$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6ecbb0-7fa0-3ee7-a836-249e1a95a47b.roa File: 8d6ecbb0-7fa0-3ee7-a836-249e1a95a47b.roa (raw, json) Hash identifier: lshssBnRCZ3+GEAivYTWZbg21aFmhytK9r6+tSsex/g= Subject key identifier: 87:D9:B9:9C:37:30:D0:6E:D0:B0:A5:05:38:D1:C5:47:8F:A8:F7:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81AA703C7DA452EA07DA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6ecbb0-7fa0-3ee7-a836-249e1a95a47b.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.222.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:aa:70:3c:7d:a4:52:ea:07:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=689eae8f-db5c-4283-9447-a3088a66a259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:16:09:e8:5e:8f:2e:f0:16:c2:ed:7f:21: be:49:d0:05:52:2c:dc:c3:80:2f:de:75:04:52:67: 10:7e:75:35:b9:fb:00:fc:62:56:ce:62:78:6d:78: e7:1d:01:a0:98:01:03:80:f1:dc:08:24:bb:46:5f: 47:26:c6:2a:6c:df:79:6b:bc:1d:cf:46:6b:ae:e2: 27:08:bc:fe:27:6a:6e:cb:a0:4c:55:90:9d:0f:4c: d3:0b:3a:34:22:78:28:97:70:3f:76:b3:0b:b2:17: cc:18:f7:a4:bd:e7:05:4f:8a:b6:8e:92:27:db:72: 78:a8:2f:2e:7f:38:38:18:ad:62:fa:32:0d:93:1f: d5:6c:ef:b8:39:2a:a2:c3:b9:d8:74:c5:eb:bf:fb: c2:73:2f:19:76:0f:25:cd:ec:b4:90:8c:ba:ce:a8: 5d:b2:42:14:2e:17:d9:72:7c:7b:23:d5:e9:56:d0: af:93:fe:a1:2c:85:93:4a:e4:62:f8:9a:d4:c1:29: 58:03:e4:dc:bb:17:0b:ad:d9:a2:50:d8:8a:d6:23: ad:f3:c4:d7:d9:29:c0:1e:ed:4c:b9:dc:5d:df:bd: 94:40:df:3b:d2:f9:c8:0d:3a:a2:8a:8a:f5:6f:0e: 71:b4:02:3a:bd:15:06:66:46:cb:e1:2a:d5:86:09: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D9:B9:9C:37:30:D0:6E:D0:B0:A5:05:38:D1:C5:47:8F:A8:F7:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6ecbb0-7fa0-3ee7-a836-249e1a95a47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c0:65:c1:72:21:bf:d2:89:34:da:02:36:6f:7d:1a:9f:fe: c2:75:91:e3:d5:81:db:9b:2f:f8:a0:92:ca:75:54:ff:8f:63: 8f:ae:17:16:dd:96:a4:71:a2:67:f7:5a:77:81:cb:4c:7b:c7: 8d:5d:31:d0:3c:bb:09:33:ed:01:05:bc:6d:d2:57:32:8c:06: 4d:1a:95:bd:2b:18:ee:45:92:d2:df:33:90:e3:b4:d8:05:08: a2:a5:19:ed:f9:98:57:db:c7:e5:00:c3:31:06:dd:5e:70:a9: 07:d9:ed:04:81:81:1d:61:2f:37:df:36:5f:82:50:84:0b:6d: d8:5f:44:e9:bf:21:bc:01:50:5f:8b:49:fa:93:4b:ab:56:00: d5:90:04:7d:c5:cc:50:87:f1:6f:b2:68:db:26:5e:77:62:28: 02:55:34:22:c4:9c:d7:ba:fd:3f:c5:c1:32:4f:41:83:20:30: cd:68:f2:6a:d3:10:91:46:e3:70:41:95:2d:86:7b:1d:ea:ac: f6:c4:0d:dd:97:fc:4d:fc:e1:f8:e7:27:3e:4a:4e:2c:37:08: dd:4d:cd:91:c7:0a:99:be:05:f7:74:08:2f:6a:59:e8:bd:e7: e0:8a:d0:e4:8c:9e:99:36:fc:6b:f7:56:a7:b2:4b:f6:cb:69: c0:f5:0d:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugapwPH2kUuoH2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk Njg5ZWFlOGYtZGI1Yy00MjgzLTk0NDctYTMwODhhNjZhMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZwWCehejy7wFsLtfyG+SdAFUizcw4Av3nUE UmcQfnU1ufsA/GJWzmJ4bXjnHQGgmAEDgPHcCCS7Rl9HJsYqbN95a7wdz0ZrruIn CLz+J2puy6BMVZCdD0zTCzo0Ingol3A/drMLshfMGPekvecFT4q2jpIn23J4qC8u fzg4GK1i+jINkx/VbO+4OSqiw7nYdMXrv/vCcy8Zdg8lzey0kIy6zqhdskIULhfZ cnx7I9XpVtCvk/6hLIWTSuRi+JrUwSlYA+TcuxcLrdmiUNiK1iOt88TX2SnAHu1M udxd372UQN870vnIDTqiior1bw5xtAI6vRUGZkbL4SrVhgkeTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfZuZw3MNBu0LClBTjRxUePqPfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ2ZWNiYjAtN2ZhMC0z ZWU3LWE4MzYtMjQ5ZTFhOTVhNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3AZcFyIb/SiTTaAjZvfRqf/sJ1kePVgdubL/igksp1VP+PY4+uFxbd lqRxomf3WneBy0x7x41dMdA8uwkz7QEFvG3SVzKMBk0alb0rGO5FktLfM5DjtNgF CKKlGe35mFfbx+UAwzEG3V5wqQfZ7QSBgR1hLzffNl+CUIQLbdhfROm/IbwBUF+L SfqTS6tWANWQBH3FzFCH8W+yaNsmXndiKAJVNCLEnNe6/T/FwTJPQYMgMM1o8mrT EJFG43BBlS2Gex3qrPbEDd2X/E384fjnJz5KTiw3CN1NzZHHCpm+Bfd0CC9qWei9 5+CK0OSMnpk2/Gv3VqeyS/bLacD1Deo= -----END CERTIFICATE-----Generated at Sat Sep 5 02:08:53 2026 by rpki-client