$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fd35457-963d-3d55-a564-2abd5e0ff1a4.roa File: 3fd35457-963d-3d55-a564-2abd5e0ff1a4.roa (raw, json) Hash identifier: eyo2CtvRMqjQC4zAI2fVPSA7+4QRG03XNy72UZNsoFw= Subject key identifier: 95:AB:7A:41:8C:F7:0D:F5:2A:0A:40:6B:5B:2E:71:B5:21:E6:B3:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7981F18A4C418D15356DD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fd35457-963d-3d55-a564-2abd5e0ff1a4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.204.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:1f:18:a4:c4:18:d1:53:56:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c6341ee0-a839-4d11-aced-730ec5c5dc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:37:b4:b0:38:db:62:f9:45:f0:5e:ed:c0: 6f:93:1b:2d:be:90:28:ac:17:4c:f0:b1:40:8f:a0: af:29:dc:70:70:a0:32:6c:7c:21:b3:72:bc:72:49: 4d:a5:77:fa:6e:3b:12:5a:a2:40:71:af:12:64:57: b9:30:6d:96:69:e7:c0:2f:7f:c3:d6:7b:7d:27:cc: b4:b7:0c:f3:09:37:15:aa:e6:4b:dc:97:5a:cf:dc: f8:22:12:c2:d5:21:c7:8b:f0:49:3c:5c:6b:bd:1a: 2d:96:2e:07:15:6f:ec:03:07:90:c4:bc:ff:9e:93: ac:b5:2b:f9:38:18:ac:e1:73:c6:aa:a4:49:8d:0f: 8c:99:38:06:d9:17:3e:c4:27:b5:47:fc:87:af:e1: a4:e3:ce:f9:4e:0d:d3:a4:dd:bc:0f:0e:77:50:f3: ed:cc:63:ce:31:a5:25:12:62:9b:ef:02:47:53:30: 7c:11:32:1d:25:96:ca:ce:b8:93:49:3f:8d:f0:ad: 8a:61:ca:37:dd:af:05:44:cb:fd:32:7e:95:9d:85: 55:c8:88:89:1c:cb:4a:79:87:40:c8:7a:1b:d7:ac: 82:ec:3f:a4:85:39:bd:e6:66:01:ca:b2:44:62:11: 0f:ef:71:ef:21:40:fb:6c:a1:4b:49:d4:b3:fa:6e: a1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AB:7A:41:8C:F7:0D:F5:2A:0A:40:6B:5B:2E:71:B5:21:E6:B3:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fd35457-963d-3d55-a564-2abd5e0ff1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c9:d9:af:25:a1:43:2a:6b:c5:ef:24:3f:b2:66:77:e8:e2: 85:a6:c6:db:76:a1:d9:b6:5d:3d:b4:ac:e2:ea:c5:1e:9f:1a: a4:e2:c6:16:90:db:0e:c8:ea:5e:07:98:e3:9c:c1:05:8b:f4: 55:49:8b:f7:16:41:12:b8:6b:ea:3c:8a:10:f7:fa:9c:9b:f3: d2:57:3c:41:ca:a3:a0:c2:81:0d:ea:f3:25:ca:e2:ee:ef:bc: 96:d0:b3:aa:95:11:c7:18:01:7d:7a:f3:bb:83:d5:8f:e7:d1: d0:1b:6d:05:b4:7d:4c:b1:39:ae:f3:bd:75:02:02:bf:fb:5f: 92:34:05:8b:dd:f9:bd:f8:04:bb:e8:6d:e8:f5:e9:74:b3:e5: 74:45:73:b8:16:19:e6:05:06:76:62:92:bd:e2:04:94:e2:27: bb:f7:0c:cf:91:16:ef:e7:f7:a6:89:c2:dd:0c:5e:78:eb:fe: 0a:02:7a:a7:8f:9e:1b:20:b3:b8:af:95:60:97:e6:a9:7e:20: 44:ee:6f:19:40:08:6b:ba:cb:1e:e1:32:c4:9b:15:5b:c8:0e: be:68:99:97:f6:ed:78:31:eb:fb:1f:b5:bf:dc:b0:12:f0:f5: d2:92:2f:78:94:b9:5a:b8:b5:17:e3:22:ef:80:98:19:68:e1: 95:31:be:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmB8YpMQY0VNW3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzYzNDFlZTAtYTgzOS00ZDExLWFjZWQtNzMwZWM1YzVkYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv443tLA422L5RfBe7cBvkxstvpAorBdM8LFA j6CvKdxwcKAybHwhs3K8cklNpXf6bjsSWqJAca8SZFe5MG2WaefAL3/D1nt9J8y0 twzzCTcVquZL3Jdaz9z4IhLC1SHHi/BJPFxrvRotli4HFW/sAweQxLz/npOstSv5 OBis4XPGqqRJjQ+MmTgG2Rc+xCe1R/yHr+Gk4875Tg3TpN28Dw53UPPtzGPOMaUl EmKb7wJHUzB8ETIdJZbKzriTST+N8K2KYco33a8FRMv9Mn6VnYVVyIiJHMtKeYdA yHob16yC7D+khTm95mYByrJEYhEP73HvIUD7bKFLSdSz+m6hLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWrekGM9w31KgpAa1sucbUh5rMQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZkMzU0NTctOTYzZC0z ZDU1LWE1NjQtMmFiZDVlMGZmMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8xgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrJ2a8loUMqa8XvJD+yZnfo4oWmxtt2odm2XT20rOLqxR6fGqTixhaQ 2w7I6l4HmOOcwQWL9FVJi/cWQRK4a+o8ihD3+pyb89JXPEHKo6DCgQ3q8yXK4u7v vJbQs6qVEccYAX1687uD1Y/n0dAbbQW0fUyxOa7zvXUCAr/7X5I0BYvd+b34BLvo bej16XSz5XRFc7gWGeYFBnZikr3iBJTiJ7v3DM+RFu/n96aJwt0MXnjr/goCeqeP nhsgs7ivlWCX5ql+IETubxlACGu6yx7hMsSbFVvIDr5omZf27Xgx6/sftb/csBLw 9dKSL3iUuVq4tRfjIu+AmBlo4ZUxvsA= -----END CERTIFICATE-----Generated at Fri Sep 4 22:44:33 2026 by rpki-client