$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa File: 4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa (raw, json) Hash identifier: WlKkYzx6Dv+pyeC2voEeAnf0TSFeHyZcQq3bhCBWo+E= Subject key identifier: D2:BF:40:E8:AF:2C:C3:01:A4:66:13:80:44:50:35:22:D1:43:6D:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA79970E5AE70547B0B63EAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.210.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:70:e5:ae:70:54:7b:0b:63:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1b20e3f0-22ef-4236-be01-7dbaadceafbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:1f:25:3d:9f:a7:a2:77:4d:f9:6d:67:a3: c9:e3:3a:f9:b2:8e:a9:69:59:20:0f:b0:18:6d:00: d5:32:fb:ca:a9:30:1b:80:78:99:40:86:1f:89:30: eb:08:9f:62:d5:51:4b:b5:f1:d6:d0:18:bd:a3:23: 0b:fa:65:be:33:1b:93:81:71:c2:57:ed:34:07:98: 7e:8a:a9:4b:c3:41:52:d7:42:c7:b5:89:f8:20:8e: 6f:a4:78:c0:e2:25:16:9d:be:63:c0:34:2d:27:bd: 59:c0:22:44:c6:07:95:33:64:71:69:22:58:0a:72: a6:d8:91:00:ee:ee:42:d2:e3:51:0d:62:8d:f0:76: da:0d:51:24:12:55:39:25:cd:ea:b8:09:8c:81:3e: e2:03:ca:66:41:3b:42:27:1a:ef:7b:18:e3:8d:56: d8:71:4c:1f:ee:dc:bf:da:bc:36:59:f4:d6:f3:60: f4:40:22:75:32:67:7b:23:ea:35:da:53:c7:99:9c: 4b:e4:cc:53:5e:7d:67:c5:1f:75:4a:79:ae:78:6b: 28:1a:2e:41:6b:e9:cf:a0:e9:05:1b:46:d8:ea:3f: b8:5f:e6:be:55:af:1f:77:ea:80:cb:9f:c1:b4:87: 15:76:15:0e:35:50:14:39:05:39:bb:4c:d4:0c:97: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BF:40:E8:AF:2C:C3:01:A4:66:13:80:44:50:35:22:D1:43:6D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4282a368-7979-3ad6-beaf-a9aaa8a9fe3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ab:c7:e8:f8:c9:f3:4c:af:58:df:14:90:b9:b1:af:2e:36: 39:eb:18:03:df:c9:64:0a:9d:22:6c:6a:68:ac:ed:65:3a:83: e2:83:d4:8d:ca:42:87:c9:23:a3:9f:7b:79:48:6f:6f:a8:51: 85:fe:54:42:42:18:b1:2f:38:2e:08:ad:45:ae:07:84:cd:eb: 36:c0:4c:3e:78:f9:bf:91:68:2b:4e:79:43:3c:54:4e:cb:59: fe:e0:25:70:85:da:f0:51:1f:79:88:b4:b4:38:f8:25:4f:c0: 55:da:c1:ee:e0:8d:37:0a:e6:9d:ff:72:7e:08:8f:49:e1:df: eb:96:e2:09:59:5d:fc:44:fb:7d:12:ed:50:b8:31:e2:c1:74: f3:cc:84:12:0f:e7:a5:59:8e:06:05:67:6a:6d:05:aa:0c:b1: 0e:16:10:b9:fe:b0:ba:9f:cc:1f:f7:1e:91:df:f0:01:84:f5: a2:76:bb:28:31:6c:9b:97:56:d3:78:0e:b9:05:38:b5:7f:d4: 22:a2:13:ea:aa:c9:ed:52:4f:15:96:e7:56:67:77:d5:0f:13: d6:9d:62:c3:68:78:f1:ca:8f:18:36:96:79:04:b4:7d:b8:96: 14:af:54:0c:1c:ff:f5:a4:39:54:35:1d:5b:0b:10:a8:bb:01: de:6e:1e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmXDlrnBUewtj6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWIyMGUzZjAtMjJlZi00MjM2LWJlMDEtN2RiYWFkY2VhZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/MfJT2fp6J3TfltZ6PJ4zr5so6paVkgD7AY bQDVMvvKqTAbgHiZQIYfiTDrCJ9i1VFLtfHW0Bi9oyML+mW+MxuTgXHCV+00B5h+ iqlLw0FS10LHtYn4II5vpHjA4iUWnb5jwDQtJ71ZwCJExgeVM2RxaSJYCnKm2JEA 7u5C0uNRDWKN8HbaDVEkElU5Jc3quAmMgT7iA8pmQTtCJxrvexjjjVbYcUwf7ty/ 2rw2WfTW82D0QCJ1Mmd7I+o12lPHmZxL5MxTXn1nxR91SnmueGsoGi5Ba+nPoOkF G0bY6j+4X+a+Va8fd+qAy5/BtIcVdhUONVAUOQU5u0zUDJcqsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNK/QOivLMMBpGYTgERQNSLRQ23ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDI4MmEzNjgtNzk3OS0z YWQ2LWJlYWYtYTlhYWE4YTlmZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9L6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWrx+j4yfNMr1jfFJC5sa8uNjnrGAPfyWQKnSJsamis7WU6g+KD1I3K QofJI6Ofe3lIb2+oUYX+VEJCGLEvOC4IrUWuB4TN6zbATD54+b+RaCtOeUM8VE7L Wf7gJXCF2vBRH3mItLQ4+CVPwFXawe7gjTcK5p3/cn4Ij0nh3+uW4glZXfxE+30S 7VC4MeLBdPPMhBIP56VZjgYFZ2ptBaoMsQ4WELn+sLqfzB/3HpHf8AGE9aJ2uygx bJuXVtN4DrkFOLV/1CKiE+qqye1STxWW51Znd9UPE9adYsNoePHKjxg2lnkEtH24 lhSvVAwc//WkOVQ1HVsLEKi7Ad5uHqg= -----END CERTIFICATE-----Generated at Sat Sep 5 03:27:45 2026 by rpki-client