$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71784637-a87b-3976-9b10-b7625baa56e4.roa File: 71784637-a87b-3976-9b10-b7625baa56e4.roa (raw, json) Hash identifier: ES9gYkaTm8P0FDa4Y2A162yvybB+QtNov6m+RtVX6e0= Subject key identifier: 64:62:AC:1D:01:02:7E:77:5C:36:C3:2F:D8:7A:B9:F0:C3:A6:1D:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093D0302931E3105479B7F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71784637-a87b-3976-9b10-b7625baa56e4.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.3.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:03:02:93:1e:31:05:47:9b:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=25ab7ffe-155a-41c2-9930-7a24b6abd06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:ed:d8:df:fe:be:ba:50:76:15:b7:e5:5f: 23:97:13:29:59:50:1e:e9:28:19:06:25:3b:0f:37: ae:a5:24:86:da:8a:dc:d4:1d:b7:7f:7a:4e:0f:cf: c3:e3:96:d5:6b:db:b4:a3:b1:70:47:85:bf:ea:ed: 87:09:7d:95:e7:63:28:57:7a:a8:ef:28:bc:df:61: 58:a2:36:a1:03:82:6b:30:d9:f0:e4:cb:02:be:81: 7c:73:d2:ca:1b:68:4a:b7:f3:60:c3:0c:ec:cb:b2: a6:ea:42:18:45:0b:90:9d:1c:2e:c3:9a:55:3b:35: 48:60:96:d9:1b:98:e8:e7:35:d3:f0:fd:18:f8:20: 91:a9:45:c7:1c:b0:3a:ad:17:19:cc:22:01:3e:2c: c7:18:20:c8:5c:29:ff:0d:67:c8:b1:06:27:15:30: cb:97:d9:ef:78:51:63:40:fa:a1:ed:86:41:2c:c0: 6a:90:4f:39:aa:3a:29:43:df:9c:59:da:63:b2:47: 9e:06:9a:49:e2:dc:00:1b:26:ee:61:93:f4:77:89: a5:b9:55:6a:72:49:84:7a:81:3c:8e:ca:c3:c3:3d: 59:85:7f:15:55:45:c1:96:7e:31:1f:12:34:b1:ff: 2a:a1:39:d5:9a:23:b1:bb:4b:86:bf:90:31:47:6c: f8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:AC:1D:01:02:7E:77:5C:36:C3:2F:D8:7A:B9:F0:C3:A6:1D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71784637-a87b-3976-9b10-b7625baa56e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b2:c3:26:35:1b:ca:f2:8a:69:ac:41:26:20:88:cc:7b:0e: d4:8b:ba:5b:84:40:66:7d:fc:37:22:b8:c8:81:22:e9:7f:ff: 81:0e:87:18:e0:b5:50:7a:f1:b1:3b:55:aa:62:f2:b0:c0:1e: 20:81:87:5b:5d:8a:48:68:b8:88:8b:9b:a3:6a:f8:71:70:09: 98:af:c2:9e:d3:0b:32:26:d3:71:4f:76:9c:d9:c2:f8:66:5f: 17:e1:43:68:7b:be:3d:fd:57:0b:8b:9a:d7:3d:f3:e3:b6:ba: e1:0b:bc:b1:7a:ac:a3:92:90:df:ed:10:4e:24:92:80:c9:7f: 8d:50:54:e3:c7:68:bd:08:22:c9:a5:4a:98:2d:79:f0:fb:31: a2:07:f0:2a:f4:8c:42:8e:8b:bf:3f:67:f9:e3:ef:9d:4b:70: c3:67:1f:92:16:66:35:db:2c:2b:fc:39:fa:3a:de:26:91:c5: 16:2f:7b:8e:c4:89:6e:f2:ff:88:5a:84:d8:60:20:73:a3:90: af:c1:aa:a1:3e:c1:d0:f1:1d:f7:42:21:ed:44:ac:d6:e5:a0: d9:4a:b6:72:4f:c1:bb:a1:3d:28:03:8c:40:21:2c:25:27:f1: bc:d3:49:3d:bd:54:e1:af:a9:b6:f6:83:d4:02:96:ab:e3:9c: 03:53:7b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQMCkx4xBUebf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MjVhYjdmZmUtMTU1YS00MWMyLTk5MzAtN2EyNGI2YWJkMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxALt2N/+vrpQdhW35V8jlxMpWVAe6SgZBiU7 DzeupSSG2orc1B23f3pOD8/D45bVa9u0o7FwR4W/6u2HCX2V52MoV3qo7yi832FY ojahA4JrMNnw5MsCvoF8c9LKG2hKt/Ngwwzsy7Km6kIYRQuQnRwuw5pVOzVIYJbZ G5jo5zXT8P0Y+CCRqUXHHLA6rRcZzCIBPizHGCDIXCn/DWfIsQYnFTDLl9nveFFj QPqh7YZBLMBqkE85qjopQ9+cWdpjskeeBppJ4twAGybuYZP0d4mluVVqckmEeoE8 jsrDwz1ZhX8VVUXBln4xHxI0sf8qoTnVmiOxu0uGv5AxR2z4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRirB0BAn53XDbDL9h6ufDDph17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzE3ODQ2MzctYTg3Yi0z OTc2LTliMTAtYjc2MjViYWE1NmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqywyY1G8ryimmsQSYgiMx7DtSLuluEQGZ9/DciuMiBIul//4EOhxjg tVB68bE7Vapi8rDAHiCBh1tdikhouIiLm6Nq+HFwCZivwp7TCzIm03FPdpzZwvhm XxfhQ2h7vj39VwuLmtc98+O2uuELvLF6rKOSkN/tEE4kkoDJf41QVOPHaL0IIsml SpgtefD7MaIH8Cr0jEKOi78/Z/nj751LcMNnH5IWZjXbLCv8Ofo63iaRxRYve47E iW7y/4hahNhgIHOjkK/BqqE+wdDxHfdCIe1ErNbloNlKtnJPwbuhPSgDjEAhLCUn 8bzTST29VOGvqbb2g9QClqvjnANTe2o= -----END CERTIFICATE-----Generated at Fri Sep 4 23:02:55 2026 by rpki-client