$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65e4a7ae-5f7d-39e1-b7da-ab752c4769d9.roa File: 65e4a7ae-5f7d-39e1-b7da-ab752c4769d9.roa (raw, json) Hash identifier: kc+sHqLVAVXAiM3EwDfs7NbUh64iYghuMQnxk6duczc= Subject key identifier: 2A:90:9F:92:C7:B1:E2:1E:71:3B:E6:3D:02:06:C4:42:97:9B:F0:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED9C763D01CE48DF7E5A24D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65e4a7ae-5f7d-39e1-b7da-ab752c4769d9.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 16625 IP address blocks: 23.217.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:63:d0:1c:e4:8d:f7:e5:a2:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=84c137c6-fa32-4482-b180-23fb97d73781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:e7:d8:94:9e:16:34:b1:a4:20:0b:ec:88: 43:24:ec:9e:8d:58:c7:40:d8:e3:47:0e:5e:d4:5f: 8f:f2:1f:b1:06:66:e7:42:80:4c:0c:c2:27:f6:21: 0e:61:5e:05:77:46:2a:66:f9:53:63:a2:d0:4e:95: 9d:19:83:f1:66:68:83:ce:0f:72:3c:9a:9d:c7:25: bd:94:26:c1:6b:30:9e:7a:09:37:c2:a9:8f:2b:72: 24:f5:4c:7c:13:a9:b2:34:b0:9c:e5:e5:4d:ef:1e: 38:53:f7:ed:be:da:00:2e:ae:66:1c:73:20:bb:00: 3c:e6:99:10:30:b7:45:65:e1:7d:bc:14:f1:e5:4c: 4a:da:b2:b0:50:54:8d:ab:67:16:30:85:26:a6:b4: 5b:03:e3:1a:e0:e3:b8:fd:be:64:38:0a:75:2d:0b: 25:3f:17:49:ad:9a:58:a1:44:31:d2:64:2b:b4:19: 9f:1e:f0:88:66:2a:9e:af:36:6a:b3:a3:74:91:0c: 6c:08:5a:da:89:b1:6d:ec:4e:a2:5e:ad:6d:54:9b: d0:42:32:b2:e4:3b:a9:94:be:ad:cb:ab:68:39:b0: 89:46:09:9e:bf:0f:94:24:f6:21:5e:66:49:17:5d: c4:f1:68:12:10:c8:15:d1:d0:c1:02:76:87:88:43: 59:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:90:9F:92:C7:B1:E2:1E:71:3B:E6:3D:02:06:C4:42:97:9B:F0:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65e4a7ae-5f7d-39e1-b7da-ab752c4769d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a1:e1:02:f6:24:17:62:85:11:4c:49:34:1f:3b:97:1c:f2: ae:d4:95:37:09:bf:b5:15:c1:fd:c1:98:46:ba:8f:79:11:b4: 2f:80:94:32:63:9a:7d:ad:33:1d:0c:70:55:15:c3:fc:c1:21: f2:32:95:33:42:ba:79:5c:8d:d8:e6:9b:ea:36:07:8d:70:49: e2:f9:a2:7d:01:00:1b:08:29:32:5f:ce:d3:d0:7d:e3:1f:06: b7:33:de:ff:41:6e:89:44:c5:24:70:4e:a8:c1:5f:1f:05:e8: 00:13:a2:82:6e:b3:69:dd:63:27:82:32:09:ca:a9:fb:66:1f: 6e:d6:35:d1:a0:18:f8:7e:da:55:85:61:2a:d5:29:c7:fa:b6: eb:40:68:72:7b:be:c0:18:3a:bd:81:97:d3:3b:1c:06:79:3a: d5:4d:6d:9d:61:99:0a:ef:b6:c5:70:10:03:95:42:1f:00:18: 1e:d1:24:a4:e2:47:03:ff:c1:a4:80:3e:16:0b:b2:e1:bf:27: d0:49:96:2b:37:bb:8b:52:47:78:a4:2e:9a:d5:0c:67:18:9c: 19:a0:68:45:0c:cf:4b:b6:bb:db:de:d4:85:6c:ca:b3:82:c1: 30:74:ee:1a:9e:79:88:1b:85:8a:9b:bd:e6:3b:e9:7d:6b:9f: 63:1e:66:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2PQHOSN9+WiTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ODRjMTM3YzYtZmEzMi00NDgyLWIxODAtMjNmYjk3ZDczNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FXn2JSeFjSxpCAL7IhDJOyejVjHQNjjRw5e 1F+P8h+xBmbnQoBMDMIn9iEOYV4Fd0YqZvlTY6LQTpWdGYPxZmiDzg9yPJqdxyW9 lCbBazCeegk3wqmPK3Ik9Ux8E6myNLCc5eVN7x44U/ftvtoALq5mHHMguwA85pkQ MLdFZeF9vBTx5UxK2rKwUFSNq2cWMIUmprRbA+Ma4OO4/b5kOAp1LQslPxdJrZpY oUQx0mQrtBmfHvCIZiqerzZqs6N0kQxsCFraibFt7E6iXq1tVJvQQjKy5DuplL6t y6toObCJRgmevw+UJPYhXmZJF13E8WgSEMgV0dDBAnaHiENZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqQn5LHseIecTvmPQIGxEKXm/DfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVlNGE3YWUtNWY3ZC0z OWUxLWI3ZGEtYWI3NTJjNDc2OWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKh4QL2JBdihRFMSTQfO5cc8q7UlTcJv7UVwf3BmEa6j3kRtC+AlDJj mn2tMx0McFUVw/zBIfIylTNCunlcjdjmm+o2B41wSeL5on0BABsIKTJfztPQfeMf Brcz3v9BbolExSRwTqjBXx8F6AATooJus2ndYyeCMgnKqftmH27WNdGgGPh+2lWF YSrVKcf6tutAaHJ7vsAYOr2Bl9M7HAZ5OtVNbZ1hmQrvtsVwEAOVQh8AGB7RJKTi RwP/waSAPhYLsuG/J9BJlis3u4tSR3ikLprVDGcYnBmgaEUMz0u2u9ve1IVsyrOC wTB07hqeeYgbhYqbveY76X1rn2MeZow= -----END CERTIFICATE-----Generated at Sat Sep 5 01:24:33 2026 by rpki-client