$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a975f7c-99d3-354f-b910-9bdd31a55729.roa File: 3a975f7c-99d3-354f-b910-9bdd31a55729.roa (raw, json) Hash identifier: IAae3rnuRfwfyStyLg9aLv57Qo8fKWzukS3SgtCTFdc= Subject key identifier: 9E:41:5E:88:37:A9:61:6F:18:74:F4:D3:37:DB:64:6F:82:01:5F:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EB2B1EFDF4144C4CE2C568800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a975f7c-99d3-354f-b910-9bdd31a55729.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 16625 IP address blocks: 23.42.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:ef:df:41:44:c4:ce:2c:56:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=3e69ac79-506d-40bf-a0a7-41354de8a86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:ca:04:ec:01:bb:32:dc:64:14:da:85:ad: e6:3e:ad:7b:8b:16:8a:62:7d:18:a7:10:8e:43:73: de:c9:69:2e:73:cc:75:e0:8f:f1:91:a7:82:97:f1: 99:3f:2e:87:09:52:c8:53:96:5c:6f:89:16:c6:be: d8:17:1a:b7:4a:8e:98:0a:c5:33:79:c1:d5:f3:5e: b0:a6:2e:13:b6:c0:0c:59:82:07:50:7c:dd:5b:9c: db:47:b2:4f:88:8f:71:60:91:0f:ee:20:05:15:55: d4:ef:0f:d7:dd:d5:d2:3d:63:86:ee:97:df:b7:36: 48:c8:33:21:3a:92:5a:b1:31:e4:07:a6:18:cf:46: eb:c5:77:55:0d:43:f1:fd:1a:e2:59:26:52:fe:af: b2:82:17:8c:1a:3d:b5:d8:cf:bd:79:a1:1e:32:9c: de:8f:dd:44:e0:e0:a1:2a:9b:41:44:5a:90:b8:03: fd:09:a7:c0:2f:5d:aa:7e:22:bc:6d:83:31:98:93: 96:67:89:6b:56:77:74:b0:c3:09:3c:e0:ef:a6:3f: aa:cc:7b:7f:76:05:33:87:ed:2f:ac:38:83:88:0a: 74:17:58:37:cb:92:ee:99:46:d1:4b:b6:0d:e6:ba: b7:28:e2:77:fd:ef:07:b3:a1:f8:60:19:a1:f2:5e: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:41:5E:88:37:A9:61:6F:18:74:F4:D3:37:DB:64:6F:82:01:5F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a975f7c-99d3-354f-b910-9bdd31a55729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:af:f3:7a:45:c8:69:d9:a3:28:1a:01:57:9b:d9:f8:a4:5f: 5a:bd:48:10:4c:ea:32:2e:05:e9:05:47:23:80:d9:32:f0:d9: 2c:64:25:b3:89:61:12:18:a1:a0:05:d8:4a:b7:5c:3f:da:ee: e6:d3:05:84:ff:1d:bc:5b:e9:61:0d:c8:7f:54:73:67:c4:0a: d4:da:a3:23:9b:85:10:ea:ba:e6:6d:a0:d1:3e:40:04:ae:a3: 2c:c6:5e:e6:8a:3c:30:7d:68:c1:f5:e1:4b:aa:2b:4e:f7:de: ba:db:57:5b:7e:b4:93:38:8c:77:56:fa:f7:da:a8:b5:61:d4: 94:50:23:4c:5c:3e:ff:2a:87:95:59:ea:1d:3f:ec:6c:31:72: 09:2a:85:37:17:1e:b2:d3:79:17:57:e1:5d:2c:68:8e:ed:b5: c8:d1:6f:37:a3:79:a8:b8:8a:28:e1:cd:0f:79:89:1e:ae:d6: b6:3d:4e:bd:a9:b4:4f:7c:eb:a6:98:2c:b3:db:21:88:c4:d2: f1:e3:88:43:8e:3f:f0:3f:73:3d:e6:a9:ab:56:e7:6a:e9:dc: ea:c3:e0:3c:cd:c2:55:4c:8a:70:18:46:ba:bc:38:81:5d:19: ed:a2:45:9a:89:69:16:45:af:1b:51:58:8b:05:8e:63:13:6c: b3:da:e7:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yse/fQUTEzixWiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk M2U2OWFjNzktNTA2ZC00MGJmLWEwYTctNDEzNTRkZThhODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1nKBOwBuzLcZBTaha3mPq17ixaKYn0YpxCO Q3PeyWkuc8x14I/xkaeCl/GZPy6HCVLIU5Zcb4kWxr7YFxq3So6YCsUzecHV816w pi4TtsAMWYIHUHzdW5zbR7JPiI9xYJEP7iAFFVXU7w/X3dXSPWOG7pfftzZIyDMh OpJasTHkB6YYz0brxXdVDUPx/RriWSZS/q+ygheMGj212M+9eaEeMpzej91E4OCh KptBRFqQuAP9CafAL12qfiK8bYMxmJOWZ4lrVnd0sMMJPODvpj+qzHt/dgUzh+0v rDiDiAp0F1g3y5LumUbRS7YN5rq3KOJ3/e8Hs6H4YBmh8l7xOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5BXog3qWFvGHT00zfbZG+CAV9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E5NzVmN2MtOTlkMy0z NTRmLWI5MTAtOWJkZDMxYTU1NzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAav83pFyGnZoygaAVeb2fikX1q9SBBM6jIuBekFRyOA2TLw2SxkJbOJ YRIYoaAF2Eq3XD/a7ubTBYT/Hbxb6WENyH9Uc2fECtTaoyObhRDquuZtoNE+QASu oyzGXuaKPDB9aMH14UuqK0733rrbV1t+tJM4jHdW+vfaqLVh1JRQI0xcPv8qh5VZ 6h0/7GwxcgkqhTcXHrLTeRdX4V0saI7ttcjRbzejeai4iijhzQ95iR6u1rY9Tr2p tE9866aYLLPbIYjE0vHjiEOOP/A/cz3mqatW52rp3OrD4DzNwlVMinAYRrq8OIFd Ge2iRZqJaRZFrxtRWIsFjmMTbLPa5zE= -----END CERTIFICATE-----Generated at Fri Sep 4 22:44:19 2026 by rpki-client