$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49cc318d-36d2-3c5d-80ac-f8de2fa05ad2.roa File: 49cc318d-36d2-3c5d-80ac-f8de2fa05ad2.roa (raw, json) Hash identifier: ibSlStiIBpDRAnBPENHMaMhqNvIruAiMoKZ7jItUbtU= Subject key identifier: D3:3D:63:79:2F:D8:6E:AB:EC:D0:B1:4B:29:99:5E:FA:AA:F5:9D:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F02423AAA9BE1040499E7AF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49cc318d-36d2-3c5d-80ac-f8de2fa05ad2.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 16625 IP address blocks: 23.209.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:3a:aa:9b:e1:04:04:99:e7:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=e0783a13-fae3-4c6b-bbae-db865b10f05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:18:ed:13:63:73:2f:5f:e8:c8:ec:42:02:58: 99:11:52:a2:80:da:38:e9:af:01:b8:a1:8b:17:1e: 65:33:0e:bf:da:58:2c:9b:f8:06:6a:1a:63:8d:b0: 68:38:50:29:f9:81:86:1e:4c:7e:f2:ee:54:26:8d: 52:e7:a6:1b:91:1b:c7:09:07:f3:27:8a:49:8a:f8: 97:14:24:cc:c4:74:78:ec:f3:e9:23:01:ca:b0:48: 45:b8:88:bf:c8:05:bc:26:4e:04:81:59:48:9d:67: e6:eb:3f:cf:f2:39:97:76:a2:cc:ed:e1:56:26:2f: c8:83:9c:37:60:2b:eb:5a:0c:73:e0:01:e2:de:ec: c7:a2:e1:9b:1a:18:c1:86:43:b9:a3:48:bb:da:ce: 0b:1a:fe:92:cc:cb:4f:ab:62:31:28:49:86:ac:a8: 14:78:5b:fb:f4:64:24:15:26:94:00:30:76:48:e5: 5b:0c:b8:98:11:15:f4:d8:24:54:7b:24:a5:a2:6c: d5:8a:6f:84:ed:21:33:5d:f3:4c:3e:9d:b9:20:f8: 5b:63:b0:84:9f:4c:3b:74:5b:0e:33:a1:71:b4:05: 90:e2:9c:ac:ef:31:cf:c9:91:f5:c6:29:67:ae:aa: 16:58:f6:52:f5:e9:30:88:bc:fa:c5:3e:14:91:e3: 25:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3D:63:79:2F:D8:6E:AB:EC:D0:B1:4B:29:99:5E:FA:AA:F5:9D:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49cc318d-36d2-3c5d-80ac-f8de2fa05ad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ab:e4:1d:6c:01:a1:2e:da:78:cd:7c:d1:cc:07:c2:0b:89: b6:74:fd:44:b2:c5:a3:bf:05:b5:11:5d:f3:c1:12:db:53:58: 4c:80:9e:96:8f:96:e0:e6:67:18:75:7f:1a:8c:0f:96:08:75: 9d:08:c6:95:9b:71:78:56:40:d5:95:4a:a8:90:98:91:a9:ed: bc:f7:e1:35:4d:87:0f:07:12:a9:20:7e:4c:ac:07:43:25:cd: 1a:6c:cc:80:67:15:29:3f:b6:99:70:75:1b:34:8e:9a:dd:8e: 13:75:0c:69:67:d6:1e:be:74:77:e2:38:88:86:7c:59:71:ab: d0:8d:70:c0:8e:32:c4:e3:af:7d:e5:a0:98:a2:94:1d:a7:51: db:d1:f4:8e:c0:e1:37:a3:9d:aa:82:83:72:f2:f9:44:ef:07: 58:99:63:f4:e3:c9:e2:57:48:38:b7:eb:fb:3c:db:3e:09:98: 6d:71:e0:fd:fc:dd:b6:63:45:ce:f9:67:51:d5:ca:8b:c2:f6: dd:26:35:2e:32:09:c2:23:da:c6:b7:82:f2:66:26:04:c2:6c: 33:5c:26:7b:0e:60:70:75:85:f8:7e:be:2a:ac:d5:b1:de:77: 53:87:28:87:47:ae:ca:48:96:a0:dd:a5:f3:6d:a4:d9:8c:1c: de:6a:71:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjqqm+EEBJnnr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZTA3ODNhMTMtZmFlMy00YzZiLWJiYWUtZGI4NjViMTBmMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RjtE2NzL1/oyOxCAliZEVKigNo46a8BuKGL Fx5lMw6/2lgsm/gGahpjjbBoOFAp+YGGHkx+8u5UJo1S56YbkRvHCQfzJ4pJiviX FCTMxHR47PPpIwHKsEhFuIi/yAW8Jk4EgVlInWfm6z/P8jmXdqLM7eFWJi/Ig5w3 YCvrWgxz4AHi3uzHouGbGhjBhkO5o0i72s4LGv6SzMtPq2IxKEmGrKgUeFv79GQk FSaUADB2SOVbDLiYERX02CRUeySlomzVim+E7SEzXfNMPp25IPhbY7CEn0w7dFsO M6FxtAWQ4pys7zHPyZH1xilnrqoWWPZS9ekwiLz6xT4UkeMlxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM9Y3kv2G6r7NCxSymZXvqq9Z2bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDljYzMxOGQtMzZkMi0z YzVkLTgwYWMtZjhkZTJmYTA1YWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9E8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCr5B1sAaEu2njNfNHMB8ILibZ0/USyxaO/BbURXfPBEttTWEyAnpaP luDmZxh1fxqMD5YIdZ0IxpWbcXhWQNWVSqiQmJGp7bz34TVNhw8HEqkgfkysB0Ml zRpszIBnFSk/tplwdRs0jprdjhN1DGln1h6+dHfiOIiGfFlxq9CNcMCOMsTjr33l oJiilB2nUdvR9I7A4TejnaqCg3Ly+UTvB1iZY/TjyeJXSDi36/s82z4JmG1x4P38 3bZjRc75Z1HVyovC9t0mNS4yCcIj2sa3gvJmJgTCbDNcJnsOYHB1hfh+viqs1bHe d1OHKIdHrspIlqDdpfNtpNmMHN5qceU= -----END CERTIFICATE-----Generated at Sat Sep 5 02:52:06 2026 by rpki-client