$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa File: 7da2d404-3d2a-3f91-945a-890dfa73775b.roa (raw, json) Hash identifier: DALS0+ne6d3v7FSGWKa1zLbZdGyIqpyBoaBocU8Bss0= Subject key identifier: DA:7C:9B:A1:88:71:E4:5B:7F:97:85:A3:7B:42:57:2D:51:C7:22:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA79B17AEDAC0E3C9447EC120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.217.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:17:ae:da:c0:e3:c9:44:7e:c1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=62dc7fed-ef06-46bc-8653-e3ac96a8c07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b7:5e:80:e2:b3:2a:ab:9b:b3:37:b1:62:aa: a7:86:80:22:ca:7d:d1:04:89:e4:7f:af:33:19:0d: 13:ce:4d:96:9d:8e:e6:85:81:9c:b9:81:b8:6a:6a: ca:e6:10:32:58:bc:63:cc:73:29:b3:ac:39:5f:de: 9b:ba:bc:bc:a9:8d:1b:9d:78:d9:3f:45:17:8c:cf: e5:8f:cc:b1:ab:30:55:06:e9:09:10:06:68:3c:28: c3:9e:77:57:ba:6e:f7:2a:e6:3a:f7:97:d0:58:cc: d0:07:c2:e4:44:35:8b:a4:b2:ac:5d:2b:9d:09:3c: 8c:48:2c:3a:45:5f:30:0c:a9:ca:a0:95:8b:39:93: 31:88:e4:43:0c:f0:6f:d1:9a:8b:7a:b6:d5:b9:f0: fc:85:d0:55:f9:fb:f2:3b:bd:90:35:a6:e5:4c:88: 87:ce:16:fd:d1:a6:c7:eb:98:c1:ee:da:3c:5d:a7: 5f:91:84:65:8c:a0:9c:59:2d:89:fc:20:7a:53:45: 53:50:60:23:28:8d:86:a0:d6:de:75:0d:cc:7c:93: 97:5e:bb:51:b6:01:ea:76:23:a3:31:37:17:ae:8f: 8d:0d:dd:9c:c9:06:7d:5a:44:18:99:31:e9:0f:c6: cb:c3:bc:37:27:dc:a2:1a:76:bd:71:43:21:1d:e0: 8e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:7C:9B:A1:88:71:E4:5B:7F:97:85:A3:7B:42:57:2D:51:C7:22:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7da2d404-3d2a-3f91-945a-890dfa73775b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:71:1d:d7:3a:d7:c9:e2:ca:d5:bd:25:01:72:26:37:76:6e: 32:8d:93:e1:7e:31:b5:8c:01:cd:ff:9c:42:72:71:a7:22:2e: 41:b0:7e:5f:c8:fa:10:e8:0d:39:ed:8c:23:25:50:32:fa:a4: 81:82:c5:57:02:0f:9f:38:91:28:07:0f:09:cd:95:ef:a4:f8: 6a:b7:3a:11:c3:c2:5e:62:68:73:cf:98:8e:fb:e5:99:b7:c6: b6:28:f8:71:7d:db:97:4a:f1:c9:01:e7:ee:c8:56:58:24:f5: 86:88:40:85:05:54:7a:ca:6f:26:3c:79:29:2f:38:8e:1d:31: 22:7c:92:61:7e:2c:a3:2c:82:20:db:8d:44:c2:1f:4e:56:85: c9:83:b3:f1:5c:a1:ad:2b:48:f3:06:2e:5c:00:77:d9:0f:18: ba:af:30:ac:48:9d:a9:2b:4e:49:30:65:b3:e5:67:e5:20:ee: ba:c6:2f:6d:dc:59:03:0a:fb:8c:8f:da:e4:56:16:53:c1:0d: 89:79:a0:fa:bb:2d:f7:10:d6:81:a7:c8:15:3d:be:8e:65:62: 17:00:34:02:f1:01:9a:09:c4:73:b7:88:a3:d9:27:96:e3:01: 21:0b:bd:a4:c6:6e:5b:44:04:b9:2e:a1:24:82:28:d0:4e:61: 7a:ed:bc:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmxeu2sDjyUR+wSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjJkYzdmZWQtZWYwNi00NmJjLTg2NTMtZTNhYzk2YThjMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbdegOKzKqubszexYqqnhoAiyn3RBInkf68z GQ0Tzk2WnY7mhYGcuYG4amrK5hAyWLxjzHMps6w5X96bury8qY0bnXjZP0UXjM/l j8yxqzBVBukJEAZoPCjDnndXum73KuY695fQWMzQB8LkRDWLpLKsXSudCTyMSCw6 RV8wDKnKoJWLOZMxiORDDPBv0ZqLerbVufD8hdBV+fvyO72QNablTIiHzhb90abH 65jB7to8XadfkYRljKCcWS2J/CB6U0VTUGAjKI2GoNbedQ3MfJOXXrtRtgHqdiOj MTcXro+NDd2cyQZ9WkQYmTHpD8bLw7w3J9yiGna9cUMhHeCOXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNp8m6GIceRbf5eFo3tCVy1RxyI5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2RhMmQ0MDQtM2QyYS0z ZjkxLTk0NWEtODkwZGZhNzM3NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNxHdc618niytW9JQFyJjd2bjKNk+F+MbWMAc3/nEJycaciLkGwfl/I +hDoDTntjCMlUDL6pIGCxVcCD584kSgHDwnNle+k+Gq3OhHDwl5iaHPPmI775Zm3 xrYo+HF925dK8ckB5+7IVlgk9YaIQIUFVHrKbyY8eSkvOI4dMSJ8kmF+LKMsgiDb jUTCH05WhcmDs/Fcoa0rSPMGLlwAd9kPGLqvMKxInakrTkkwZbPlZ+Ug7rrGL23c WQMK+4yP2uRWFlPBDYl5oPq7LfcQ1oGnyBU9vo5lYhcANALxAZoJxHO3iKPZJ5bj ASELvaTGbltEBLkuoSSCKNBOYXrtvE0= -----END CERTIFICATE-----Generated at Fri Sep 4 22:45:24 2026 by rpki-client