$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3de0104b-158b-38a7-afc4-44c0ac2d311d.roa File: 3de0104b-158b-38a7-afc4-44c0ac2d311d.roa (raw, json) Hash identifier: 7wucx2bR3RENps8IQ87ipr7IYqX+kokKqXNCYCEZ2i4= Subject key identifier: 93:07:1E:9C:7D:9A:43:97:29:56:16:04:CC:B0:98:66:89:C7:93:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA788525E28A231B28DDF5380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3de0104b-158b-38a7-afc4-44c0ac2d311d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 35994 IP address blocks: 23.223.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:52:5e:28:a2:31:b2:8d:df:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b4a61870-637a-40b2-9c03-45da64d30dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:f5:11:57:75:50:33:53:00:58:4c:82:28: 60:de:9d:c5:00:54:93:fa:9a:99:1f:ac:71:9d:04: f0:b6:30:1c:f9:b4:e1:82:c0:44:ea:a9:f9:b9:ef: b4:fe:2d:a6:a6:42:11:f3:91:2b:28:74:66:f9:7c: d3:c4:63:5b:6f:4e:c5:53:8b:98:30:de:31:31:5d: 45:39:4c:4b:c1:f0:5b:fc:1c:8d:0b:18:6d:da:9b: 15:b7:72:29:ae:b0:da:5e:b4:87:c1:24:1f:65:dc: af:30:59:7d:19:13:74:01:08:6c:51:ef:49:bd:cc: eb:5d:ba:e7:54:c4:0f:cd:3e:68:32:ed:25:c0:de: 14:8b:9a:62:e0:8c:30:7f:9c:82:f5:7c:d9:53:5c: d8:2b:9d:a6:39:dd:be:38:40:69:e0:1f:36:8a:35: a6:ff:0e:ad:bd:61:fa:7d:71:3f:a7:43:74:c7:34: ac:48:48:af:73:c1:3c:6a:4c:d4:3f:ae:22:74:c6: 64:e0:95:c7:23:2e:e2:48:7b:6c:db:b3:5b:d3:fa: ae:78:df:2a:f1:a9:8c:c6:f6:1c:26:ee:ea:27:8d: 7f:20:46:1c:7c:ef:64:64:e2:09:52:94:7a:b9:db: 98:69:d3:e7:34:d7:86:31:6a:f1:02:fb:14:cb:58: e4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:07:1E:9C:7D:9A:43:97:29:56:16:04:CC:B0:98:66:89:C7:93:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3de0104b-158b-38a7-afc4-44c0ac2d311d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:25:50:4a:9f:63:de:8b:88:6c:4e:16:47:9c:b1:5d:87:0c: 44:f5:53:bd:49:b0:94:04:cc:27:dc:47:6b:2b:db:67:4b:da: bd:b5:5f:57:6e:3f:be:e8:d5:39:59:ba:a2:ed:9f:d7:1f:40: fc:5d:61:95:f0:47:21:aa:81:6a:69:56:e6:19:77:9b:38:9b: f8:bd:7b:a6:3b:2b:e7:ba:3b:6c:28:2c:74:11:b1:25:25:91: 64:7a:30:2c:96:60:5e:51:16:5d:5f:0a:08:f6:83:33:1c:36: 3b:9f:2a:9d:1c:ae:73:9a:99:5d:a3:39:3f:23:89:12:18:1f: 11:cb:58:9f:61:24:eb:39:d3:5c:ee:49:34:b6:9a:5c:13:88: da:50:28:52:62:ac:a9:3b:d4:3f:0c:f5:c1:07:47:7a:f4:a4: 2d:e5:3f:30:69:e8:52:d7:79:b7:11:1a:57:b2:e7:81:4c:36: 24:b2:23:c8:18:8d:fb:45:7f:a7:d5:0d:05:49:60:81:69:0a: f5:6d:f1:03:82:12:ee:cf:9c:4b:8b:72:62:9a:f2:6f:6b:f9: 72:17:16:74:af:6a:fe:84:66:4a:65:7c:0f:2c:fc:bd:a4:42: 9a:03:40:19:bd:d6:63:b5:a2:40:57:b2:e1:19:e3:09:3a:f5: 07:a2:bd:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFJeKKIxso3fU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjRhNjE4NzAtNjM3YS00MGIyLTljMDMtNDVkYTY0ZDMwZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHH1EVd1UDNTAFhMgihg3p3FAFST+pqZH6xx nQTwtjAc+bThgsBE6qn5ue+0/i2mpkIR85ErKHRm+XzTxGNbb07FU4uYMN4xMV1F OUxLwfBb/ByNCxht2psVt3IprrDaXrSHwSQfZdyvMFl9GRN0AQhsUe9JvczrXbrn VMQPzT5oMu0lwN4Ui5pi4Iwwf5yC9XzZU1zYK52mOd2+OEBp4B82ijWm/w6tvWH6 fXE/p0N0xzSsSEivc8E8akzUP64idMZk4JXHIy7iSHts27Nb0/queN8q8amMxvYc Ju7qJ41/IEYcfO9kZOIJUpR6uduYadPnNNeGMWrxAvsUy1jkzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMHHpx9mkOXKVYWBMywmGaJx5OhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RlMDEwNGItMTU4Yi0z OGE3LWFmYzQtNDRjMGFjMmQzMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQlUEqfY96LiGxOFkecsV2HDET1U71JsJQEzCfcR2sr22dL2r21X1du P77o1TlZuqLtn9cfQPxdYZXwRyGqgWppVuYZd5s4m/i9e6Y7K+e6O2woLHQRsSUl kWR6MCyWYF5RFl1fCgj2gzMcNjufKp0crnOamV2jOT8jiRIYHxHLWJ9hJOs501zu STS2mlwTiNpQKFJirKk71D8M9cEHR3r0pC3lPzBp6FLXebcRGley54FMNiSyI8gY jftFf6fVDQVJYIFpCvVt8QOCEu7PnEuLcmKa8m9r+XIXFnSvav6EZkplfA8s/L2k QpoDQBm91mO1okBXsuEZ4wk69QeivZ8= -----END CERTIFICATE-----Generated at Sat Sep 5 02:10:10 2026 by rpki-client