$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa File: 9965c21a-d3d0-33de-969e-e44b520ca86a.roa (raw, json) Hash identifier: cTZ23woYydkfspedjbc1K6jid762JTgXEtniCqcKgqc= Subject key identifier: F0:7B:BA:2B:9D:13:48:DC:ED:DB:A3:8E:71:DF:1D:62:0A:3A:B6:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE38CA4C2A50FC966CAA0C300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 9299 IP address blocks: 23.44.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a4:c2:a5:0f:c9:66:ca:a0:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=268a1837-ac45-476e-867b-ee690d28dd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d1:c9:57:60:c7:ee:af:7e:7c:ae:26:82:4e: 91:8e:b8:ec:76:a5:3e:bd:36:91:1c:9b:6b:27:fb: 45:14:9c:c5:a1:ef:5b:6a:10:8e:8f:34:40:01:09: d6:15:cf:c6:cb:02:91:80:1f:41:5f:b1:78:03:1b: 77:b9:62:76:82:b2:51:38:e3:22:53:d8:da:f8:79: a8:a7:af:f9:4d:1f:52:30:63:55:6f:14:8e:0e:c4: f3:fa:e4:0a:e6:a9:f3:4e:83:b4:74:fd:82:02:94: de:31:1d:7b:43:30:df:b8:51:88:02:f6:c4:65:56: 12:99:88:85:94:fb:25:45:12:58:71:99:19:c7:e5: ea:91:02:ad:21:4c:67:ae:72:65:79:a8:2f:5e:f6: 6c:b6:80:46:e0:65:19:22:a2:04:97:33:c9:31:5c: 62:5f:1f:48:68:c3:d5:77:40:67:02:ca:57:fa:cb: 55:e7:74:86:04:6a:0f:12:42:6f:96:a7:cd:a4:9b: dc:50:94:e8:d5:9f:74:4a:6d:3e:56:92:ac:82:48: db:17:b8:04:11:9c:45:b2:26:71:f6:d4:27:6e:57: 2c:f8:35:91:2b:26:90:c3:14:23:ac:c9:84:1c:1c: 8d:df:53:13:2c:c5:a3:9b:75:9f:f6:c1:24:2e:a3: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:BA:2B:9D:13:48:DC:ED:DB:A3:8E:71:DF:1D:62:0A:3A:B6:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9965c21a-d3d0-33de-969e-e44b520ca86a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:08:56:a3:10:f8:66:40:67:e1:d1:5c:50:0b:e8:51:77:b4: e7:cd:2c:b0:3a:97:43:a4:51:71:88:45:04:ed:f8:33:16:03: f0:d9:eb:99:7f:ed:54:68:d5:73:19:f6:44:5d:fa:61:4a:2f: a9:ec:c1:25:d2:68:68:69:67:e3:5e:1d:47:b7:c0:cc:2e:34: e4:91:58:75:7b:eb:9d:3c:db:a2:e9:9b:d2:17:d1:12:49:83: c7:64:34:0d:b5:6a:14:d9:42:05:77:53:98:44:78:43:8c:e8: c4:0e:16:e0:48:af:00:a5:88:30:1d:d4:7d:8c:9e:13:69:4e: 20:d4:48:2f:9b:cb:6e:9c:f5:48:91:76:3e:74:a1:e8:f7:95: 36:69:e9:b8:b4:21:5a:65:67:39:fb:72:1f:1d:10:01:45:06: a2:84:f4:0e:ef:40:70:ab:df:0a:eb:88:e3:0b:2a:d8:57:1c: e4:28:36:a4:44:6e:c4:b3:ba:f5:87:db:64:ff:a4:84:6b:47: 3c:67:60:65:fd:87:0a:95:b2:f2:f5:69:9f:74:5e:6f:8d:bc: f4:be:19:09:8e:71:b8:ec:b9:17:5c:b1:dc:95:ee:98:95:16: 62:a1:d9:c1:7b:af:b4:a3:47:17:5c:29:5a:48:db:0d:fd:3a: 4d:6a:53:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKTCpQ/JZsqgwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MjY4YTE4MzctYWM0NS00NzZlLTg2N2ItZWU2OTBkMjhkZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdHJV2DH7q9+fK4mgk6RjrjsdqU+vTaRHJtr J/tFFJzFoe9bahCOjzRAAQnWFc/GywKRgB9BX7F4Axt3uWJ2grJROOMiU9ja+Hmo p6/5TR9SMGNVbxSODsTz+uQK5qnzToO0dP2CApTeMR17QzDfuFGIAvbEZVYSmYiF lPslRRJYcZkZx+XqkQKtIUxnrnJleagvXvZstoBG4GUZIqIElzPJMVxiXx9IaMPV d0BnAspX+stV53SGBGoPEkJvlqfNpJvcUJTo1Z90Sm0+VpKsgkjbF7gEEZxFsiZx 9tQnblcs+DWRKyaQwxQjrMmEHByN31MTLMWjm3Wf9sEkLqPzKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPB7uiudE0jc7dujjnHfHWIKOrZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk2NWMyMWEtZDNkMC0z M2RlLTk2OWUtZTQ0YjUyMGNhODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkIVqMQ+GZAZ+HRXFAL6FF3tOfNLLA6l0OkUXGIRQTt+DMWA/DZ65l/ 7VRo1XMZ9kRd+mFKL6nswSXSaGhpZ+NeHUe3wMwuNOSRWHV7650826Lpm9IX0RJJ g8dkNA21ahTZQgV3U5hEeEOM6MQOFuBIrwCliDAd1H2MnhNpTiDUSC+by26c9UiR dj50oej3lTZp6bi0IVplZzn7ch8dEAFFBqKE9A7vQHCr3wrriOMLKthXHOQoNqRE bsSzuvWH22T/pIRrRzxnYGX9hwqVsvL1aZ90Xm+NvPS+GQmOcbjsuRdcsdyV7piV FmKh2cF7r7SjRxdcKVpI2w39Ok1qU28= -----END CERTIFICATE-----Generated at Sat Sep 5 03:30:20 2026 by rpki-client