$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b3c8670-7242-3511-9bb0-3647ae7e4332.roa File: 5b3c8670-7242-3511-9bb0-3647ae7e4332.roa (raw, json) Hash identifier: E9IJGj/ZJ2uTNaRKkOfEKxNGYSTXe3c6uJ/3VhhboMQ= Subject key identifier: 07:DF:9C:44:35:6A:73:F0:DB:36:D6:29:DB:0C:2C:68:75:D6:5B:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF87CDC17095E677231AE1F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b3c8670-7242-3511-9bb0-3647ae7e4332.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.67.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:dc:17:09:5e:67:72:31:ae:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=3a7eb1c7-afd7-4a4c-81fb-e3ad558cbca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a5:5b:59:69:05:47:a3:9c:32:75:4c:38:c3: c3:68:34:37:bf:d7:c8:e8:08:a7:c7:87:24:ac:29: 65:e4:7b:c7:cc:3f:b7:2e:26:40:7d:dd:31:f3:30: f8:38:bb:c7:1d:b0:55:52:67:10:e1:73:be:86:b4: f8:c4:79:27:71:eb:35:46:ca:3f:fb:7b:81:0f:1b: 86:0d:01:08:ba:6c:76:dc:d6:13:e8:9d:0b:46:2a: c7:e8:a1:7c:45:21:78:14:4b:6c:a6:f9:5c:95:c3: 98:13:99:6f:b4:70:19:fc:2f:73:f4:16:32:ac:02: a4:ea:81:a8:c8:25:ef:6b:bb:f4:a4:cb:3e:e4:ee: 8d:2f:48:09:66:b5:07:aa:02:b0:e7:47:1f:1c:be: e5:0e:35:2d:d2:22:9b:e1:e2:56:33:bc:d7:87:42: 4c:81:f5:57:69:d0:27:1c:53:60:c6:27:ec:1c:7b: f7:2c:8e:6f:e1:50:98:eb:d0:b9:d4:ff:a7:dd:9d: a2:7d:3c:98:a9:be:03:0a:ea:96:67:6a:01:4d:8a: a3:6b:f6:8a:2e:af:ee:6f:2f:5a:38:e8:b2:07:0d: f2:c5:87:ff:5a:c3:ec:95:b1:b2:2e:29:c2:a9:98: 56:a0:b7:7c:33:ca:ae:83:e7:c9:0e:aa:bf:6b:22: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DF:9C:44:35:6A:73:F0:DB:36:D6:29:DB:0C:2C:68:75:D6:5B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b3c8670-7242-3511-9bb0-3647ae7e4332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:34:fd:42:be:1c:e0:fd:06:03:f7:af:ca:dc:6f:00:ab:4b: cd:a2:48:2c:24:f0:9a:77:69:49:58:99:1a:fd:83:d1:3d:15: 08:c4:42:5f:f2:03:8f:27:b0:13:f3:96:a9:7e:97:6d:27:0c: b3:52:d4:9c:87:42:50:6f:02:5f:cf:7e:ea:c4:b9:fb:e5:e8: 6c:e8:a6:5e:b2:ea:19:75:1e:92:4a:f4:67:da:21:27:31:62: 69:e0:82:92:51:1b:38:37:02:ea:71:e7:7b:e4:4b:2c:49:d6: dd:32:63:d2:3d:0e:39:b8:d6:4e:4e:bd:3e:76:83:d3:ac:fc: fe:30:ed:ce:69:54:6d:d5:b7:ab:33:fd:56:14:da:f7:f0:22: 0f:ab:69:df:04:a8:57:16:a5:db:7a:fc:be:0a:2d:03:d6:ac: 42:46:34:bd:4a:30:7b:e0:60:1d:02:44:8b:45:3d:29:38:1d: 26:3c:e2:5f:bc:1a:06:b5:e3:8b:10:5b:b8:d5:60:10:a0:7c: 46:78:8e:2e:45:65:4f:4e:29:ae:9e:0d:7b:17:16:9f:87:e7: b2:22:05:36:cd:7f:68:f6:d2:53:42:aa:c6:64:c1:98:dd:20: 10:41:6f:1f:00:37:c6:86:3f:5e:51:4a:62:74:2b:c6:d1:0c: b1:15:7d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fNwXCV5ncjGuH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk M2E3ZWIxYzctYWZkNy00YTRjLTgxZmItZTNhZDU1OGNiY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaVbWWkFR6OcMnVMOMPDaDQ3v9fI6Ainx4ck rCll5HvHzD+3LiZAfd0x8zD4OLvHHbBVUmcQ4XO+hrT4xHknces1Rso/+3uBDxuG DQEIumx23NYT6J0LRirH6KF8RSF4FEtspvlclcOYE5lvtHAZ/C9z9BYyrAKk6oGo yCXva7v0pMs+5O6NL0gJZrUHqgKw50cfHL7lDjUt0iKb4eJWM7zXh0JMgfVXadAn HFNgxifsHHv3LI5v4VCY69C51P+n3Z2ifTyYqb4DCuqWZ2oBTYqja/aKLq/uby9a OOiyBw3yxYf/WsPslbGyLinCqZhWoLd8M8qug+fJDqq/ayLH7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAffnEQ1anPw2zbWKdsMLGh11luCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWIzYzg2NzAtNzI0Mi0z NTExLTliYjAtMzY0N2FlN2U0MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0OZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw0/UK+HOD9BgP3r8rcbwCrS82iSCwk8Jp3aUlYmRr9g9E9FQjEQl/y A48nsBPzlql+l20nDLNS1JyHQlBvAl/PfurEufvl6Gzopl6y6hl1HpJK9GfaIScx YmnggpJRGzg3Aupx53vkSyxJ1t0yY9I9Djm41k5OvT52g9Os/P4w7c5pVG3Vt6sz /VYU2vfwIg+rad8EqFcWpdt6/L4KLQPWrEJGNL1KMHvgYB0CRItFPSk4HSY84l+8 Gga144sQW7jVYBCgfEZ4ji5FZU9OKa6eDXsXFp+H57IiBTbNf2j20lNCqsZkwZjd IBBBbx8AN8aGP15RSmJ0K8bRDLEVffI= -----END CERTIFICATE-----Generated at Fri Sep 4 22:46:52 2026 by rpki-client