$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa File: 84950b3a-15d7-3b08-9186-13789c4594b0.roa (raw, json) Hash identifier: O7qgbsNrlBlsa0+Ff8ryyaJEgQEkJlVecqKNAXCAIcw= Subject key identifier: 3B:9E:40:91:00:27:E2:4F:3D:34:68:55:71:62:87:02:4B:91:04:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE7BCAF8BA1375BD365880480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 35994 IP address blocks: 23.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:af:8b:a1:37:5b:d3:65:88:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=fb306d92-434a-40d9-8017-01f5e9e51e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:35:9b:52:15:aa:e7:2f:b8:d8:95:f4:e5: 36:e2:1d:cf:e4:01:8b:2a:c4:b5:82:3d:f9:f3:f8: b3:70:94:cc:7d:e2:ba:47:05:c8:4a:00:55:36:6d: 30:5d:de:93:62:41:32:1b:1c:22:80:87:72:aa:40: 20:fb:96:29:89:14:87:6f:56:87:3e:cb:95:64:e9: 6a:82:fd:aa:b9:4a:b2:78:4e:c9:c1:03:f9:4e:87: 2b:3a:9e:11:bc:fb:07:fa:ce:37:c7:62:16:02:aa: 21:5b:a9:a4:54:09:3c:92:8f:86:f2:27:38:68:89: f2:17:1e:29:9d:e7:97:49:03:0e:87:a9:44:e7:49: 93:b8:34:a9:96:1d:ea:e9:df:f5:49:13:44:8b:8d: 62:c8:7b:6f:30:18:05:13:43:95:9b:ad:50:b6:8d: 65:55:b3:7c:13:71:dd:10:2d:f8:6e:48:c6:71:f3: 62:92:43:f1:14:d9:dc:2e:5e:03:8c:74:15:a3:87: 21:77:8a:b5:71:f7:43:8f:0e:97:5c:0f:91:d9:1a: bf:5c:ef:f6:b3:34:9e:ab:17:4d:76:da:89:6e:af: 62:f1:43:c3:53:0e:36:fb:1b:71:1d:8e:98:5c:1e: a4:42:c7:5c:ce:ac:76:2e:29:9d:05:d5:a7:20:e1: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9E:40:91:00:27:E2:4F:3D:34:68:55:71:62:87:02:4B:91:04:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6f:7c:03:75:9a:05:fc:94:8b:13:59:ab:fc:bd:bc:e1:a1: f4:f8:a1:6a:93:4f:c6:4c:4a:13:26:1f:91:97:fc:fd:fa:b6: da:8c:c4:cb:4d:1b:ed:0b:29:9a:85:5a:e6:ec:e7:10:fc:a8: 6a:6f:5f:a2:9a:dc:2e:5c:5e:1c:14:b9:5e:8d:78:60:0f:5d: 59:d4:fa:9a:30:9d:36:e5:76:30:34:ae:26:69:70:a7:76:cd: 15:28:e2:a9:90:81:aa:67:2a:86:58:4a:c0:f3:d6:e6:ba:cb: 1e:6d:47:f7:0d:16:8f:f4:44:c1:ab:00:4b:11:8f:09:4c:68: 12:30:3c:ef:fc:a7:dc:c6:94:ff:d9:0b:6d:52:ca:12:fd:aa: e9:11:d4:99:ee:8d:00:47:36:fa:a6:56:fe:f9:f9:0a:0f:77: 14:37:77:c7:41:db:62:de:6d:4d:9c:4b:95:2a:42:5c:9f:c5: 2e:29:ed:db:bc:d4:b6:f6:fa:19:7f:9c:8c:a6:8b:59:9f:d9: af:ab:cf:cd:5c:9d:ac:e6:80:22:a1:4f:1f:8d:16:b8:19:42: 8e:73:f8:da:f4:e8:52:61:8c:6a:26:4d:0d:bd:b7:c9:10:42: d9:75:70:01:f8:ef:61:6f:f9:0c:92:b2:72:43:33:d2:17:af: eb:7b:b5:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvK+LoTdb02WIBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZmIzMDZkOTItNDM0YS00MGQ5LTgwMTctMDFmNWU5ZTUxZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoss1m1IVqucvuNiV9OU24h3P5AGLKsS1gj35 8/izcJTMfeK6RwXISgBVNm0wXd6TYkEyGxwigIdyqkAg+5YpiRSHb1aHPsuVZOlq gv2quUqyeE7JwQP5TocrOp4RvPsH+s43x2IWAqohW6mkVAk8ko+G8ic4aInyFx4p neeXSQMOh6lE50mTuDSplh3q6d/1SRNEi41iyHtvMBgFE0OVm61Qto1lVbN8E3Hd EC34bkjGcfNikkPxFNncLl4DjHQVo4chd4q1cfdDjw6XXA+R2Rq/XO/2szSeqxdN dtqJbq9i8UPDUw42+xtxHY6YXB6kQsdczqx2LimdBdWnIOHU9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDueQJEAJ+JPPTRoVXFihwJLkQTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ5NTBiM2EtMTVkNy0z YjA4LTkxODYtMTM3ODljNDU5NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1vfAN1mgX8lIsTWav8vbzhofT4oWqTT8ZMShMmH5GX/P36ttqMxMtN G+0LKZqFWubs5xD8qGpvX6Ka3C5cXhwUuV6NeGAPXVnU+pownTbldjA0riZpcKd2 zRUo4qmQgapnKoZYSsDz1ua6yx5tR/cNFo/0RMGrAEsRjwlMaBIwPO/8p9zGlP/Z C21SyhL9qukR1JnujQBHNvqmVv75+QoPdxQ3d8dB22LebU2cS5UqQlyfxS4p7du8 1Lb2+hl/nIymi1mf2a+rz81cnazmgCKhTx+NFrgZQo5z+Nr06FJhjGomTQ29t8kQ Qtl1cAH472Fv+QySsnJDM9IXr+t7taA= -----END CERTIFICATE-----Generated at Sat Sep 5 02:14:30 2026 by rpki-client