$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8db7d463-7eca-3f82-b189-32710d26967c.roa File: 8db7d463-7eca-3f82-b189-32710d26967c.roa (raw, json) Hash identifier: y0BTAEU/7R9Hw/7k2ZKuR4ch7oQGHBUp0H+0jzvEgbc= Subject key identifier: BC:07:13:B0:BF:11:B8:EF:D1:53:F9:34:BE:95:DC:66:17:33:F1:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7983073273D6C838DDA64C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8db7d463-7eca-3f82-b189-32710d26967c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.208.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:30:73:27:3d:6c:83:8d:da:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=21aaa120-2691-4b48-89b3-f8042e13cda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:7a:b2:05:f1:4a:ef:5a:e3:7b:60:cf:5f: e0:10:19:20:a4:ab:91:a3:48:ae:52:75:84:e9:e9: 3a:d2:b8:85:10:a9:ec:c9:40:e5:b1:7b:61:9a:61: 5a:ff:0a:c8:41:83:1a:b0:1b:43:b3:f0:bf:c1:f3: 2f:61:a6:69:35:1b:eb:06:6c:18:d7:ea:25:4d:4f: 3b:4c:f9:d3:76:fa:b4:51:07:1e:14:18:a9:0d:00: b9:32:ad:a7:3f:fb:98:0b:4a:0d:59:e7:5c:e1:67: 96:6b:11:c5:13:6e:6f:c7:93:81:ad:d6:a8:13:e8: cf:74:56:63:9b:f5:e0:36:9f:ba:b1:d0:d8:03:3c: 3e:eb:ba:ca:d0:42:aa:32:d0:fa:32:20:1a:ff:be: d1:ed:bd:a7:a1:e8:7e:be:c7:c9:e4:c4:17:53:82: 80:84:03:a7:df:d3:18:af:be:c4:19:b6:f2:23:03: 47:69:b2:b7:38:1a:99:ee:43:50:ca:e2:6b:3a:ec: ec:5b:5f:ab:0c:d6:2f:1a:ac:09:45:41:ba:2d:d9: d7:cd:e9:e4:fe:a5:3e:e9:36:6f:bb:80:37:87:ce: 80:6d:91:da:b1:80:88:9e:92:4b:a8:a7:dd:01:87: dd:57:0c:2b:ac:cd:80:e1:68:a3:37:f1:f1:ae:fa: 05:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:07:13:B0:BF:11:B8:EF:D1:53:F9:34:BE:95:DC:66:17:33:F1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8db7d463-7eca-3f82-b189-32710d26967c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:30:9c:e1:d2:ab:9b:23:c3:08:c1:29:6b:ed:36:97:e4:31: ae:ba:f1:e6:d5:c5:b8:7c:9f:34:32:ac:ff:75:34:f9:67:8c: 6f:c4:94:3b:b6:e4:3a:1c:ea:8c:91:86:dc:72:c4:74:5b:22: 62:63:32:54:8a:89:45:ac:2f:c2:fa:b1:07:23:7b:e2:92:d4: fe:bc:38:df:83:3e:1d:2c:a3:66:22:8e:46:d2:59:37:71:86: 29:9c:96:1d:61:1c:61:61:dc:40:f8:76:bf:71:76:eb:31:70: 33:cd:4a:42:c8:13:1f:7a:b5:8e:3d:8f:76:8b:fa:56:24:68: 63:af:29:df:0e:bb:3a:0e:17:be:56:9c:0d:56:1c:bb:4c:11: 0f:f9:17:84:65:df:89:21:31:52:8c:3d:04:c7:e2:84:8b:4c: b7:2e:4b:06:7e:38:e5:e8:2d:eb:6f:15:f6:da:72:e6:53:72: 0c:05:c5:60:2b:09:e8:12:32:81:df:c8:7b:83:ae:80:15:c6: 8b:72:e5:0e:5a:3b:69:24:42:a1:3c:4a:90:6a:16:b5:0c:1d: 71:cb:a0:4f:29:c4:03:e8:05:38:f6:5d:90:a6:03:92:22:89: 9e:70:8d:22:73:04:ff:03:87:94:d4:e5:a0:ce:16:b9:ea:9b: 28:79:3f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmDBzJz1sg43aZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjFhYWExMjAtMjY5MS00YjQ4LTg5YjMtZjgwNDJlMTNjZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOl6sgXxSu9a43tgz1/gEBkgpKuRo0iuUnWE 6ek60riFEKnsyUDlsXthmmFa/wrIQYMasBtDs/C/wfMvYaZpNRvrBmwY1+olTU87 TPnTdvq0UQceFBipDQC5Mq2nP/uYC0oNWedc4WeWaxHFE25vx5OBrdaoE+jPdFZj m/XgNp+6sdDYAzw+67rK0EKqMtD6MiAa/77R7b2noeh+vsfJ5MQXU4KAhAOn39MY r77EGbbyIwNHabK3OBqZ7kNQyuJrOuzsW1+rDNYvGqwJRUG6LdnXzenk/qU+6TZv u4A3h86AbZHasYCInpJLqKfdAYfdVwwrrM2A4WijN/HxrvoFKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwHE7C/Ebjv0VP5NL6V3GYXM/GlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGRiN2Q0NjMtN2VjYS0z ZjgyLWIxODktMzI3MTBkMjY5NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMwnOHSq5sjwwjBKWvtNpfkMa668ebVxbh8nzQyrP91NPlnjG/ElDu2 5Doc6oyRhtxyxHRbImJjMlSKiUWsL8L6sQcje+KS1P68ON+DPh0so2YijkbSWTdx himclh1hHGFh3ED4dr9xdusxcDPNSkLIEx96tY49j3aL+lYkaGOvKd8OuzoOF75W nA1WHLtMEQ/5F4Rl34khMVKMPQTH4oSLTLcuSwZ+OOXoLetvFfbacuZTcgwFxWAr CegSMoHfyHuDroAVxoty5Q5aO2kkQqE8SpBqFrUMHXHLoE8pxAPoBTj2XZCmA5Ii iZ5wjSJzBP8Dh5TU5aDOFrnqmyh5P0I= -----END CERTIFICATE-----Generated at Fri Sep 4 22:46:48 2026 by rpki-client