$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e8e6db8-c6fb-3666-aa9a-6611eeee3aa6.roa File: 7e8e6db8-c6fb-3666-aa9a-6611eeee3aa6.roa (raw, json) Hash identifier: FPxq8tzpO4Yi4in6LwIRzhrpkuCQMgF2JyQLxgYpQj0= Subject key identifier: 91:A1:30:20:67:0C:80:02:AB:BE:A6:54:66:3F:0C:48:EF:C4:70:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7997B338BCEF7198A0DD040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e8e6db8-c6fb-3666-aa9a-6611eeee3aa6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.213.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:7b:33:8b:ce:f7:19:8a:0d:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=432fb28c-9b49-455f-bf5a-9abf58f85bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:e8:69:4a:d3:84:d3:ec:20:ab:59:39:5e: 89:67:fa:14:a4:6e:92:d1:35:00:44:2d:9b:48:91: f9:06:b6:40:8c:8b:6e:b8:81:98:cd:1c:da:4f:cb: f1:d2:35:7e:2a:fc:05:bd:46:80:2a:9d:b1:8d:f9: 5b:39:f6:b9:92:ff:a0:90:a3:38:6c:45:a4:76:ad: b2:4f:e6:c9:44:cc:a7:96:01:dc:47:ef:f2:49:5b: e4:ac:b8:56:f0:4e:de:46:df:d2:aa:1a:ec:0d:88: 4c:eb:04:ff:f3:5e:d0:41:d9:1c:47:fa:52:23:cf: de:5d:0a:4a:7a:54:51:30:ea:d1:39:d2:30:b6:c8: d7:ad:b6:35:03:4a:16:f2:ae:47:98:4a:48:a6:45: 6c:89:2a:6b:87:57:1e:de:dd:e6:96:92:7c:4d:4d: c3:c5:69:9f:ed:89:5a:33:5f:19:3b:98:77:2e:8e: 48:42:9f:33:64:c3:dd:93:38:b4:5e:18:c3:aa:41: fa:e9:3a:e0:91:fa:c6:98:cd:db:56:f2:7f:8c:c3: ca:04:c9:ac:00:8e:28:f6:c1:d9:0b:e9:25:40:57: 13:99:49:ce:60:44:dd:b9:73:c2:a0:9d:9a:db:ee: 3b:02:4c:4d:e5:e6:87:e3:32:23:86:2a:ed:a5:d2: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A1:30:20:67:0C:80:02:AB:BE:A6:54:66:3F:0C:48:EF:C4:70:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e8e6db8-c6fb-3666-aa9a-6611eeee3aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:96:b2:bf:ae:a2:dd:f4:24:cb:a3:87:20:1c:d0:1d:1e:10: 99:ac:ea:ab:e8:a1:cf:5b:cf:74:02:f0:d8:86:f2:34:a1:e1: 38:e0:a4:e5:08:61:0c:b0:98:4e:a3:8b:0c:42:46:56:ec:fd: 18:cd:3b:5b:33:6c:7e:64:53:a6:77:8f:59:73:dc:18:9b:8c: 60:da:19:f4:a0:fa:6c:76:fb:9b:85:ff:70:02:1a:ec:c2:e6: 7a:ca:db:99:b6:bc:81:46:32:b6:68:99:aa:f9:f5:f1:34:f2: 9a:23:70:04:fd:11:42:2e:08:85:6c:08:dc:1d:95:3b:f3:ac: a0:7f:51:c5:55:d6:56:47:ad:08:f0:44:fe:b1:52:ca:86:d3: 95:a3:15:24:dc:79:27:52:da:d5:6b:48:fb:36:17:06:ae:31: fe:30:a4:74:8b:82:1f:e3:c1:03:9a:3b:4b:a6:64:14:be:97: 0a:18:bd:26:a1:7f:e9:63:ba:d9:e5:e9:31:bc:e2:63:66:a7: 56:38:5b:b9:e8:d7:fe:ce:78:27:b8:a0:ae:f8:0c:5d:15:0c: 7d:ad:89:1c:63:b8:42:53:3a:16:a4:e6:92:4e:58:2e:78:b1: 71:ae:db:66:65:8a:31:1c:62:d8:34:b2:bf:7b:6e:c7:a5:65: 16:b8:03:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmXszi873GYoN0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDMyZmIyOGMtOWI0OS00NTVmLWJmNWEtOWFiZjU4Zjg1YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn67oaUrThNPsIKtZOV6JZ/oUpG6S0TUARC2b SJH5BrZAjItuuIGYzRzaT8vx0jV+KvwFvUaAKp2xjflbOfa5kv+gkKM4bEWkdq2y T+bJRMynlgHcR+/ySVvkrLhW8E7eRt/SqhrsDYhM6wT/817QQdkcR/pSI8/eXQpK elRRMOrROdIwtsjXrbY1A0oW8q5HmEpIpkVsiSprh1ce3t3mlpJ8TU3DxWmf7Yla M18ZO5h3Lo5IQp8zZMPdkzi0XhjDqkH66TrgkfrGmM3bVvJ/jMPKBMmsAI4o9sHZ C+klQFcTmUnOYETduXPCoJ2a2+47AkxN5eaH4zIjhirtpdLJWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGhMCBnDIACq76mVGY/DEjvxHBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2U4ZTZkYjgtYzZmYi0z NjY2LWFhOWEtNjYxMWVlZWUzYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOWsr+uot30JMujhyAc0B0eEJms6qvooc9bz3QC8NiG8jSh4TjgpOUI YQywmE6jiwxCRlbs/RjNO1szbH5kU6Z3j1lz3BibjGDaGfSg+mx2+5uF/3ACGuzC 5nrK25m2vIFGMrZomar59fE08pojcAT9EUIuCIVsCNwdlTvzrKB/UcVV1lZHrQjw RP6xUsqG05WjFSTceSdS2tVrSPs2FwauMf4wpHSLgh/jwQOaO0umZBS+lwoYvSah f+ljutnl6TG84mNmp1Y4W7no1/7OeCe4oK74DF0VDH2tiRxjuEJTOhak5pJOWC54 sXGu22ZlijEcYtg0sr97bselZRa4A8w= -----END CERTIFICATE-----Generated at Sat Sep 5 06:54:04 2026 by rpki-client