$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59940b54-9c8c-3003-805b-22491174d702.roa File: 59940b54-9c8c-3003-805b-22491174d702.roa (raw, json) Hash identifier: 1eTTf0FrNpeIix5+sx6QTvuvY9dzikCcbkiD49Mnqps= Subject key identifier: 39:2B:96:01:1C:B4:53:A4:7A:A0:4F:4B:85:05:60:C3:F8:72:AD:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA5AA68664BA2C1114FC9A780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59940b54-9c8c-3003-805b-22491174d702.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 20940 IP address blocks: 23.11.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:68:66:4b:a2:c1:11:4f:c9:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=307b6a7b-af3b-49f8-9b0b-14032e1b29b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:3c:96:20:e7:09:80:6f:36:ea:01:15:d2: 0a:55:b5:70:7b:d8:7c:f6:e2:30:4b:7d:7a:c2:2f: ce:3a:fd:a4:80:c2:36:28:e6:21:26:98:e1:63:66: 8a:4b:af:90:d8:4e:b3:65:e1:be:89:2c:bf:a8:31: b8:33:37:57:3a:e2:d3:51:c6:49:37:99:c8:c9:a8: 86:3d:97:41:28:94:a5:53:84:e8:08:19:60:14:6d: 5a:69:29:20:b7:9d:36:f2:4d:66:cd:39:71:bf:dc: db:48:0d:4d:be:70:6f:a6:1e:c7:7e:c0:0b:bc:fd: a7:6d:cd:40:97:f3:f0:07:dc:12:ce:bf:d2:df:79: ea:a5:a8:03:f5:d9:20:45:fa:0b:ec:13:57:71:0d: a4:46:22:6f:5d:c1:19:3a:2a:c5:d1:23:e8:7e:bc: 3d:8e:58:cd:ea:ff:84:4b:40:a8:5d:6f:a5:28:f8: ff:9d:99:0a:b6:bd:3d:2b:0d:f8:e3:9e:83:a6:91: a6:c1:86:ec:2d:8b:28:da:6f:4d:a1:4e:c3:c2:77: 2c:87:2c:01:d9:85:08:2e:88:35:b5:1f:8e:88:88: 40:5e:14:a0:d6:aa:01:61:ba:d4:15:2a:59:c0:1a: 9c:f3:9e:44:63:22:21:32:49:06:22:a1:c9:ce:16: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2B:96:01:1C:B4:53:A4:7A:A0:4F:4B:85:05:60:C3:F8:72:AD:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59940b54-9c8c-3003-805b-22491174d702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:1f:29:b5:ac:ae:6e:fe:cb:b9:c8:74:85:fb:4f:1d:f2:7b: 68:ba:6d:26:84:2d:43:6b:e1:51:17:be:b6:70:43:fb:07:c0: d5:82:7f:1c:a7:d4:7f:a3:45:10:cc:02:75:2c:46:95:07:14: c4:d7:06:ba:c5:a4:e0:d2:50:a6:7e:77:4f:d2:41:c7:8d:98: 75:41:ed:5c:00:97:5c:c2:2e:a2:13:55:59:e4:51:14:f0:0b: bb:3a:bd:33:86:1e:dd:70:a0:ad:e3:2a:80:30:74:24:cd:82: 2c:0e:53:ee:1e:3f:07:2a:b2:a4:6b:bf:ab:78:d1:cd:7c:d8: 42:1f:52:59:0d:ed:cd:3b:31:f9:a0:45:44:61:11:a1:6d:23: e5:88:2a:bb:04:c0:dd:6a:c9:08:ae:e6:ef:ff:54:b9:df:a1: a5:30:f6:50:aa:0f:ed:fc:f6:7f:75:38:4c:54:18:88:c1:6b: e0:19:38:18:a6:88:35:7d:7a:36:7b:0a:cc:8a:6a:3e:12:87: e5:57:cc:88:02:48:33:ff:a1:ca:60:06:c2:e3:50:3e:76:54: f8:57:e7:f8:a3:3f:86:21:9a:7c:88:2c:60:51:8c:8f:ad:09: d8:3e:be:89:4b:05:2f:69:f5:a5:82:52:b6:73:68:62:b4:47: 59:0e:03:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmhmS6LBEU/Jp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk MzA3YjZhN2ItYWYzYi00OWY4LTliMGItMTQwMzJlMWIyOWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJI8liDnCYBvNuoBFdIKVbVwe9h89uIwS316 wi/OOv2kgMI2KOYhJpjhY2aKS6+Q2E6zZeG+iSy/qDG4MzdXOuLTUcZJN5nIyaiG PZdBKJSlU4ToCBlgFG1aaSkgt5028k1mzTlxv9zbSA1NvnBvph7HfsALvP2nbc1A l/PwB9wSzr/S33nqpagD9dkgRfoL7BNXcQ2kRiJvXcEZOirF0SPofrw9jljN6v+E S0CoXW+lKPj/nZkKtr09Kw34456DppGmwYbsLYso2m9NoU7DwncshywB2YUILog1 tR+OiIhAXhSg1qoBYbrUFSpZwBqc855EYyIhMkkGIqHJzhZrZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkrlgEctFOkeqBPS4UFYMP4cq2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTk5NDBiNTQtOWM4Yy0z MDAzLTgwNWItMjI0OTExNzRkNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwvJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4fKbWsrm7+y7nIdIX7Tx3ye2i6bSaELUNr4VEXvrZwQ/sHwNWCfxyn 1H+jRRDMAnUsRpUHFMTXBrrFpODSUKZ+d0/SQceNmHVB7VwAl1zCLqITVVnkURTw C7s6vTOGHt1woK3jKoAwdCTNgiwOU+4ePwcqsqRrv6t40c182EIfUlkN7c07Mfmg RURhEaFtI+WIKrsEwN1qyQiu5u//VLnfoaUw9lCqD+389n91OExUGIjBa+AZOBim iDV9ejZ7CsyKaj4Sh+VXzIgCSDP/ocpgBsLjUD52VPhX5/ijP4YhmnyILGBRjI+t Cdg+volLBS9p9aWCUrZzaGK0R1kOA/Q= -----END CERTIFICATE-----Generated at Sat Sep 5 03:29:26 2026 by rpki-client