$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66587dfe-a159-348d-be4a-3b8e7a89a9da.roa File: 66587dfe-a159-348d-be4a-3b8e7a89a9da.roa (raw, json) Hash identifier: kxMDh5ZR/U3ojnXF1mi9fWirOkdtJtT/+PR9/EkPgkw= Subject key identifier: 52:BC:5B:03:ED:8A:1F:4A:11:2F:C6:FF:0C:AB:CE:BD:7F:1D:8F:C1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7951A6B84B2F01FE6D83F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66587dfe-a159-348d-be4a-3b8e7a89a9da.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.211.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:1a:6b:84:b2:f0:1f:e6:d8:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8289d04b-ed91-44b7-bcf0-6c1b35c49cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:dc:1a:57:04:a5:ad:3d:45:bf:4a:23:7f: 65:0a:e8:78:d6:e3:22:b8:ec:b3:77:04:2a:af:1f: 2f:08:e6:b7:46:6d:9d:a5:41:9a:e9:09:9f:9f:31: 99:79:bc:b9:e3:2b:77:ef:a7:e3:17:7c:23:e2:54: 75:79:d6:78:2a:92:23:fa:61:79:ef:ec:0c:49:f7: b4:59:b0:f1:f8:00:de:9e:89:32:99:bb:3b:e3:af: eb:a7:ef:cb:6f:d9:a4:f7:07:6c:52:bc:e3:54:8e: 08:7b:25:cf:a4:bf:75:66:e7:6b:30:84:09:24:05: 32:eb:f5:8e:07:2d:07:2d:95:42:3f:04:e9:35:4d: aa:ab:ef:48:4c:1a:84:cb:06:db:e7:5f:dd:95:c2: 3c:d0:9c:34:e2:db:dd:7b:78:79:74:b2:eb:b1:f0: 31:55:79:c7:52:c8:70:da:02:f8:d1:ab:38:55:20: a2:ec:17:35:75:ac:6b:1b:c0:f7:21:ed:ad:95:de: d7:77:82:ab:fd:31:b4:eb:89:bb:61:f1:a1:f6:dd: b8:a9:e4:63:d4:53:60:3e:e3:ff:6c:85:0d:d6:51: fe:3e:16:3a:a3:0e:c7:f9:20:1c:92:50:9c:ba:26: 15:e5:9c:d0:30:8e:ff:59:30:5d:dc:b6:17:0a:da: 97:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BC:5B:03:ED:8A:1F:4A:11:2F:C6:FF:0C:AB:CE:BD:7F:1D:8F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66587dfe-a159-348d-be4a-3b8e7a89a9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c1:04:aa:12:e8:f1:f2:40:e4:f4:f4:7c:f6:6e:ff:4b:fb: 68:14:4e:c3:13:fc:eb:70:61:66:10:c3:5c:a0:f3:f4:4c:0e: 4a:ff:53:77:dc:41:29:61:8c:1c:c5:f8:17:33:d1:23:1c:2e: b9:a0:c0:c6:d3:83:ef:c8:f0:f7:4f:4f:3c:53:9d:ba:ae:b0: 15:01:47:9a:e0:2a:15:5a:3b:7f:97:0c:7e:9b:b9:3f:fb:7a: 1a:37:30:d4:65:85:35:67:67:1c:f9:08:e6:7c:0d:72:52:b3: f1:15:07:73:bb:90:93:6a:81:1c:4a:ca:c3:d5:80:75:04:dd: 6c:90:7d:7c:b7:2b:06:f1:a8:36:c0:97:a2:4b:81:cc:da:f1: e3:dd:a3:8a:22:35:24:29:fe:0a:17:0e:a8:84:62:32:6a:cd: d5:4f:32:f6:2b:65:e6:4d:c1:16:40:66:1f:01:78:ef:1d:db: 8c:3e:62:01:99:25:29:de:e6:20:28:a7:1e:10:47:f7:6c:e4: 07:98:19:f3:9f:ec:0c:b2:ef:6a:26:4d:a2:29:e8:91:06:ad: 1f:43:3f:07:5c:1c:b7:30:91:3f:23:96:db:5a:51:aa:4b:c8: 10:6c:bd:e1:9b:20:d0:a3:8c:7e:4c:62:f6:c2:20:d1:cf:07: b5:6e:2f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlRprhLLwH+bYP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODI4OWQwNGItZWQ5MS00NGI3LWJjZjAtNmMxYjM1YzQ5Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAHcGlcEpa09Rb9KI39lCuh41uMiuOyzdwQq rx8vCOa3Rm2dpUGa6QmfnzGZeby54yt376fjF3wj4lR1edZ4KpIj+mF57+wMSfe0 WbDx+ADenokymbs746/rp+/Lb9mk9wdsUrzjVI4IeyXPpL91ZudrMIQJJAUy6/WO By0HLZVCPwTpNU2qq+9ITBqEywbb51/dlcI80Jw04tvde3h5dLLrsfAxVXnHUshw 2gL40as4VSCi7Bc1daxrG8D3Ie2tld7Xd4Kr/TG064m7YfGh9t24qeRj1FNgPuP/ bIUN1lH+PhY6ow7H+SAcklCcuiYV5ZzQMI7/WTBd3LYXCtqXnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK8WwPtih9KES/G/wyrzr1/HY/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjY1ODdkZmUtYTE1OS0z NDhkLWJlNGEtM2I4ZTdhODlhOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9P/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXBBKoS6PHyQOT09Hz2bv9L+2gUTsMT/OtwYWYQw1yg8/RMDkr/U3fc QSlhjBzF+Bcz0SMcLrmgwMbTg+/I8PdPTzxTnbqusBUBR5rgKhVaO3+XDH6buT/7 eho3MNRlhTVnZxz5COZ8DXJSs/EVB3O7kJNqgRxKysPVgHUE3WyQfXy3KwbxqDbA l6JLgcza8ePdo4oiNSQp/goXDqiEYjJqzdVPMvYrZeZNwRZAZh8BeO8d24w+YgGZ JSne5iAopx4QR/ds5AeYGfOf7Ayy72omTaIp6JEGrR9DPwdcHLcwkT8jlttaUapL yBBsveGbINCjjH5MYvbCINHPB7VuL1I= -----END CERTIFICATE-----Generated at Fri Sep 4 22:45:38 2026 by rpki-client