$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e704e1d-7f70-3a02-b3c3-dc2d70f47749.roa File: 3e704e1d-7f70-3a02-b3c3-dc2d70f47749.roa (raw, json) Hash identifier: yrgeL5zihgUBBpctOCzCeEFftXe9VWXZz/EWeND7cm0= Subject key identifier: CA:A1:6B:AA:E2:0A:14:53:F5:97:0E:6D:44:1A:F5:E1:9F:9D:8F:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7983067BFE99215C5131640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e704e1d-7f70-3a02-b3c3-dc2d70f47749.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.208.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:30:67:bf:e9:92:15:c5:13:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=deab3060-0328-4f5b-a031-749f9bc7e6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:f9:c4:54:77:3a:17:69:5f:ce:79:2a:99: b0:19:4c:2a:27:70:5a:47:5f:cb:bd:98:e5:ae:d0: 1a:bc:e8:83:bb:19:d4:6b:38:55:5b:8e:44:7b:82: f7:44:6e:43:c4:e5:99:a2:43:2f:ce:f7:58:62:5a: 36:9a:8a:cc:c6:49:b3:8d:24:6a:5e:50:08:52:a2: 6d:a8:2c:53:a7:14:af:af:1a:d8:e2:f1:bb:5b:b9: 11:55:c9:08:d0:69:d8:41:d7:3d:31:64:7f:0f:c8: 96:61:68:9e:fb:79:54:77:b9:9d:2b:d8:90:01:86: eb:34:a1:1e:6b:79:b7:08:35:48:af:cf:d8:7f:95: f4:dd:af:6d:c4:16:11:3d:7b:e3:c2:16:9d:fb:03: 7c:35:c0:fc:c2:81:0f:b4:81:8e:b4:32:4f:3d:f2: 26:45:5d:93:3e:35:c5:32:80:28:d8:58:e5:0f:01: 11:3a:e6:de:4c:58:d6:81:b2:90:56:7f:a6:ec:77: 57:04:ef:60:6f:97:8d:65:09:89:47:e0:5b:41:90: 07:13:ee:77:25:64:09:06:61:fe:d6:84:e7:2c:9b: 8e:a5:bc:a5:1e:c8:e4:f7:2a:ea:46:e6:39:76:40: 27:f9:0b:94:79:8f:fa:fc:bb:b6:03:93:c2:f8:06: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A1:6B:AA:E2:0A:14:53:F5:97:0E:6D:44:1A:F5:E1:9F:9D:8F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e704e1d-7f70-3a02-b3c3-dc2d70f47749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cf:98:07:be:a4:8a:0f:90:da:3e:60:9b:65:f1:47:4f:a6: 51:78:80:5b:10:bd:67:7c:97:5d:f8:3e:fc:75:04:28:83:9c: 38:fd:a0:8e:e1:13:17:70:48:eb:5c:8c:19:04:9a:ed:67:6a: 68:da:1a:48:79:65:99:c7:7a:b2:2e:99:f7:b9:6d:13:33:d7: f2:03:10:a3:bf:ac:ba:c5:51:51:d0:38:6a:d7:a8:d6:b6:08: ec:13:ab:d1:f4:3b:4c:9d:3a:d0:89:15:48:76:d8:ae:58:1c: 10:19:33:37:12:d7:cc:75:42:4e:71:1e:a8:6e:f3:b8:63:31: 78:9c:86:a9:e6:b3:8e:dd:34:78:51:57:f1:f4:a3:4d:51:38: 60:e4:8b:a5:61:f7:3e:d0:c0:e3:ae:1f:b4:aa:29:98:b3:d9: df:9c:a4:23:88:9e:ac:35:92:a4:54:88:26:ff:87:07:6b:bf: 47:51:70:7c:6a:29:e6:fa:1d:db:4f:8c:b1:0f:c0:16:78:78: 2b:eb:57:ca:4b:cd:f2:c0:2b:6d:43:07:04:98:07:4b:a5:9c: f0:14:ef:cb:9c:36:59:42:fe:a9:7e:8d:b9:0d:0e:14:2f:8c: f5:a7:24:93:b6:ea:b4:d7:c4:2f:bf:c3:93:bf:fb:f8:ea:98: 5e:3c:7d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmDBnv+mSFcUTFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGVhYjMwNjAtMDMyOC00ZjViLWEwMzEtNzQ5ZjliYzdlNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngX5xFR3OhdpX855KpmwGUwqJ3BaR1/LvZjl rtAavOiDuxnUazhVW45Ee4L3RG5DxOWZokMvzvdYYlo2morMxkmzjSRqXlAIUqJt qCxTpxSvrxrY4vG7W7kRVckI0GnYQdc9MWR/D8iWYWie+3lUd7mdK9iQAYbrNKEe a3m3CDVIr8/Yf5X03a9txBYRPXvjwhad+wN8NcD8woEPtIGOtDJPPfImRV2TPjXF MoAo2FjlDwEROubeTFjWgbKQVn+m7HdXBO9gb5eNZQmJR+BbQZAHE+53JWQJBmH+ 1oTnLJuOpbylHsjk9yrqRuY5dkAn+QuUeY/6/Lu2A5PC+Aa0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqha6riChRT9ZcObUQa9eGfnY+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U3MDRlMWQtN2Y3MC0z YTAyLWIzYzMtZGMyZDcwZjQ3NzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9BMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXPmAe+pIoPkNo+YJtl8UdPplF4gFsQvWd8l134Pvx1BCiDnDj9oI7h ExdwSOtcjBkEmu1namjaGkh5ZZnHerIumfe5bRMz1/IDEKO/rLrFUVHQOGrXqNa2 COwTq9H0O0ydOtCJFUh22K5YHBAZMzcS18x1Qk5xHqhu87hjMXichqnms47dNHhR V/H0o01ROGDki6Vh9z7QwOOuH7SqKZiz2d+cpCOInqw1kqRUiCb/hwdrv0dRcHxq Keb6HdtPjLEPwBZ4eCvrV8pLzfLAK21DBwSYB0ulnPAU78ucNllC/ql+jbkNDhQv jPWnJJO26rTXxC+/w5O/+/jqmF48fXA= -----END CERTIFICATE-----Generated at Sat Sep 5 07:16:28 2026 by rpki-client