:4d:d2:b9:a2:e7:00:8c:0d:a8:ff:ce:ef: fd:4b:d3:15:4f:52:b2:80:95:e8:1e:1b:61:1d:97: e8:24:bf:21:b6:59:75:64:d8:4b:b6:38:81:a7:4c: e3:79:e1:16:a1:47:60:82:f4:a1:d7:0b:7f:15:4c: 5f:00:f6:43:73:b9:1b:cc:6d:5d:cb:de:df:08:11: e4:54:d9:34:59:0a:03:8a:cc:97:5c:03:ae:35:36: 58:1f:48:31:0f:f4:e3:63:68:c6:cf:e4:0d:72:71: da:13:55:3a:1c:b5:c7:e9:4b:65:e6:4e:70:02:53: 6e:e2:9b:b9:ad:55:85:c7:82:40:a1:9c:d8:69:d8: 32:8d:f6:53:1f:75:29:51:6a:b0:28:92:21:46:2e: 37:ce:86:40:20:0a:8e:0f:45:8e:5f:f3:26:07:1b: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8B:84:70:EA:76:E5:A4:1F:74:BF:14:48:C8:FC:18:2C:61:D0:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fca956-6f8d-3af0-8e26-f6eaa8d1dc8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d4:58:55:7c:f0:64:45:52:34:6b:f5:14:c4:f5:14:84:0d: cc:49:4a:5a:d4:70:d6:b3:ff:b3:d5:b4:d2:cb:57:90:38:4d: 21:20:fc:1e:a8:91:f7:91:76:c2:66:c8:d6:dc:d9:bd:d5:35: 9e:d0:15:3d:1d:9f:46:eb:93:5c:9b:e0:9d:ea:7e:5b:f8:48: 34:b8:3d:29:45:7a:ad:8d:ac:5d:ab:d0:6a:fc:0c:bb:7a:21: e1:2b:d8:f3:4e:a8:6f:ea:12:07:a7:2d:0b:25:23:7c:7e:d2: 31:56:9f:ca:fe:80:a2:04:89:bb:30:2e:c9:d0:af:6c:29:2d: 1d:65:c3:26:cd:a5:46:7e:4c:25:de:f8:97:44:eb:28:1a:b4: 4f:4c:ae:3f:65:66:b5:22:f0:61:b5:11:23:09:96:59:62:7e: e2:ff:a3:97:9f:bd:b5:83:3f:01:e9:fc:8e:b6:d4:27:27:66: e4:1e:6c:aa:27:a4:cc:a0:d7:e6:9c:65:60:f7:ce:09:2d:80: a5:39:20:18:e7:59:94:99:60:3f:58:5b:5e:7a:2a:77:2f:d7: d8:73:97:8b:5f:1f:c5:f9:a1:7f:1a:cf:82:63:ac:b9:35:0e: 3d:bf:db:22:41:80:9b:30:f5:23:db:06:3d:43:c8:2a:0f:ca: c7:2e:3c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysdOc77pAWZACNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk YzFjODA3OTYtNzc5Yi00YzE5LWExNzMtZGE5MjY1YmQwMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8FiJry27w5/q0EAulQW/sj9XvmNRe8D7jA1 r9A63V3DgaFcJYEvgJUVce+4J+M6NT8nvKpxGUw831dFMIEqDGOnHtPnqDo9DZNO Dvx3u7bIQDAMl4wl4LNf01JN0rmi5wCMDaj/zu/9S9MVT1KygJXoHhthHZfoJL8h tll1ZNhLtjiBp0zjeeEWoUdggvSh1wt/FUxfAPZDc7kbzG1dy97fCBHkVNk0WQoD isyXXAOuNTZYH0gxD/TjY2jGz+QNcnHaE1U6HLXH6Utl5k5wAlNu4pu5rVWFx4JA oZzYadgyjfZTH3UpUWqwKJIhRi43zoZAIAqOD0WOX/MmBxsWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqLhHDqduWkH3S/FEjI/BgsYdCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzlmY2E5NTYtNmY4ZC0z YWYwLThlMjYtZjZlYWE4ZDFkYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrUWFV88GRFUjRr9RTE9RSEDcxJSlrUcNaz/7PVtNLLV5A4TSEg/B6o kfeRdsJmyNbc2b3VNZ7QFT0dn0brk1yb4J3qflv4SDS4PSlFeq2NrF2r0Gr8DLt6 IeEr2PNOqG/qEgenLQslI3x+0jFWn8r+gKIEibswLsnQr2wpLR1lwybNpUZ+TCXe +JdE6ygatE9Mrj9lZrUi8GG1ESMJlllifuL/o5efvbWDPwHp/I621CcnZuQebKon pMyg1+acZWD3zgktgKU5IBjnWZSZYD9YW156Kncv19hzl4tfH8X5oX8az4JjrLk1 Dj2/2yJBgJsw9SPbBj1DyCoPyscuPNU= -----END CERTIFICATE-----Generated at Sat Sep 5 01:23:54 2026 by rpki-client