$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a35aeda-34df-3b1f-b23b-f7e6922902e4.roa File: 4a35aeda-34df-3b1f-b23b-f7e6922902e4.roa (raw, json) Hash identifier: ztkHMDyJmz9lJ9b+lonqCmyVZrqbggvuhV6Dl3sGfPY= Subject key identifier: 7A:CE:53:1A:BA:DC:20:29:A8:1E:9B:CF:24:C4:9D:13:16:A0:51:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAD1C5868C555D0353B962A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a35aeda-34df-3b1f-b23b-f7e6922902e4.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 16625 IP address blocks: 23.218.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:58:68:c5:55:d0:35:3b:96:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=d4cc7018-e6c1-4df0-9e39-d8f43207f5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:2a:78:e9:01:b7:53:42:4b:1c:08:11:9f: e5:23:69:13:52:a5:5e:9d:08:87:e1:82:fb:b2:77: 58:94:08:70:c8:a4:3b:70:73:02:12:e1:6b:19:6e: ef:49:23:74:88:d2:0f:35:ea:36:c6:fe:85:d1:df: 37:ab:22:34:09:71:24:8a:9f:07:43:6e:21:df:3e: 89:65:ad:d5:96:e4:f4:12:58:47:b2:8f:de:0c:46: c6:66:b8:6d:c4:d2:de:d5:05:81:8d:19:2b:94:96: c5:7d:c0:b6:6d:96:4f:59:a8:22:96:80:d9:03:4a: 7c:0d:f7:23:f8:bd:8d:2c:8f:45:37:2d:70:c3:e9: 3a:92:c7:8a:8a:dc:f6:fa:d3:08:cd:86:0d:c0:3c: c9:c1:fc:36:b0:09:ee:5c:15:42:96:c1:ee:f9:2e: 72:ef:43:46:3b:bc:46:60:39:2e:ab:e5:bd:3c:0c: df:98:36:55:17:d7:4a:af:a6:93:bf:d6:6c:5f:10: 03:69:06:0d:9f:e1:ef:dd:e0:30:f2:92:e8:6c:c7: b3:65:33:67:b0:75:ec:6d:6a:dd:14:e8:10:3d:1b: 97:84:9e:7d:63:b5:d3:5b:59:b3:0b:13:8a:f2:f7: 7d:db:20:82:f1:42:67:28:4f:68:28:fc:36:83:9d: df:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CE:53:1A:BA:DC:20:29:A8:1E:9B:CF:24:C4:9D:13:16:A0:51:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a35aeda-34df-3b1f-b23b-f7e6922902e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fe:34:cb:48:b0:3a:23:84:0a:2e:32:cd:60:5f:d9:40:2c: 36:b4:bc:6a:41:83:1c:66:55:0f:cb:76:95:9c:20:57:49:2b: 7e:e0:5e:21:6a:48:ad:c4:4b:47:c1:1c:ad:ad:54:41:26:9a: f4:50:23:ee:06:e4:00:23:d0:0a:86:fa:23:46:84:76:e5:a3: 37:f4:bf:54:c7:d1:82:a5:70:b9:7d:5d:31:36:b1:70:66:11: 7a:75:5b:2d:c5:ff:21:bc:e0:32:45:59:54:e1:b1:a6:8c:36: 07:9d:b5:e3:6f:e2:6b:05:df:13:c1:6f:d6:b9:1f:01:6e:8d: 3f:d2:85:a5:c8:d0:8f:12:38:44:80:39:db:be:99:59:f0:cf: 29:d9:8b:7f:ef:e7:9f:26:7e:b8:4e:0c:f3:be:74:57:a9:6a: 36:77:ea:31:fe:a4:a1:fb:0e:b0:c7:17:8b:73:98:3f:00:65: 03:8b:6d:a9:b9:aa:2d:aa:72:c9:9e:20:bc:8f:ad:8e:c5:0a: bc:c9:f7:f1:98:90:51:99:67:86:12:df:ce:b4:e9:ae:61:8b: dd:4f:da:9e:ca:1f:9a:53:7f:bd:d6:f2:cc:e2:b0:20:c6:a8: 6c:af:c9:43:57:cf:a9:44:21:d1:19:6f:3a:59:33:c4:bd:28: 7b:ff:9d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFhoxVXQNTuWKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk ZDRjYzcwMTgtZTZjMS00ZGYwLTllMzktZDhmNDMyMDdmNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRQqeOkBt1NCSxwIEZ/lI2kTUqVenQiH4YL7 sndYlAhwyKQ7cHMCEuFrGW7vSSN0iNIPNeo2xv6F0d83qyI0CXEkip8HQ24h3z6J Za3VluT0ElhHso/eDEbGZrhtxNLe1QWBjRkrlJbFfcC2bZZPWagiloDZA0p8Dfcj +L2NLI9FNy1ww+k6kseKitz2+tMIzYYNwDzJwfw2sAnuXBVClsHu+S5y70NGO7xG YDkuq+W9PAzfmDZVF9dKr6aTv9ZsXxADaQYNn+Hv3eAw8pLobMezZTNnsHXsbWrd FOgQPRuXhJ59Y7XTW1mzCxOK8vd92yCC8UJnKE9oKPw2g53fFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrOUxq63CApqB6bzyTEnRMWoFFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGEzNWFlZGEtMzRkZi0z YjFmLWIyM2ItZjdlNjkyMjkwMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9pIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv+NMtIsDojhAouMs1gX9lALDa0vGpBgxxmVQ/LdpWcIFdJK37gXiFq SK3ES0fBHK2tVEEmmvRQI+4G5AAj0AqG+iNGhHblozf0v1TH0YKlcLl9XTE2sXBm EXp1Wy3F/yG84DJFWVThsaaMNgedteNv4msF3xPBb9a5HwFujT/ShaXI0I8SOESA Odu+mVnwzynZi3/v558mfrhODPO+dFepajZ36jH+pKH7DrDHF4tzmD8AZQOLbam5 qi2qcsmeILyPrY7FCrzJ9/GYkFGZZ4YS38606a5hi91P2p7KH5pTf73W8szisCDG qGyvyUNXz6lEIdEZbzpZM8S9KHv/new= -----END CERTIFICATE-----Generated at Sat Sep 5 02:09:29 2026 by rpki-client