$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7293ca-c01c-365d-b666-850d1d75d6c3.roa File: 3f7293ca-c01c-365d-b666-850d1d75d6c3.roa (raw, json) Hash identifier: AJi7MfPJdX7GKCq9I3kYxg4RmYTzYxcpOAfNHxtxHGk= Subject key identifier: 3F:F3:8E:23:F6:49:BF:C3:11:38:B8:50:24:82:4D:39:0A:0A:BE:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7982DF9F7C4BA68659BB1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7293ca-c01c-365d-b666-850d1d75d6c3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.207.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:2d:f9:f7:c4:ba:68:65:9b:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8d5f3785-944e-4a38-a4fe-06c29f3a7021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3f:96:f6:5d:ae:05:a6:a6:65:41:b4:14:6b: b4:17:10:d1:c1:af:b9:09:ad:3a:36:73:57:92:45: ee:bf:47:d9:e4:f6:0b:de:8d:ee:41:1b:db:d3:2b: e3:c9:e2:0c:03:36:af:d7:8e:53:c5:06:02:e8:d3: 54:94:08:a8:7f:85:4e:6a:57:f1:de:19:2e:6b:54: c8:d0:ae:07:a5:66:ed:a7:d3:f9:85:31:40:54:dc: 95:97:9f:d4:2b:fd:61:52:57:28:61:53:76:3f:2e: f1:f9:48:d2:85:37:98:21:6b:c0:bf:39:e7:78:9e: 35:81:89:2d:7e:39:c1:22:79:ff:aa:1e:16:26:43: b8:fe:a9:34:9e:e4:b5:43:6f:cf:c9:62:27:42:06: 0a:41:52:ab:05:40:79:d0:bd:6a:ea:aa:ff:fc:7c: ec:94:d6:78:4e:b6:90:2f:48:96:3a:40:e8:50:39: a5:7b:d0:86:04:52:04:0f:1e:ec:0c:72:4e:15:cb: 37:5f:c8:f2:5c:6d:dc:ac:dc:0f:01:7d:c6:31:82: 5b:27:a3:3b:de:18:d1:52:7e:15:c2:1c:05:0c:be: 3d:e1:65:64:02:82:18:5e:3f:32:dc:05:46:3d:3e: 19:49:a5:4b:2d:80:9a:2d:df:22:4c:3e:f6:71:28: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F3:8E:23:F6:49:BF:C3:11:38:B8:50:24:82:4D:39:0A:0A:BE:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7293ca-c01c-365d-b666-850d1d75d6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7c:33:c3:7d:46:79:9c:c1:4a:b4:7b:15:a2:57:f7:4f:81: ec:15:bd:95:d4:04:0b:65:87:49:b5:e5:09:df:ab:fc:9a:e8: c5:9f:76:d8:b9:df:ce:4f:19:dd:ac:2c:75:9a:30:ae:1b:33: 15:f8:e4:25:86:a4:8b:e6:ce:44:d1:44:b4:f9:6e:28:32:9c: ff:63:c5:28:e1:60:a1:4c:c6:8b:77:15:39:39:33:1f:10:9a: 24:a4:d3:bc:45:fa:b4:6c:31:bc:98:0d:0a:19:6b:ae:27:eb: a1:4d:f2:bd:6a:f8:9e:2a:7e:54:f9:5f:46:7d:0f:8b:1f:d8: e5:63:78:88:12:9f:8d:f9:16:dc:57:91:4c:d9:dd:11:0f:02: 8a:52:bc:3b:9e:52:e7:c1:68:e3:70:19:cc:2c:54:5b:5b:69: 4b:40:f0:41:46:3b:3f:a4:45:85:cb:9e:02:ea:d9:90:db:06: d8:7e:70:58:60:c2:5c:42:47:b6:27:54:c2:a7:c6:a0:6f:53: 81:ed:13:af:a3:d8:f2:fa:3e:dd:2a:42:20:4f:cd:64:95:c3: 8b:01:78:f1:5a:32:e7:a9:25:4e:a6:fb:a0:4b:54:e1:20:66: 2f:ac:eb:0c:37:59:56:53:8d:a4:d0:60:4f:bd:71:29:93:14: 2b:c5:de:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmC3598S6aGWbscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGQ1ZjM3ODUtOTQ0ZS00YTM4LWE0ZmUtMDZjMjlmM2E3MDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T+W9l2uBaamZUG0FGu0FxDRwa+5Ca06NnNX kkXuv0fZ5PYL3o3uQRvb0yvjyeIMAzav145TxQYC6NNUlAiof4VOalfx3hkua1TI 0K4HpWbtp9P5hTFAVNyVl5/UK/1hUlcoYVN2Py7x+UjShTeYIWvAvznneJ41gYkt fjnBInn/qh4WJkO4/qk0nuS1Q2/PyWInQgYKQVKrBUB50L1q6qr//HzslNZ4TraQ L0iWOkDoUDmle9CGBFIEDx7sDHJOFcs3X8jyXG3crNwPAX3GMYJbJ6M73hjRUn4V whwFDL494WVkAoIYXj8y3AVGPT4ZSaVLLYCaLd8iTD72cSiLOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/zjiP2Sb/DETi4UCSCTTkKCr5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y3MjkzY2EtYzAxYy0z NjVkLWI2NjYtODUwZDFkNzVkNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF88oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd8M8N9RnmcwUq0exWiV/dPgewVvZXUBAtlh0m15Qnfq/ya6MWfdti5 385PGd2sLHWaMK4bMxX45CWGpIvmzkTRRLT5bigynP9jxSjhYKFMxot3FTk5Mx8Q miSk07xF+rRsMbyYDQoZa64n66FN8r1q+J4qflT5X0Z9D4sf2OVjeIgSn435FtxX kUzZ3REPAopSvDueUufBaONwGcwsVFtbaUtA8EFGOz+kRYXLngLq2ZDbBth+cFhg wlxCR7YnVMKnxqBvU4HtE6+j2PL6Pt0qQiBPzWSVw4sBePFaMuepJU6m+6BLVOEg Zi+s6ww3WVZTjaTQYE+9cSmTFCvF3qs= -----END CERTIFICATE-----Generated at Sat Sep 5 03:27:50 2026 by rpki-client