$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95924472-4b69-3949-b057-51af507e1709.roa File: 95924472-4b69-3949-b057-51af507e1709.roa (raw, json) Hash identifier: BLt3QLAUS7P5iLhCGHTry1TkrxroKm4lRh28NoVU1EU= Subject key identifier: 7D:33:37:50:D6:89:27:55:9B:BF:10:FC:A3:CC:EF:29:A5:43:D8:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093D022A46AC019CA83CA220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95924472-4b69-3949-b057-51af507e1709.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.2.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:02:2a:46:ac:01:9c:a8:3c:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=b67d3559-1efd-4458-9c92-bb92b528de01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:3d:8d:05:19:2e:fa:8b:8c:92:bd:67:08: 32:4c:44:25:26:b0:c6:19:0b:77:51:b8:d2:f7:ee: 03:52:05:fd:c6:ea:a6:0e:89:9b:c7:31:c7:ea:c0: 0b:dc:f5:26:f5:57:7d:e8:40:3f:3b:dd:65:47:cc: 3b:ba:39:9b:63:63:7f:46:b4:02:62:6a:85:2d:49: 6d:5a:5f:a4:0b:86:96:c3:cd:4e:c8:93:fa:69:db: 85:79:83:86:07:71:2a:fb:58:75:e3:28:3f:be:07: 2d:99:fa:27:da:bd:8b:c6:2b:bd:78:c2:20:c1:dd: ca:dd:66:92:ed:6f:47:50:4a:cf:e1:2e:94:01:6c: c5:ea:18:94:ae:02:be:74:44:82:d3:c4:74:5e:cd: f6:43:7d:a6:cf:81:73:1b:cf:f8:e6:d1:f5:9c:f8: 8d:71:3d:d3:5f:5c:ee:cb:80:6d:93:0f:1d:21:35: 02:6d:1e:22:00:e2:31:3d:45:ea:0f:f4:9a:b5:0a: 33:4d:36:6a:90:fb:d7:77:df:d2:1f:e6:cd:4b:4c: 78:f0:77:1f:0e:fd:b5:5c:17:f7:a2:01:f0:2c:e7: 2d:3e:66:9b:b5:b9:1c:18:07:7d:7f:47:31:fb:17: 07:1c:97:51:e4:4c:16:27:36:d3:e6:9d:f0:04:b2: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:33:37:50:D6:89:27:55:9B:BF:10:FC:A3:CC:EF:29:A5:43:D8:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95924472-4b69-3949-b057-51af507e1709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:57:ce:ba:41:fb:43:c1:8b:f4:ca:0d:1b:37:10:66:4f:06: e3:57:74:1b:b6:c4:7a:17:7f:a5:23:75:bf:de:fc:0a:a1:30: 43:3a:b5:3b:42:f1:e0:63:22:cd:14:88:f5:8c:cb:33:85:ab: 43:4c:eb:b1:e3:91:57:6c:ba:3f:10:df:41:fc:7a:a8:c5:90: 65:ba:84:af:f8:15:52:f8:54:70:5c:ca:13:5e:74:c5:3e:ee: 7f:32:64:e3:be:2c:79:0c:24:1f:a8:a2:0f:f1:cb:b4:8f:d1: 82:1d:ad:05:4d:07:f7:04:93:79:2c:b8:53:ac:47:e5:07:af: e7:cd:f2:e8:39:c6:a5:7c:d8:b6:d2:fd:a5:68:30:49:1b:3b: ee:39:95:af:76:90:8f:b7:7c:9a:f8:ca:ce:02:24:7c:32:bb: 28:a7:2d:91:76:a0:7c:f5:16:58:d8:4f:96:e7:94:37:d7:e4: 99:47:e1:f3:a7:fb:f8:75:be:5a:10:50:0f:84:0a:10:32:de: 89:ec:e3:84:54:95:92:75:4b:0c:89:2b:82:23:c3:c3:16:ef: 1a:a4:bc:75:4a:8e:54:43:f1:36:42:76:1b:c2:fc:ca:e9:13: 66:73:58:5e:e7:12:a4:b0:5d:19:75:48:61:e9:fc:b5:dd:a7: d5:0c:bc:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQIqRqwBnKg8oiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YjY3ZDM1NTktMWVmZC00NDU4LTljOTItYmI5MmI1MjhkZTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSE9jQUZLvqLjJK9ZwgyTEQlJrDGGQt3UbjS 9+4DUgX9xuqmDombxzHH6sAL3PUm9Vd96EA/O91lR8w7ujmbY2N/RrQCYmqFLUlt Wl+kC4aWw81OyJP6aduFeYOGB3Eq+1h14yg/vgctmfon2r2Lxiu9eMIgwd3K3WaS 7W9HUErP4S6UAWzF6hiUrgK+dESC08R0Xs32Q32mz4FzG8/45tH1nPiNcT3TX1zu y4Btkw8dITUCbR4iAOIxPUXqD/SatQozTTZqkPvXd9/SH+bNS0x48HcfDv21XBf3 ogHwLOctPmabtbkcGAd9f0cx+xcHHJdR5EwWJzbT5p3wBLLXlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0zN1DWiSdVm78Q/KPM7ymlQ9hwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU5MjQ0NzItNGI2OS0z OTQ5LWIwNTctNTFhZjUwN2UxNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwINMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxXzrpB+0PBi/TKDRs3EGZPBuNXdBu2xHoXf6Ujdb/e/AqhMEM6tTtC 8eBjIs0UiPWMyzOFq0NM67HjkVdsuj8Q30H8eqjFkGW6hK/4FVL4VHBcyhNedMU+ 7n8yZOO+LHkMJB+oog/xy7SP0YIdrQVNB/cEk3ksuFOsR+UHr+fN8ug5xqV82LbS /aVoMEkbO+45la92kI+3fJr4ys4CJHwyuyinLZF2oHz1FljYT5bnlDfX5JlH4fOn +/h1vloQUA+EChAy3ons44RUlZJ1SwyJK4Ijw8MW7xqkvHVKjlRD8TZCdhvC/Mrp E2ZzWF7nEqSwXRl1SGHp/LXdp9UMvPE= -----END CERTIFICATE-----Generated at Sat Sep 5 02:14:56 2026 by rpki-client