$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de0d5a7-6360-3ed2-9452-c0cd4b480559.roa File: 4de0d5a7-6360-3ed2-9452-c0cd4b480559.roa (raw, json) Hash identifier: 3B2A39efCiLfaB+LGZWPSeZsKMj4QFzX2Q+mN6pbX1Y= Subject key identifier: 01:A1:F3:1E:61:95:2A:A7:E5:15:61:00:79:14:47:07:28:D2:B7:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA799713E9919627D05A74D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de0d5a7-6360-3ed2-9452-c0cd4b480559.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.211.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:71:3e:99:19:62:7d:05:a7:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c6385957-4201-4fad-8edb-3b459bde2658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bb:8d:34:f5:b3:b5:1b:7e:8f:38:dd:1a:c4: 0c:46:35:5c:e1:61:aa:d8:06:8b:65:1b:28:4c:43: 51:37:de:c2:e2:f1:7e:75:15:5d:a6:13:5e:b3:b7: 94:82:32:30:89:40:25:47:2f:9a:ae:71:b7:5b:03: cb:5b:21:b6:20:ba:b5:c0:83:ae:8f:e7:0b:bb:1a: 4c:da:cb:93:c8:a6:0c:47:73:15:1b:ac:6a:5e:25: 8b:37:a0:63:45:49:40:84:67:ba:c3:81:ca:b6:83: 23:b5:1b:a2:56:57:c4:2e:4c:3e:29:7c:a5:ab:21: 35:49:d3:8e:f6:a6:9d:b4:d9:28:e2:9c:1d:65:40: 1f:03:7d:42:c4:d5:7c:38:da:f1:17:98:69:58:3e: c5:ef:28:6a:68:df:68:86:fc:0f:4a:d1:44:f5:07: 95:9d:f5:84:5b:d0:30:7f:82:90:bd:71:63:b3:1d: 95:b0:89:b2:12:c2:bb:0f:0d:eb:8d:e0:81:e6:85: a8:1d:ce:fb:ab:71:e7:76:55:0b:22:8e:01:07:4a: 19:43:45:50:24:4c:8a:41:72:25:5c:b7:cf:00:e5: 28:e6:23:a2:6c:00:e8:f8:9d:48:e2:f2:e0:39:25: 26:73:ae:d2:84:06:d4:cb:83:5e:6d:e2:e8:bc:31: 52:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A1:F3:1E:61:95:2A:A7:E5:15:61:00:79:14:47:07:28:D2:B7:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de0d5a7-6360-3ed2-9452-c0cd4b480559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a6:a0:33:8c:8d:11:42:ab:df:58:3c:66:16:5b:f7:1b:e6: af:a2:66:88:d9:3c:1b:70:de:0a:ad:69:d4:ef:57:49:96:1b: 34:2a:6b:a1:6b:f3:8b:96:69:20:5d:1c:e1:df:62:60:77:57: a2:8d:1b:64:09:56:ae:c1:33:60:e7:7a:10:51:d2:be:b5:e6: 57:93:02:f5:4d:12:72:d2:a0:5a:18:32:1f:c7:49:8f:c2:77: 7d:5e:f6:70:83:94:1c:25:4a:d4:66:5d:d4:c8:ea:b7:03:30: 8c:14:01:94:ef:72:51:fa:9b:27:7d:98:a4:a2:75:2f:83:96: ae:ec:8f:e4:b3:13:00:e1:1b:69:83:a8:41:4a:a1:72:3e:bd: a1:74:9e:66:8c:f5:b8:4f:da:b2:2c:5c:01:87:24:72:94:5e: 39:2b:0c:dd:ad:d6:b7:45:be:b3:0b:a2:47:fa:8f:aa:e2:2c: 73:30:26:03:8f:88:58:70:ab:0e:aa:16:b3:19:3e:1e:71:cb: 53:29:33:09:4f:59:d0:7b:b9:7e:b1:a7:f8:e8:60:f4:e4:41: 14:29:dc:46:2a:9e:21:fd:21:40:07:82:39:6f:68:45:91:16: a7:3f:01:5d:8c:f3:fe:ec:44:53:d8:46:82:60:0d:53:9a:fb: 90:39:bd:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmXE+mRlifQWnTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzYzODU5NTctNDIwMS00ZmFkLThlZGItM2I0NTliZGUyNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhruNNPWztRt+jzjdGsQMRjVc4WGq2AaLZRso TENRN97C4vF+dRVdphNes7eUgjIwiUAlRy+arnG3WwPLWyG2ILq1wIOuj+cLuxpM 2suTyKYMR3MVG6xqXiWLN6BjRUlAhGe6w4HKtoMjtRuiVlfELkw+KXylqyE1SdOO 9qadtNko4pwdZUAfA31CxNV8ONrxF5hpWD7F7yhqaN9ohvwPStFE9QeVnfWEW9Aw f4KQvXFjsx2VsImyEsK7Dw3rjeCB5oWoHc77q3HndlULIo4BB0oZQ0VQJEyKQXIl XLfPAOUo5iOibADo+J1I4vLgOSUmc67ShAbUy4NebeLovDFSQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGh8x5hlSqn5RVhAHkURwco0renMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRlMGQ1YTctNjM2MC0z ZWQyLTk0NTItYzBjZDRiNDgwNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2moDOMjRFCq99YPGYWW/cb5q+iZojZPBtw3gqtadTvV0mWGzQqa6Fr 84uWaSBdHOHfYmB3V6KNG2QJVq7BM2DnehBR0r615leTAvVNEnLSoFoYMh/HSY/C d31e9nCDlBwlStRmXdTI6rcDMIwUAZTvclH6myd9mKSidS+Dlq7sj+SzEwDhG2mD qEFKoXI+vaF0nmaM9bhP2rIsXAGHJHKUXjkrDN2t1rdFvrMLokf6j6riLHMwJgOP iFhwqw6qFrMZPh5xy1MpMwlPWdB7uX6xp/joYPTkQRQp3EYqniH9IUAHgjlvaEWR Fqc/AV2M8/7sRFPYRoJgDVOa+5A5vfw= -----END CERTIFICATE-----Generated at Sat Sep 5 03:28:00 2026 by rpki-client