$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e90b418-f67c-3d83-8140-c4051c8986bb.roa File: 3e90b418-f67c-3d83-8140-c4051c8986bb.roa (raw, json) Hash identifier: 6zJsVmYJ3Zf6b9KJ0kn13ZLxD5C/JliZhfjcJ3iun1k= Subject key identifier: FA:2E:CD:E4:EA:D8:EE:47:AD:DF:72:13:CD:8A:7B:A7:CB:AD:F3:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA798398D1E3EAB704BA84200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e90b418-f67c-3d83-8140-c4051c8986bb.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.204.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:39:8d:1e:3e:ab:70:4b:a8:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6d2cdfc2-3efe-4194-9c3b-fcffe0684874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:6a:2d:78:d2:9f:fd:37:ca:ac:20:bc:c5: 0d:60:77:ef:73:9b:2d:98:e1:2c:19:e1:90:b7:d7: 37:e8:86:6b:8e:15:db:34:b5:15:c0:65:83:19:59: 7d:cc:ff:48:25:7b:be:39:e2:ac:3c:9a:b6:c3:06: e1:42:46:4a:e5:09:ec:81:fe:f0:7e:ae:47:57:fe: 9c:ef:71:e4:19:5e:f7:10:aa:a1:82:17:82:58:5c: 85:3f:b9:4c:9e:65:0c:cf:c1:89:a4:4c:46:49:17: 6e:57:83:44:32:61:f0:77:87:a4:ca:ec:53:8a:28: d2:6f:96:0d:dc:6c:1c:66:2b:ed:e6:7e:82:d4:c0: 3e:48:f9:b8:2e:d8:e6:97:05:df:e5:43:f0:f5:a6: 35:ff:c5:39:92:0b:a0:14:54:3a:37:7a:d9:b2:e6: 40:6c:df:c2:21:d3:65:f4:3d:3a:dd:50:1e:af:50: 5d:d1:e7:d9:db:45:ce:cf:ad:98:d3:ad:17:83:b5: 88:32:dd:bd:1e:e2:c9:2a:00:a0:9b:42:08:de:77: 92:c1:2a:f6:25:b0:ea:6f:5b:de:2e:e2:74:9e:a3: a8:f9:c5:e2:73:88:5b:fd:02:1a:bb:3c:4a:15:2b: 79:b1:d3:ab:bd:d6:62:20:c5:f2:be:61:01:43:bc: f5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2E:CD:E4:EA:D8:EE:47:AD:DF:72:13:CD:8A:7B:A7:CB:AD:F3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e90b418-f67c-3d83-8140-c4051c8986bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6c:b5:9d:69:6a:5a:e9:96:77:03:a2:e2:a8:b4:15:55:e6: 6f:9f:a7:6f:20:1d:60:09:6b:a8:3f:6a:5c:81:3c:3e:13:ba: e1:73:16:87:0e:dc:73:97:00:3a:9a:7e:8d:a6:2a:56:35:de: d9:05:a0:1d:05:75:b4:26:96:e8:67:05:3f:f6:41:7a:a1:19: 7e:65:10:13:fb:c9:ab:a5:78:4e:17:b6:26:24:db:5e:67:fa: d1:d1:cf:6d:db:27:39:f7:bd:93:92:a1:bd:a2:0d:d5:d4:97: 23:56:74:c1:b7:c5:68:6f:6e:ab:c1:fe:1e:2a:7f:50:6a:52: da:1c:0a:5c:93:fb:1d:fc:e9:55:e3:8c:a6:71:6d:f0:d7:96: 75:1e:fe:5f:bc:bc:58:8d:ba:aa:88:d6:45:fc:b8:29:aa:34: fb:33:69:df:32:2f:0a:ab:30:a9:52:fa:f6:86:31:ca:1e:c7: 86:8d:89:fa:0e:f9:89:7c:5e:80:70:d6:a9:56:c5:55:a3:cd: b7:62:3d:c2:cc:ed:ee:89:fc:ae:da:41:16:50:d9:ff:ec:af: 6e:d6:cb:99:9d:0a:db:35:95:b6:d2:e8:c0:46:a2:86:33:7e: 2d:eb:cb:a1:d5:25:74:a5:ad:77:16:96:8a:92:df:87:07:43: 9f:f4:19:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmDmNHj6rcEuoQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmQyY2RmYzItM2VmZS00MTk0LTljM2ItZmNmZmUwNjg0ODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujVqLXjSn/03yqwgvMUNYHfvc5stmOEsGeGQ t9c36IZrjhXbNLUVwGWDGVl9zP9IJXu+OeKsPJq2wwbhQkZK5Qnsgf7wfq5HV/6c 73HkGV73EKqhgheCWFyFP7lMnmUMz8GJpExGSRduV4NEMmHwd4ekyuxTiijSb5YN 3GwcZivt5n6C1MA+SPm4LtjmlwXf5UPw9aY1/8U5kgugFFQ6N3rZsuZAbN/CIdNl 9D063VAer1Bd0efZ20XOz62Y060Xg7WIMt29HuLJKgCgm0II3neSwSr2JbDqb1ve LuJ0nqOo+cXic4hb/QIauzxKFSt5sdOrvdZiIMXyvmEBQ7z16wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPouzeTq2O5Hrd9yE82Ke6fLrfP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U5MGI0MTgtZjY3Yy0z ZDgzLTgxNDAtYzQwNTFjODk4NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8xMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxstZ1palrplncDouKotBVV5m+fp28gHWAJa6g/alyBPD4TuuFzFocO 3HOXADqafo2mKlY13tkFoB0FdbQmluhnBT/2QXqhGX5lEBP7yauleE4XtiYk215n +tHRz23bJzn3vZOSob2iDdXUlyNWdMG3xWhvbqvB/h4qf1BqUtocClyT+x386VXj jKZxbfDXlnUe/l+8vFiNuqqI1kX8uCmqNPszad8yLwqrMKlS+vaGMcoex4aNifoO +Yl8XoBw1qlWxVWjzbdiPcLM7e6J/K7aQRZQ2f/sr27Wy5mdCts1lbbS6MBGooYz fi3ry6HVJXSlrXcWloqS34cHQ5/0GSM= -----END CERTIFICATE-----Generated at Sat Sep 5 06:13:34 2026 by rpki-client