$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63fe821b-28ad-3171-95b7-153041792f33.roa File: 63fe821b-28ad-3171-95b7-153041792f33.roa (raw, json) Hash identifier: d9RZdx3/QMycieJpcU2MeTW0p1o0O/93Qh8IofeBJa0= Subject key identifier: 1B:56:A8:0A:F6:2B:1C:E8:A1:6B:DB:A1:34:31:2B:00:B2:37:12:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EB2B1EEA3392AB2BBD84C0D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63fe821b-28ad-3171-95b7-153041792f33.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 16625 IP address blocks: 23.212.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:ee:a3:39:2a:b2:bb:d8:4c:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=d701c888-2fe3-44f0-a87f-e827203a10c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:53:96:88:9d:d3:b3:24:97:9f:79:d2:23:92: 48:90:53:48:93:df:5a:85:7d:ab:fb:a4:0a:bb:dd: a1:e0:f9:15:92:61:a2:ef:a6:e8:d5:a5:84:2e:a2: ee:22:dd:a5:99:6a:6c:a6:e4:30:cc:9e:7e:a1:14: de:8c:1b:67:ae:a6:97:23:50:96:f1:41:b2:83:d8: aa:94:5a:39:80:a4:bc:35:cb:1f:d1:a8:57:ab:80: 04:9e:39:f6:5f:cb:76:4b:4c:d1:63:b4:32:18:1e: 47:01:eb:42:44:42:dd:3f:2a:83:0c:8a:bc:20:f6: d1:a7:62:38:b5:14:0c:79:b0:10:f7:a4:5c:0f:f7: 35:c5:fd:98:0c:97:39:dd:ab:a2:ac:89:ae:d0:5d: c8:30:55:20:62:0d:39:ac:ef:0a:02:fa:1a:00:79: 92:25:8d:24:39:b9:24:07:9d:f4:d2:4a:0a:cc:19: 18:76:5b:77:fe:3a:2e:50:ad:30:7d:24:35:77:fa: 24:03:0a:b0:08:24:6a:4c:eb:33:76:c6:56:00:7f: cf:72:30:65:c9:95:68:2c:e9:ac:89:13:c4:e7:b1: b4:9e:b3:4a:ea:ba:2d:f1:d8:cd:fe:94:8c:59:11: b0:a8:5e:49:08:20:d1:bc:bc:9e:e8:f4:ab:66:86: cc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:56:A8:0A:F6:2B:1C:E8:A1:6B:DB:A1:34:31:2B:00:B2:37:12:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63fe821b-28ad-3171-95b7-153041792f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:35:97:95:ef:4a:8b:f9:62:ae:d2:de:f5:9c:d0:12:37:04: 58:c4:0d:f8:5d:25:ad:8f:d5:9a:f8:04:e1:68:cd:07:97:da: 22:17:97:82:50:64:ad:c9:76:77:3d:c5:16:39:c4:64:7f:8f: af:e8:68:f0:ae:c5:3b:05:2c:4b:c6:44:34:ca:a1:cd:b4:75: ae:67:71:42:9c:57:95:cd:15:6e:7d:d3:23:b2:cf:34:ea:45: b4:5a:da:ea:ae:3a:60:43:3f:5f:df:89:22:06:a5:ad:32:11: 1c:b5:c2:ac:41:13:3f:c6:0c:7d:02:fe:9c:b2:41:8c:ca:58: f5:93:05:96:71:8a:3c:01:cd:df:1b:b5:a0:6b:46:84:71:7b: a2:49:f6:55:42:d5:73:7f:27:ff:88:1f:b0:31:4c:d4:bc:c8: 00:0e:e4:70:c1:10:5d:4f:44:60:18:ea:63:89:04:f1:6f:4d: 19:be:f0:08:63:82:7b:e4:d3:60:30:0c:e0:d4:12:15:ff:44: aa:8a:82:d5:91:98:b8:81:3e:ac:81:7f:d7:cf:45:52:65:00: f3:ab:e6:5a:ed:f4:ef:1c:a5:d6:01:a6:0b:2d:b3:79:eb:8d: fa:7c:ff:c8:ee:eb:85:dc:9d:00:8a:91:69:19:68:0c:b4:a0: 7a:f2:66:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yse6jOSqyu9hMDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ZDcwMWM4ODgtMmZlMy00NGYwLWE4N2YtZTgyNzIwM2ExMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFOWiJ3TsySXn3nSI5JIkFNIk99ahX2r+6QK u92h4PkVkmGi76bo1aWELqLuIt2lmWpspuQwzJ5+oRTejBtnrqaXI1CW8UGyg9iq lFo5gKS8Ncsf0ahXq4AEnjn2X8t2S0zRY7QyGB5HAetCRELdPyqDDIq8IPbRp2I4 tRQMebAQ96RcD/c1xf2YDJc53auirImu0F3IMFUgYg05rO8KAvoaAHmSJY0kObkk B5300koKzBkYdlt3/jouUK0wfSQ1d/okAwqwCCRqTOszdsZWAH/PcjBlyZVoLOms iRPE57G0nrNK6rot8djN/pSMWRGwqF5JCCDRvLye6PSrZobMawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtWqAr2KxzooWvboTQxKwCyNxK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjNmZTgyMWItMjhhZC0z MTcxLTk1YjctMTUzMDQxNzkyZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9ToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU1l5XvSov5Yq7S3vWc0BI3BFjEDfhdJa2P1Zr4BOFozQeX2iIXl4JQ ZK3Jdnc9xRY5xGR/j6/oaPCuxTsFLEvGRDTKoc20da5ncUKcV5XNFW590yOyzzTq RbRa2uquOmBDP1/fiSIGpa0yERy1wqxBEz/GDH0C/pyyQYzKWPWTBZZxijwBzd8b taBrRoRxe6JJ9lVC1XN/J/+IH7AxTNS8yAAO5HDBEF1PRGAY6mOJBPFvTRm+8Ahj gnvk02AwDODUEhX/RKqKgtWRmLiBPqyBf9fPRVJlAPOr5lrt9O8cpdYBpgsts3nr jfp8/8ju64XcnQCKkWkZaAy0oHryZso= -----END CERTIFICATE-----Generated at Sat Sep 5 04:05:23 2026 by rpki-client