$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa File: 571e1e21-5bb7-32bb-9449-889782fa7daf.roa (raw, json) Hash identifier: x8F/8GIrp+3EVichYPrqTLqbk4o6jnsLZ4zPtBOl3rg= Subject key identifier: 52:24:5B:F5:9D:F9:35:72:AD:4F:D8:7B:27:A3:90:66:DF:DC:4E:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA798FF825C4CF48B5E80CB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.212.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:ff:82:5c:4c:f4:8b:5e:80:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4c1bf17b-12f4-483d-ad31-e71cebed4173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:a1:53:87:05:ad:f8:e8:df:71:5c:68:f0: cd:83:74:0c:5e:03:63:0e:a3:08:d0:e4:2e:29:9c: dd:02:c7:92:ac:08:03:ef:0f:bf:35:2e:ff:6c:e0: 26:29:20:d5:3d:d1:6a:61:8f:7b:e9:89:2e:9a:78: f5:5f:6b:85:05:58:c0:ec:a7:8e:8d:86:f7:68:55: 98:2a:5a:15:fe:68:64:6c:ce:d7:ca:17:33:b1:a2: b9:fc:a1:ab:70:4a:06:58:29:33:e5:cd:b8:d0:27: 91:96:52:34:48:47:4a:c5:6d:38:66:8f:35:cd:68: 36:ad:4d:94:ab:2f:34:5c:63:f4:5e:f1:fb:ed:ab: 2a:8f:8b:af:41:8f:38:57:0d:c1:64:67:27:c3:ba: 57:71:c4:29:a9:1d:d0:b6:c5:84:10:a9:4d:0d:6d: ea:fc:9c:48:55:88:de:b1:67:01:8e:c5:af:b9:a9: a3:ed:97:e5:68:11:73:b0:da:99:fb:66:da:01:8b: 7e:57:6b:f4:6c:60:81:3e:e6:80:15:37:83:75:a2: bc:17:4a:d4:49:ab:f4:da:38:e1:fa:a1:1c:3d:6a: 2d:71:9f:3b:26:6f:e0:92:4e:81:68:85:50:26:8f: f4:9a:9b:ba:34:9f:80:b2:0b:03:c7:80:19:54:7e: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:24:5B:F5:9D:F9:35:72:AD:4F:D8:7B:27:A3:90:66:DF:DC:4E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:91:36:90:d6:9b:e5:93:14:ad:00:f9:b3:cc:11:3d:11:09: d7:ea:a0:b0:a5:5b:bf:fb:a6:97:eb:9b:d9:1c:8f:b0:01:09: 28:e2:45:f4:e2:63:c4:49:fe:85:20:e9:0d:5b:c3:83:c9:77: e8:29:85:88:cc:99:e7:df:67:73:33:50:ea:36:37:41:25:ee: 8c:96:9a:b8:fa:f9:07:3b:6d:12:f2:57:9c:e1:41:d9:11:a7: ba:42:36:a1:ec:50:43:96:60:43:4d:76:a1:ee:95:85:2f:06: 18:a2:8e:f4:33:9d:29:98:b9:75:77:41:c5:ea:5c:e7:cf:94: f8:6c:56:42:10:c4:46:a8:27:6d:fb:ec:1f:80:a4:ac:96:ab: fc:25:e2:7a:66:78:f9:77:be:c2:65:ab:74:b9:28:04:ef:c0: bc:95:e2:f9:13:2f:1a:51:1c:95:09:e0:e6:5d:0f:b7:71:20: 42:48:26:10:7f:46:e2:8f:c4:4f:70:89:fb:2b:04:a4:3b:b2: 3c:78:83:a6:6b:90:e5:5c:ac:8c:01:f9:6b:7b:e4:87:36:d2: b1:4f:14:76:80:8a:59:f2:c1:32:ff:16:41:f3:30:81:26:df: 0b:04:69:fa:03:a5:78:40:4e:9a:b0:c6:4d:13:3f:b4:ce:8e: b6:d0:87:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmP+CXEz0i16Ay4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGMxYmYxN2ItMTJmNC00ODNkLWFkMzEtZTcxY2ViZWQ0MTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCuhU4cFrfjo33FcaPDNg3QMXgNjDqMI0OQu KZzdAseSrAgD7w+/NS7/bOAmKSDVPdFqYY976Ykumnj1X2uFBVjA7KeOjYb3aFWY KloV/mhkbM7XyhczsaK5/KGrcEoGWCkz5c240CeRllI0SEdKxW04Zo81zWg2rU2U qy80XGP0XvH77asqj4uvQY84Vw3BZGcnw7pXccQpqR3QtsWEEKlNDW3q/JxIVYje sWcBjsWvuamj7ZflaBFzsNqZ+2baAYt+V2v0bGCBPuaAFTeDdaK8F0rUSav02jjh +qEcPWotcZ87Jm/gkk6BaIVQJo/0mpu6NJ+AsgsDx4AZVH7a5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIkW/Wd+TVyrU/YeyejkGbf3E4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTcxZTFlMjEtNWJiNy0z MmJiLTk0NDktODg5NzgyZmE3ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFORNpDWm+WTFK0A+bPMET0RCdfqoLClW7/7ppfrm9kcj7ABCSjiRfTi Y8RJ/oUg6Q1bw4PJd+gphYjMmeffZ3MzUOo2N0El7oyWmrj6+Qc7bRLyV5zhQdkR p7pCNqHsUEOWYENNdqHulYUvBhiijvQznSmYuXV3QcXqXOfPlPhsVkIQxEaoJ237 7B+ApKyWq/wl4npmePl3vsJlq3S5KATvwLyV4vkTLxpRHJUJ4OZdD7dxIEJIJhB/ RuKPxE9wifsrBKQ7sjx4g6ZrkOVcrIwB+Wt75Ic20rFPFHaAilnywTL/FkHzMIEm 3wsEafoDpXhATpqwxk0TP7TOjrbQhwA= -----END CERTIFICATE-----Generated at Sat Sep 5 02:49:17 2026 by rpki-client