$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/951e92c4-60b2-3938-8b8e-2136c0cef151.roa File: 951e92c4-60b2-3938-8b8e-2136c0cef151.roa (raw, json) Hash identifier: IBgU2R/swbNXmfv1Y2lUFN8kb1K97XVm9i9df+Au9Kw= Subject key identifier: 1A:8F:1D:BB:C5:16:D1:60:2B:72:70:E6:1D:18:76:91:00:A7:27:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81ADEF3E9CE1A5CD8DABC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/951e92c4-60b2-3938-8b8e-2136c0cef151.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.220.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:ad:ef:3e:9c:e1:a5:cd:8d:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=c9f857dc-34d7-4985-bc57-0f13a7c3e6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bc:05:d8:cc:2e:1f:ed:dc:cf:e7:c2:b8:22: c9:ae:17:56:4e:2d:07:52:e9:11:8d:f1:ba:b0:02: 1d:3e:38:61:f5:1f:74:75:e7:16:37:ce:44:3a:d9: 01:99:61:66:84:3c:8b:75:86:d6:df:86:8a:69:96: e3:fd:67:07:29:7c:65:9a:2a:1e:ad:bb:70:12:80: e8:17:be:39:62:e4:b9:86:9c:e9:86:87:20:6b:dc: 03:11:8d:92:aa:6d:eb:3f:30:a5:e9:f6:9c:4a:bd: d5:3d:a3:53:4e:ef:56:17:18:50:80:2c:d3:33:9d: 26:db:b9:5d:53:1e:56:ef:c8:75:aa:20:e2:b1:d9: 3e:b3:bf:fc:08:90:f0:c6:0a:f9:47:b7:70:4a:b0: b6:87:2d:50:bb:96:cc:6d:2d:5e:ed:76:6e:58:fe: 03:8b:7d:e1:12:54:d6:25:d6:7c:61:32:85:f3:d9: 7a:8e:d9:61:35:96:5c:62:0b:43:05:ab:e5:69:af: 86:8d:f8:f6:26:25:62:5d:9e:1d:f4:09:36:d6:1e: 48:01:91:99:38:57:d9:ce:89:d3:c0:b0:05:bc:10: b2:64:8d:05:14:f8:f4:f5:1e:a5:9c:4d:59:66:7a: 25:30:50:87:bb:77:69:cd:32:81:ac:88:8e:34:03: 2c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8F:1D:BB:C5:16:D1:60:2B:72:70:E6:1D:18:76:91:00:A7:27:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/951e92c4-60b2-3938-8b8e-2136c0cef151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e6:cc:d7:a3:75:7e:4b:b6:1a:ed:45:ff:ca:6d:09:b7:e1: 81:05:55:7c:2f:db:07:63:93:92:37:78:31:4c:d9:93:88:df: c1:0d:b5:ff:53:23:93:8c:ad:f0:0d:5a:2b:5e:ae:37:e6:7b: 92:8a:54:28:87:6f:f7:22:de:38:41:8e:4d:75:c2:c1:35:2f: 62:e8:88:e6:12:bd:5f:3d:e4:0d:a6:ca:a2:54:49:0f:3d:d3: 94:cd:ab:2c:97:1b:6f:3c:ef:e8:cb:5f:86:72:ee:17:e2:e5: 36:e4:c4:23:0f:cc:f0:a5:bc:3c:79:bc:1e:a7:15:6d:af:72: dc:b4:a7:19:0d:90:5a:8a:0a:db:44:bb:d1:94:8c:1b:f1:8b: dc:d6:20:7d:e1:d7:e7:76:10:01:1d:bd:a1:ca:85:1f:82:e1: 63:18:e2:f5:44:e2:79:c4:aa:ac:0c:28:22:f4:91:53:45:16: 9a:f3:ea:ea:17:36:6d:5b:b4:b1:cb:13:d7:69:90:2c:4c:37: b5:a1:79:55:73:a9:6a:66:ad:57:da:6f:52:d6:40:a8:65:63: 8a:b4:fb:cd:48:03:1a:d0:ff:43:73:a3:8f:f5:39:70:67:22: c9:5f:71:ea:16:1d:9e:b1:ae:c3:5e:cf:9d:a0:f8:86:7e:0b: 84:ac:1b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6uga3vPpzhpc2Nq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YzlmODU3ZGMtMzRkNy00OTg1LWJjNTctMGYxM2E3YzNlNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibwF2MwuH+3cz+fCuCLJrhdWTi0HUukRjfG6 sAIdPjhh9R90decWN85EOtkBmWFmhDyLdYbW34aKaZbj/WcHKXxlmioerbtwEoDo F745YuS5hpzphocga9wDEY2Sqm3rPzCl6facSr3VPaNTTu9WFxhQgCzTM50m27ld Ux5W78h1qiDisdk+s7/8CJDwxgr5R7dwSrC2hy1Qu5bMbS1e7XZuWP4Di33hElTW JdZ8YTKF89l6jtlhNZZcYgtDBavlaa+Gjfj2JiViXZ4d9Ak21h5IAZGZOFfZzonT wLAFvBCyZI0FFPj09R6lnE1ZZnolMFCHu3dpzTKBrIiONAMsQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqPHbvFFtFgK3Jw5h0YdpEApycOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTUxZTkyYzQtNjBiMi0z OTM4LThiOGUtMjEzNmMwY2VmMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALmzNejdX5LthrtRf/KbQm34YEFVXwv2wdjk5I3eDFM2ZOI38ENtf9T I5OMrfANWiterjfme5KKVCiHb/ci3jhBjk11wsE1L2LoiOYSvV895A2myqJUSQ89 05TNqyyXG2887+jLX4Zy7hfi5TbkxCMPzPClvDx5vB6nFW2vcty0pxkNkFqKCttE u9GUjBvxi9zWIH3h1+d2EAEdvaHKhR+C4WMY4vVE4nnEqqwMKCL0kVNFFprz6uoX Nm1btLHLE9dpkCxMN7WheVVzqWpmrVfab1LWQKhlY4q0+81IAxrQ/0Nzo4/1OXBn IslfceoWHZ6xrsNez52g+IZ+C4SsGzE= -----END CERTIFICATE-----Generated at Fri Sep 4 23:53:21 2026 by rpki-client