$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e22d67f-f46f-349d-b08f-d11348d9f90e.roa File: 7e22d67f-f46f-349d-b08f-d11348d9f90e.roa (raw, json) Hash identifier: tDuKL8UCfeCjoijgmXWrZxtCYYhymk6fum5LLRcU6Zs= Subject key identifier: 87:2D:7E:56:C7:7B:90:59:90:16:2C:23:29:76:E6:A1:E8:4B:91:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA79B241E161618BCA144E4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e22d67f-f46f-349d-b08f-d11348d9f90e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.214.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:24:1e:16:16:18:bc:a1:44:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=68541b66-e80e-4b48-8d28-29b7d45854d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:4d:06:33:44:4a:ec:85:da:6d:73:e8:85: e3:72:1c:68:b3:ed:49:e4:d1:02:ec:6e:95:4f:ad: 32:00:30:fe:42:92:84:84:b8:4d:c8:2b:14:1c:ba: dc:85:71:0f:e6:49:f8:52:5d:39:77:34:d1:00:46: 1d:8e:51:3f:ed:64:34:9d:73:11:6c:ba:28:67:80: ef:ed:43:d2:00:7e:33:7c:bc:d2:1b:a4:30:2f:d0: 31:85:8a:02:28:d9:10:4c:93:d4:58:c6:fb:de:d2: df:40:d9:ec:ec:9f:4c:34:ba:48:01:37:cc:37:03: 8f:12:9d:7d:c6:2e:1a:5b:04:03:a4:16:02:de:a9: 3a:74:4b:1c:00:ee:ba:11:f8:a8:59:d3:3d:17:7c: 26:43:80:b8:41:84:70:6f:42:fc:fe:85:3c:50:f6: 8d:80:4d:a6:8d:cb:77:5c:8d:db:3f:d0:aa:3c:85: 13:08:b4:a5:f7:89:c2:16:5e:c7:cc:85:bd:85:5e: 78:dc:68:fa:c0:ca:7d:c6:63:da:1b:39:66:c4:17: b7:35:f5:98:a6:ad:16:08:ec:db:b6:ff:24:98:85: 9e:b3:1b:b8:e1:a9:09:dd:56:0e:a4:e6:fb:8a:54: f6:43:65:1f:e2:3b:7d:72:96:a9:90:55:89:66:33: 22:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2D:7E:56:C7:7B:90:59:90:16:2C:23:29:76:E6:A1:E8:4B:91:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e22d67f-f46f-349d-b08f-d11348d9f90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b3:05:8c:5d:9a:20:51:35:7e:1b:04:a4:2a:a7:28:ef:3b: 6b:7b:b8:8d:dc:bf:0b:61:c2:52:4b:71:6a:a6:13:d2:6f:88: 27:86:0f:2c:02:9b:f1:81:79:23:a1:1b:15:4c:6c:73:48:8c: 6c:b3:05:79:97:18:f6:52:ac:2b:b1:5e:5d:53:25:eb:bf:9d: df:e7:e0:d8:59:85:3d:ca:bc:5e:db:00:d3:75:8f:98:f8:44: cc:be:78:66:9a:50:2a:24:3f:f5:61:49:93:a2:8e:54:ec:d6: 70:6c:32:6d:ec:f8:09:fe:85:57:2d:1c:23:87:e2:3a:01:1b: 7a:04:de:af:cd:71:07:40:b2:a5:a3:3f:63:97:e2:55:8f:52: 1e:eb:7a:43:5d:fd:13:c0:9e:b1:15:5d:8f:dc:f5:50:43:a9: 25:8b:e5:cc:04:39:2d:d5:2a:bd:da:db:18:b1:b2:cf:11:c3: 56:c2:19:61:51:d3:c2:97:bd:31:2e:88:2d:3b:0d:3a:43:09: e4:a4:7d:9b:a8:cd:f5:cb:a8:a7:3e:8e:4e:7c:e1:f0:3d:c8: a7:08:0f:5e:3e:7f:31:4f:88:76:cd:6e:47:c9:b1:93:17:fb: 58:7f:03:53:dc:18:b8:45:cd:5a:d9:28:20:59:47:53:26:8a: 2a:ff:44:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmyQeFhYYvKFE5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Njg1NDFiNjYtZTgwZS00YjQ4LThkMjgtMjliN2Q0NTg1NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ5NBjNESuyF2m1z6IXjchxos+1J5NEC7G6V T60yADD+QpKEhLhNyCsUHLrchXEP5kn4Ul05dzTRAEYdjlE/7WQ0nXMRbLooZ4Dv 7UPSAH4zfLzSG6QwL9AxhYoCKNkQTJPUWMb73tLfQNns7J9MNLpIATfMNwOPEp19 xi4aWwQDpBYC3qk6dEscAO66EfioWdM9F3wmQ4C4QYRwb0L8/oU8UPaNgE2mjct3 XI3bP9CqPIUTCLSl94nCFl7HzIW9hV543Gj6wMp9xmPaGzlmxBe3NfWYpq0WCOzb tv8kmIWesxu44akJ3VYOpOb7ilT2Q2Uf4jt9cpapkFWJZjMiVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIctflbHe5BZkBYsIyl25qHoS5FgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2UyMmQ2N2YtZjQ2Zi0z NDlkLWIwOGYtZDExMzQ4ZDlmOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9YWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+zBYxdmiBRNX4bBKQqpyjvO2t7uI3cvwthwlJLcWqmE9JviCeGDywC m/GBeSOhGxVMbHNIjGyzBXmXGPZSrCuxXl1TJeu/nd/n4NhZhT3KvF7bANN1j5j4 RMy+eGaaUCokP/VhSZOijlTs1nBsMm3s+An+hVctHCOH4joBG3oE3q/NcQdAsqWj P2OX4lWPUh7rekNd/RPAnrEVXY/c9VBDqSWL5cwEOS3VKr3a2xixss8Rw1bCGWFR 08KXvTEuiC07DTpDCeSkfZuozfXLqKc+jk584fA9yKcID14+fzFPiHbNbkfJsZMX +1h/A1PcGLhFzVrZKCBZR1Mmiir/RJE= -----END CERTIFICATE-----Generated at Sat Sep 5 01:28:58 2026 by rpki-client