$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a389ff-b303-3db9-8ff7-80276a6cf6eb.roa File: 40a389ff-b303-3db9-8ff7-80276a6cf6eb.roa (raw, json) Hash identifier: TR59dlx7ssoN1uDRKbJ9M3Cvv7B3n6st6jcN24CnnVc= Subject key identifier: 62:4E:94:91:E3:12:64:CD:FC:A8:A0:80:5A:0B:C3:31:54:13:07:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81AFF586A556C2DC5A6500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a389ff-b303-3db9-8ff7-80276a6cf6eb.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.221.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:af:f5:86:a5:56:c2:dc:5a:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=1eb79ba2-bb54-4492-a2f8-f3a1a225cd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a4:60:aa:e5:a2:a9:17:4c:c5:d5:db:f1:30: ae:d1:57:24:0b:2a:45:ab:ef:93:5c:3a:af:30:8c: ba:20:5f:9a:ed:4a:87:00:49:ae:54:e9:9c:28:0d: b8:bf:65:8f:8c:92:c8:96:d6:60:fc:f0:8b:ef:0b: 1e:f4:9f:a7:37:35:ab:fe:59:54:e2:1b:b8:80:e1: 1f:9b:55:da:86:f9:f3:de:74:9a:cd:d0:1b:a8:f3: e1:84:41:87:ee:69:ba:36:88:60:dc:e8:fa:15:b3: e7:a6:18:8a:f2:32:b9:e7:e4:c2:9e:9b:0d:c8:69: b2:c8:bf:63:95:88:03:dc:a6:7a:37:89:b6:97:8e: 6c:6b:68:ab:68:94:8a:8a:06:a0:42:05:86:88:99: d1:20:79:d4:31:95:c7:20:49:fa:28:39:7b:5e:65: 5f:22:a2:07:c4:6e:54:a7:2a:d9:ec:f3:2f:88:15: d5:81:3a:6f:2d:a3:a1:bc:21:8b:28:16:c0:9b:24: 74:3c:20:71:b9:7b:d9:43:22:38:04:2f:76:76:d9: d4:6c:26:e9:5a:c2:4d:2e:1f:52:b5:22:ad:43:1d: 2a:fc:ae:6a:1b:8e:3a:78:b8:70:28:37:77:f2:17: 9f:16:5c:ee:6d:b5:7a:3c:40:c6:24:74:e8:41:de: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:4E:94:91:E3:12:64:CD:FC:A8:A0:80:5A:0B:C3:31:54:13:07:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a389ff-b303-3db9-8ff7-80276a6cf6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:80:a9:c3:1b:c1:0b:5e:c8:be:51:96:ba:c8:d4:d6:c6:5f: 83:00:a1:f6:b4:5c:dd:e9:6c:3a:98:ed:ee:1e:d3:f9:15:a6: 80:0f:75:dd:7a:5e:f7:05:3f:58:32:b5:34:36:be:63:0d:d7: 3a:29:d8:cc:23:0c:6a:3a:50:28:c4:ab:8e:b2:17:60:fd:1e: 22:97:c9:d2:7f:2f:71:38:9e:4f:79:ea:69:c7:31:c5:59:45: c6:97:1d:26:cc:f2:f4:03:5f:8c:10:e8:de:8e:71:75:ca:e7: e3:ea:c9:1b:54:bc:b8:8f:64:73:d1:37:6c:c5:0a:cb:5e:68: 9f:0b:60:35:d0:b7:59:d6:f8:09:32:c8:39:49:1a:38:42:01: 38:6b:23:88:22:9c:25:cb:a0:a2:c2:e0:a0:f4:13:87:13:a1: 9f:a9:86:99:7b:b1:cf:1c:00:f8:9e:cf:45:0a:32:1e:97:cd: 04:27:6a:6c:aa:83:88:3c:fd:a5:ae:ea:f7:02:09:c6:13:62: 33:bf:fe:81:40:d8:33:79:d1:cd:e8:f2:d2:18:bc:93:7c:8e: 05:68:4b:e1:d0:6b:c1:dc:5e:d9:d2:9b:b0:79:f0:4c:8a:17: 86:38:66:86:02:fe:bf:a9:53:62:a2:63:03:1d:fd:d3:66:8e: 16:16:cf:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6uga/1hqVWwtxaZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk MWViNzliYTItYmI1NC00NDkyLWEyZjgtZjNhMWEyMjVjZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+aRgquWiqRdMxdXb8TCu0VckCypFq++TXDqv MIy6IF+a7UqHAEmuVOmcKA24v2WPjJLIltZg/PCL7wse9J+nNzWr/llU4hu4gOEf m1Xahvnz3nSazdAbqPPhhEGH7mm6Nohg3Oj6FbPnphiK8jK55+TCnpsNyGmyyL9j lYgD3KZ6N4m2l45sa2iraJSKigagQgWGiJnRIHnUMZXHIEn6KDl7XmVfIqIHxG5U pyrZ7PMviBXVgTpvLaOhvCGLKBbAmyR0PCBxuXvZQyI4BC92dtnUbCbpWsJNLh9S tSKtQx0q/K5qG446eLhwKDd38hefFlzubbV6PEDGJHToQd5ASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJOlJHjEmTN/KiggFoLwzFUEwfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDBhMzg5ZmYtYjMwMy0z ZGI5LThmZjctODAyNzZhNmNmNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6AqcMbwQteyL5RlrrI1NbGX4MAofa0XN3pbDqY7e4e0/kVpoAPdd16 XvcFP1gytTQ2vmMN1zop2MwjDGo6UCjEq46yF2D9HiKXydJ/L3E4nk956mnHMcVZ RcaXHSbM8vQDX4wQ6N6OcXXK5+PqyRtUvLiPZHPRN2zFCsteaJ8LYDXQt1nW+Aky yDlJGjhCAThrI4ginCXLoKLC4KD0E4cToZ+phpl7sc8cAPiez0UKMh6XzQQnamyq g4g8/aWu6vcCCcYTYjO//oFA2DN50c3o8tIYvJN8jgVoS+HQa8HcXtnSm7B58EyK F4Y4ZoYC/r+pU2KiYwMd/dNmjhYWz6k= -----END CERTIFICATE-----Generated at Fri Sep 4 22:21:44 2026 by rpki-client