$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db251ac-e484-39ef-8245-95ea1956c389.roa File: 4db251ac-e484-39ef-8245-95ea1956c389.roa (raw, json) Hash identifier: FYGlzkE44tVpMJeT5UlLkoXahu6BXX0KH/j3GKGvYjY= Subject key identifier: BB:3B:64:E6:37:1A:2E:99:9D:31:68:9E:6C:C7:A5:67:C9:16:BF:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE38CA23A3FADEE3B06F8D4A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db251ac-e484-39ef-8245-95ea1956c389.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 16625 IP address blocks: 23.221.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a2:3a:3f:ad:ee:3b:06:f8:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=49c4edd8-e9ca-4d89-8846-83aef7c297b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:07:18:b8:f9:46:41:f6:dd:ec:a0:e2:31: 2b:ab:6c:35:db:bb:7f:db:0a:89:8d:7b:4e:73:f4: 96:16:6e:98:f9:c7:ef:6b:f2:c5:97:b6:1d:bb:66: 38:44:84:3d:58:f4:46:25:90:6d:27:64:5a:03:da: cc:2c:7b:07:e6:68:fc:54:c3:05:1f:11:b1:e7:5a: 19:80:79:b0:52:98:be:22:96:e9:9f:0d:8b:af:9a: db:0f:bf:7a:f0:c1:7f:a6:50:2c:cd:e9:65:57:3c: 3d:15:51:ef:5d:1c:ef:c4:cd:80:21:34:c2:bf:47: 7b:48:3c:c7:bc:65:ec:f1:32:52:c1:4c:43:7c:6d: b6:84:8d:a1:95:1f:52:7e:d5:75:4c:3b:a2:48:1f: bc:0b:37:39:51:98:37:e5:f4:00:55:9e:9c:f7:38: 74:0a:bc:32:70:1f:6c:cb:87:03:8f:e7:f1:61:17: 22:d0:77:f6:12:c8:d6:72:63:4d:04:df:73:28:49: 32:5c:f5:09:e7:16:e7:10:e7:fd:24:63:77:16:8f: 43:89:d9:89:62:3b:6b:ff:09:05:f8:c0:df:ae:0a: 68:89:4b:42:c7:31:a9:06:97:e8:1e:bc:ac:44:6b: fa:78:56:55:e1:60:7e:fa:3b:3e:3c:ce:10:80:79: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3B:64:E6:37:1A:2E:99:9D:31:68:9E:6C:C7:A5:67:C9:16:BF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4db251ac-e484-39ef-8245-95ea1956c389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5f:f3:e3:26:2b:02:ed:7a:cf:15:8d:34:ee:f7:01:c4:28: 94:65:13:14:b3:74:8c:8f:69:3e:5c:b3:22:a5:db:c9:e7:5a: fa:32:f7:6e:4f:b1:94:d7:25:be:db:d8:92:00:15:ff:a6:4c: 52:71:52:a5:8b:26:06:cd:2a:7d:b9:04:88:31:e4:ce:47:5d: 6e:4c:37:91:23:6b:7c:bc:33:58:76:6e:fb:90:8e:bf:f1:72: 37:02:5c:2f:98:1e:bd:1d:74:b6:28:21:78:73:74:9f:78:05: 00:4f:4a:27:84:56:75:01:1e:e3:1f:67:53:67:b6:f2:f7:bb: 30:70:45:24:83:b2:23:44:3a:16:c8:f9:19:fd:73:32:55:ba: 2d:7a:e7:06:73:58:b1:68:52:f7:a6:67:1e:5a:f7:54:1d:0e: 29:94:2f:3f:5f:9e:00:68:b3:ff:41:87:fe:f1:e7:ea:94:ef: 73:ed:48:f2:2d:48:0b:df:37:02:ad:06:91:75:83:84:27:70: 1d:f8:9b:6b:dc:5e:d9:9f:12:18:5f:ca:ff:3c:de:7f:35:11: 30:49:3b:da:11:67:2a:09:6f:10:69:4e:a3:42:e6:15:ef:e0: ff:d9:be:bb:9e:26:40:2b:5a:ca:94:b2:da:aa:ad:7c:cc:db: 49:ae:5c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKI6P63uOwb41KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NDljNGVkZDgtZTljYS00ZDg5LTg4NDYtODNhZWY3YzI5N2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqIHGLj5RkH23eyg4jErq2w127t/2wqJjXtO c/SWFm6Y+cfva/LFl7Ydu2Y4RIQ9WPRGJZBtJ2RaA9rMLHsH5mj8VMMFHxGx51oZ gHmwUpi+Ipbpnw2Lr5rbD7968MF/plAszellVzw9FVHvXRzvxM2AITTCv0d7SDzH vGXs8TJSwUxDfG22hI2hlR9SftV1TDuiSB+8Czc5UZg35fQAVZ6c9zh0CrwycB9s y4cDj+fxYRci0Hf2EsjWcmNNBN9zKEkyXPUJ5xbnEOf9JGN3Fo9DidmJYjtr/wkF +MDfrgpoiUtCxzGpBpfoHrysRGv6eFZV4WB++js+PM4QgHlazwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs7ZOY3Gi6ZnTFonmzHpWfJFr9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRiMjUxYWMtZTQ4NC0z OWVmLTgyNDUtOTVlYTE5NTZjMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF93EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZf8+MmKwLtes8VjTTu9wHEKJRlExSzdIyPaT5csyKl28nnWvoy925P sZTXJb7b2JIAFf+mTFJxUqWLJgbNKn25BIgx5M5HXW5MN5Eja3y8M1h2bvuQjr/x cjcCXC+YHr0ddLYoIXhzdJ94BQBPSieEVnUBHuMfZ1NntvL3uzBwRSSDsiNEOhbI +Rn9czJVui165wZzWLFoUvemZx5a91QdDimULz9fngBos/9Bh/7x5+qU73PtSPIt SAvfNwKtBpF1g4QncB34m2vcXtmfEhhfyv883n81ETBJO9oRZyoJbxBpTqNC5hXv 4P/ZvrueJkArWsqUstqqrXzM20muXJ0= -----END CERTIFICATE-----Generated at Sat Sep 5 01:28:03 2026 by rpki-client