$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70d142c4-6d93-3b92-a05e-2a901e17f4d6.roa File: 70d142c4-6d93-3b92-a05e-2a901e17f4d6.roa (raw, json) Hash identifier: TMKaCbU12vKl0IRt7z5IaydK1oNsxs2sBNm7MCpiLNw= Subject key identifier: 7B:9A:C4:D6:65:14:70:C5:4B:69:65:CE:FA:F2:C1:DC:5E:27:37:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EED520F587F7A047FFF344000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70d142c4-6d93-3b92-a05e-2a901e17f4d6.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 12222 IP address blocks: 23.79.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:0f:58:7f:7a:04:7f:ff:34:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=49f412e2-ca7a-4e68-9457-ba34fc7647d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:b4:e1:6b:0e:70:64:e1:fb:2f:ca:08:22: 78:25:f0:f3:69:ad:7e:d9:8a:d2:98:18:39:c3:15: a8:26:95:17:71:06:9b:dc:d7:af:76:dc:7b:e0:d9: e1:36:c0:12:9c:0c:23:f7:22:f7:49:a8:53:32:0d: 79:99:78:dc:cc:16:15:0d:11:24:be:0a:8b:c4:84: bf:bf:e6:31:ec:c1:5d:5c:b1:61:fe:00:ff:a1:29: 23:91:90:c0:50:3f:16:e8:75:43:48:d0:95:6b:1e: 05:88:f0:c2:e0:56:94:a2:8a:79:27:de:83:fc:34: b6:c2:dc:1d:5f:3e:33:f6:cd:80:cc:08:32:99:f4: 27:ea:fb:eb:f7:bb:d1:14:fa:69:2e:80:32:69:6c: cb:b8:77:c5:80:b6:91:02:c7:94:81:c4:f0:e5:c4: b5:a9:53:65:fc:99:31:79:9f:84:8d:fb:8d:b4:c9: 45:a6:56:3e:ee:cf:23:00:53:9e:a5:1d:0d:01:96: fd:27:17:ac:d3:d3:d0:0a:a0:dd:b4:19:ae:d1:69: dd:d9:5e:96:f5:bb:e7:66:aa:df:9a:14:87:77:21: ca:29:6b:e6:76:bf:fb:74:fe:07:ec:48:db:45:ec: 65:c6:ef:a3:4b:fd:b6:7a:24:06:d8:b8:4b:07:3f: 7b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9A:C4:D6:65:14:70:C5:4B:69:65:CE:FA:F2:C1:DC:5E:27:37:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70d142c4-6d93-3b92-a05e-2a901e17f4d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.79.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:66:b2:31:97:4a:45:08:8f:c1:bb:51:64:15:41:0c:f2:89: af:3f:81:b3:5a:2e:64:3d:61:45:c6:7a:f9:ba:47:95:b5:03: b2:d7:20:50:d1:ea:78:38:d6:9d:44:fa:cc:d7:9c:5b:33:b7: 13:54:9d:c7:ad:f6:09:6e:56:d3:6e:8a:6c:99:bc:f6:23:49: 23:78:27:bc:dc:cb:12:5c:16:12:2b:5b:56:d1:a4:ff:36:48: da:5d:91:c1:30:a1:05:6f:ff:75:64:55:86:41:54:a8:95:1c: 42:e7:c4:bf:d3:34:cf:60:19:3c:32:27:bd:c9:b0:66:13:4f: ef:d9:26:91:96:69:e1:17:bf:bd:54:34:aa:2f:e7:51:40:71: b0:d9:74:a4:5d:9c:64:8d:bf:22:37:39:5e:59:66:78:d6:cf: 51:bc:23:40:5a:8c:76:a3:14:0c:75:51:ba:6b:de:d5:65:88: ad:6b:d8:4d:18:1d:96:82:a8:8f:d4:bd:7a:65:92:a7:30:51: ce:3a:cc:df:ff:13:13:3b:6b:3a:85:e2:eb:75:04:ce:4e:dc: ca:c6:6a:5e:b6:fa:27:58:b5:ac:4f:af:f5:a5:8c:89:c9:db: 19:77:45:32:3a:62:bf:2a:32:67:56:a4:45:7b:d1:7c:c4:42: 6a:90:4a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUg9Yf3oEf/80QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NDlmNDEyZTItY2E3YS00ZTY4LTk0NTctYmEzNGZjNzY0N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDu04WsOcGTh+y/KCCJ4JfDzaa1+2YrSmBg5 wxWoJpUXcQab3Nevdtx74NnhNsASnAwj9yL3SahTMg15mXjczBYVDREkvgqLxIS/ v+Yx7MFdXLFh/gD/oSkjkZDAUD8W6HVDSNCVax4FiPDC4FaUoop5J96D/DS2wtwd Xz4z9s2AzAgymfQn6vvr97vRFPppLoAyaWzLuHfFgLaRAseUgcTw5cS1qVNl/Jkx eZ+EjfuNtMlFplY+7s8jAFOepR0NAZb9Jxes09PQCqDdtBmu0Wnd2V6W9bvnZqrf mhSHdyHKKWvmdr/7dP4H7EjbRexlxu+jS/22eiQG2LhLBz97pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuaxNZlFHDFS2llzvrywdxeJzfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzBkMTQyYzQtNmQ5My0z YjkyLWEwNWUtMmE5MDFlMTdmNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0/lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpmsjGXSkUIj8G7UWQVQQzyia8/gbNaLmQ9YUXGevm6R5W1A7LXIFDR 6ng41p1E+szXnFsztxNUncet9gluVtNuimyZvPYjSSN4J7zcyxJcFhIrW1bRpP82 SNpdkcEwoQVv/3VkVYZBVKiVHELnxL/TNM9gGTwyJ73JsGYTT+/ZJpGWaeEXv71U NKov51FAcbDZdKRdnGSNvyI3OV5ZZnjWz1G8I0BajHajFAx1Ubpr3tVliK1r2E0Y HZaCqI/UvXplkqcwUc46zN//ExM7azqF4ut1BM5O3MrGal62+idYtaxPr/WljInJ 2xl3RTI6Yr8qMmdWpEV70XzEQmqQSlA= -----END CERTIFICATE-----Generated at Fri Sep 4 22:46:00 2026 by rpki-client