$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa File: 975b2e17-f15b-3eda-aa6f-40d437f71e08.roa (raw, json) Hash identifier: iPNBQy5+BoVf+dESDnY6L+4m9qT1JmqR+95eqxji8TY= Subject key identifier: 72:EB:AD:21:17:28:48:4B:1C:D0:90:61:1F:96:AD:4A:5E:89:D2:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EED520DD44ECF0B02B9704754 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 24319 IP address blocks: 23.214.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:0d:d4:4e:cf:0b:02:b9:70:47:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=38a4f9a8-c043-43c1-9aae-be76e9867adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:70:98:40:49:ed:6b:4e:c9:f5:97:b2:49: c8:93:b8:e2:20:d8:32:4e:87:96:35:7c:96:68:28: 1e:9a:74:18:ce:89:58:63:80:83:65:e8:dc:b1:d9: 0b:51:aa:dc:03:95:c4:8f:5c:59:22:64:99:e2:62: 27:9f:7b:61:0d:22:70:1d:29:c5:51:53:90:9c:cd: 4b:d6:99:2b:fa:ab:01:18:8e:76:7d:de:50:83:57: 08:a1:fb:6f:b2:4e:9b:e1:25:ca:15:8e:1f:76:be: 5b:18:51:80:0e:5c:10:8f:02:2c:11:5b:c9:70:81: a4:0a:5b:6c:f6:30:de:ff:f9:c5:fb:89:cd:36:f5: f5:87:67:49:76:93:82:f6:0e:d1:1d:cf:66:0c:6f: fc:da:6c:42:16:ba:5a:9d:d4:be:bf:cc:f1:59:df: 62:9b:80:5e:ca:89:6f:37:69:d1:fb:a7:e5:eb:a0: 12:db:8c:81:06:00:1e:4b:bc:a3:28:cd:cf:3a:80: ad:6a:3f:47:db:22:d0:cf:cf:85:c7:81:68:02:d2: cc:f1:5f:45:bb:80:a7:75:eb:0b:28:3f:52:7f:c6: d5:82:a0:6e:eb:82:8e:50:00:56:38:9f:64:c4:61: 51:73:50:ed:a4:34:c4:ae:ac:44:26:cd:72:dc:73: cd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EB:AD:21:17:28:48:4B:1C:D0:90:61:1F:96:AD:4A:5E:89:D2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5f:71:3b:6b:cf:e7:f3:2f:cb:8c:a6:dc:4f:21:08:b5:79: 1a:25:9c:98:7c:1a:bd:d2:13:33:8c:c2:d4:0a:88:bd:01:3e: 69:31:26:80:e8:c7:ba:67:9a:d1:4c:c6:c2:62:0a:b0:33:24: 90:42:e1:5d:1d:02:d2:1c:8e:81:8a:d4:ec:54:52:96:57:78: c1:c2:44:07:00:61:d4:1d:07:13:8e:09:2c:52:b5:7c:6e:8e: 3e:1a:7c:4c:18:72:c8:ac:d3:9f:0d:c3:d4:dc:b6:d4:49:f3: bf:be:a9:72:cf:bb:78:38:dd:d5:31:01:9c:1f:c4:7c:8c:c4: a1:7f:d7:97:07:59:4c:13:2a:37:19:93:f0:fd:ce:3e:1d:a3: 1b:b5:8f:14:f4:dd:62:a8:a1:b5:dd:91:7e:7e:4a:f2:46:56: 3c:5c:77:0a:1c:7c:42:9e:2e:c1:3c:01:22:67:49:df:c5:f9: fc:10:42:78:63:9d:62:90:0d:27:52:bc:7f:ca:2d:e5:12:df: ee:f5:78:e2:d2:41:a2:16:91:b7:45:c0:46:17:6d:cc:3f:53: ee:c4:31:97:41:6b:d2:ac:4b:ce:cc:92:dd:59:8c:68:71:c8: 62:9e:03:de:6d:c6:2f:2f:02:55:ae:20:53:81:3f:03:6e:08: 0f:5b:39:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUg3UTs8LArlwR1QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MzhhNGY5YTgtYzA0My00M2MxLTlhYWUtYmU3NmU5ODY3YWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9FwmEBJ7WtOyfWXsknIk7jiINgyToeWNXyW aCgemnQYzolYY4CDZejcsdkLUarcA5XEj1xZImSZ4mInn3thDSJwHSnFUVOQnM1L 1pkr+qsBGI52fd5Qg1cIoftvsk6b4SXKFY4fdr5bGFGADlwQjwIsEVvJcIGkClts 9jDe//nF+4nNNvX1h2dJdpOC9g7RHc9mDG/82mxCFrpandS+v8zxWd9im4Beyolv N2nR+6fl66AS24yBBgAeS7yjKM3POoCtaj9H2yLQz8+Fx4FoAtLM8V9Fu4CndesL KD9Sf8bVgqBu64KOUABWOJ9kxGFRc1DtpDTErqxEJs1y3HPNjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLrrSEXKEhLHNCQYR+WrUpeidKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTc1YjJlMTctZjE1Yi0z ZWRhLWFhNmYtNDBkNDM3ZjcxZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVfcTtrz+fzL8uMptxPIQi1eRolnJh8Gr3SEzOMwtQKiL0BPmkxJoDo x7pnmtFMxsJiCrAzJJBC4V0dAtIcjoGK1OxUUpZXeMHCRAcAYdQdBxOOCSxStXxu jj4afEwYcsis058Nw9TcttRJ87++qXLPu3g43dUxAZwfxHyMxKF/15cHWUwTKjcZ k/D9zj4doxu1jxT03WKoobXdkX5+SvJGVjxcdwocfEKeLsE8ASJnSd/F+fwQQnhj nWKQDSdSvH/KLeUS3+71eOLSQaIWkbdFwEYXbcw/U+7EMZdBa9KsS87Mkt1ZjGhx yGKeA95txi8vAlWuIFOBPwNuCA9bORY= -----END CERTIFICATE-----Generated at Sat Sep 5 04:04:17 2026 by rpki-client