$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c27bf91-116a-3537-8f74-7161afc7a834.roa File: 3c27bf91-116a-3537-8f74-7161afc7a834.roa (raw, json) Hash identifier: bNkGhAF4sA7nw9BW1s8HczSDkrV+JJEhZ634MkBG0aU= Subject key identifier: 12:6D:BA:FC:FD:D9:08:27:0E:82:E1:0B:49:F7:D3:BE:9E:1B:D0:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7984BD510FD0C6E07A60400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c27bf91-116a-3537-8f74-7161afc7a834.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.208.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:4b:d5:10:fd:0c:6e:07:a6:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b60f3461-f361-484c-b506-9ab06b2010d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:63:67:4b:6e:8b:1c:58:2a:bb:4b:54:75:30: c5:db:00:53:49:a8:f2:2a:0b:0b:b1:3f:7e:c6:b3: 4f:83:43:6b:ec:dd:30:8c:54:68:92:b2:01:ec:f8: f6:fa:05:11:a3:4c:9c:9f:0f:c2:14:67:dd:5e:e3: 1f:16:bd:d7:7e:d9:da:34:53:fe:cc:e2:de:93:8c: 4e:00:18:63:20:40:81:5d:8b:f0:ac:88:0f:0f:01: ed:a7:ff:de:bf:7e:b0:aa:5f:80:b3:05:dd:a9:43: d4:04:1c:52:56:f1:1b:fb:3a:3d:1e:a8:e2:c8:89: 2d:aa:5d:df:08:19:5b:0c:83:43:01:c9:a4:ed:58: c6:8a:65:44:b7:93:d6:54:f3:81:a6:cd:b1:cb:a1: 9f:a3:33:fc:f8:24:ee:c6:68:28:f2:27:2a:e6:03: e4:36:29:ee:4d:11:76:20:ff:c3:58:52:09:16:67: ed:32:0a:02:8b:90:29:bd:a3:4a:fc:1f:e5:29:4d: c9:b1:64:1e:eb:70:8f:7d:be:e6:b7:66:7b:de:22: e1:20:41:c2:06:53:03:97:a9:79:67:95:14:f2:9a: 3e:88:fc:14:e5:d1:92:73:c8:81:f5:6c:17:e5:0c: 13:ec:6a:7a:4c:c9:63:32:74:98:f3:09:16:05:dc: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6D:BA:FC:FD:D9:08:27:0E:82:E1:0B:49:F7:D3:BE:9E:1B:D0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c27bf91-116a-3537-8f74-7161afc7a834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c5:8c:85:bc:80:76:21:2f:c1:10:87:8c:47:b4:77:76:1b: 74:02:3a:57:24:f7:4a:86:ba:67:96:c4:e2:a8:6b:59:84:7f: 20:07:22:10:43:76:71:ea:32:31:2a:19:06:5e:0c:bf:d7:63: 00:7b:4c:48:fa:38:e7:58:42:9a:de:96:90:4d:a7:c5:7b:01: 65:6c:74:78:bc:f4:79:b4:3d:d6:50:ac:ef:1a:ca:bb:b8:e7: 27:9b:81:ce:a4:53:88:4c:10:ae:fd:f1:89:e0:85:49:65:da: 1a:13:12:aa:06:6b:28:86:38:43:98:ab:40:04:ab:97:1d:33: ed:72:88:c3:b2:46:9e:6c:1f:27:2e:63:41:2f:e2:0f:45:54: d0:ae:2d:09:01:67:39:b6:b1:4f:68:ad:9c:a5:51:25:6c:cd: b8:50:35:aa:ad:68:d8:7e:79:ba:62:56:76:01:8c:15:e6:ef: 05:80:69:cf:f8:9b:83:ea:b9:db:38:59:10:66:74:95:9d:8f: d2:3e:f9:8b:bc:b4:4e:88:5c:4e:2b:27:1c:96:20:c9:01:e5: e1:3e:18:8c:96:00:8e:4c:2f:66:4c:ab:1b:18:c0:5d:1b:eb: 06:68:f3:b9:b1:83:5d:b1:68:40:50:38:cb:0f:48:c6:b7:a4: 14:42:5f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmEvVEP0MbgemBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjYwZjM0NjEtZjM2MS00ODRjLWI1MDYtOWFiMDZiMjAxMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomNnS26LHFgqu0tUdTDF2wBTSajyKgsLsT9+ xrNPg0Nr7N0wjFRokrIB7Pj2+gURo0ycnw/CFGfdXuMfFr3XftnaNFP+zOLek4xO ABhjIECBXYvwrIgPDwHtp//ev36wql+AswXdqUPUBBxSVvEb+zo9HqjiyIktql3f CBlbDINDAcmk7VjGimVEt5PWVPOBps2xy6GfozP8+CTuxmgo8icq5gPkNinuTRF2 IP/DWFIJFmftMgoCi5ApvaNK/B/lKU3JsWQe63CPfb7mt2Z73iLhIEHCBlMDl6l5 Z5UU8po+iPwU5dGSc8iB9WwX5QwT7Gp6TMljMnSY8wkWBdxo0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJtuvz92QgnDoLhC0n3076eG9BpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MyN2JmOTEtMTE2YS0z NTM3LThmNzQtNzE2MWFmYzdhODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9BXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALFjIW8gHYhL8EQh4xHtHd2G3QCOlck90qGumeWxOKoa1mEfyAHIhBD dnHqMjEqGQZeDL/XYwB7TEj6OOdYQprelpBNp8V7AWVsdHi89Hm0PdZQrO8ayru4 5yebgc6kU4hMEK798YnghUll2hoTEqoGayiGOEOYq0AEq5cdM+1yiMOyRp5sHycu Y0Ev4g9FVNCuLQkBZzm2sU9orZylUSVszbhQNaqtaNh+ebpiVnYBjBXm7wWAac/4 m4Pquds4WRBmdJWdj9I++Yu8tE6IXE4rJxyWIMkB5eE+GIyWAI5ML2ZMqxsYwF0b 6wZo87mxg12xaEBQOMsPSMa3pBRCXyE= -----END CERTIFICATE-----Generated at Fri Sep 4 23:56:28 2026 by rpki-client