$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ee59c2-843d-35e0-99f8-e8ca7045d847.roa File: 99ee59c2-843d-35e0-99f8-e8ca7045d847.roa (raw, json) Hash identifier: LOLI0vGsq67sknTMe5jm86ZLaPa8LVvgZcsZdwIrIB0= Subject key identifier: 0A:F7:EF:30:AD:86:2A:D5:BE:5A:00:2B:48:A4:C0:C0:5D:E7:63:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7871D361CBF8D5413D93380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ee59c2-843d-35e0-99f8-e8ca7045d847.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.221.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:1d:36:1c:bf:8d:54:13:d9:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ea21aba6-d655-4036-b4e1-c64266e0285f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:66:51:78:8e:0e:25:f3:2d:1a:77:a6:6f:44: b1:74:ac:02:97:5f:9a:d0:95:05:69:11:75:c6:a7: 78:ff:1c:3f:bf:b6:99:61:d9:7c:eb:39:cf:68:b8: 18:20:e6:f2:09:18:1c:0c:9e:f9:e9:c5:33:24:2e: bf:56:df:13:2f:ef:f3:81:2e:b6:52:c3:73:42:d5: 56:37:66:a9:24:ce:d6:46:41:d2:6b:33:f1:eb:bb: 3b:ec:a6:7f:e7:a7:41:d1:81:ec:9d:48:16:cc:39: 20:8a:39:ba:9d:ab:5c:8e:4e:aa:2f:cc:27:64:4f: a1:90:63:43:5f:b4:95:f0:bf:4e:b9:85:0a:56:d8: d4:9e:99:fe:74:61:4a:2f:64:76:45:88:a1:97:53: 5a:b0:62:de:d9:42:14:53:a8:e3:7f:5f:bd:4a:7a: 03:28:d1:e4:0e:1a:9e:cd:e0:d4:96:bb:f7:83:1d: 94:69:d3:c9:b4:a1:b4:c8:99:15:2d:18:36:98:ce: 48:65:5b:90:15:e6:11:a6:f1:3b:23:da:ea:9f:70: ad:fd:8a:eb:75:8f:17:99:36:28:f7:01:17:7c:6b: 82:42:54:0f:74:e6:75:c3:1c:c6:ab:51:e4:b9:77: 1d:52:7d:bb:d6:fd:a9:47:c2:cc:26:42:c9:9d:da: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:EF:30:AD:86:2A:D5:BE:5A:00:2B:48:A4:C0:C0:5D:E7:63:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99ee59c2-843d-35e0-99f8-e8ca7045d847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:70:71:37:38:76:56:12:87:fe:10:31:d0:4a:f3:7f:03:bb: af:5e:f5:a1:11:1a:bf:16:b9:21:17:10:9c:8b:68:4a:96:fd: 39:60:83:93:bb:d5:85:c8:26:93:e1:25:12:5b:ae:e4:67:67: ec:10:cf:b4:7d:1f:e3:fb:b1:91:b4:c0:5c:b1:5f:20:c6:1a: c2:bd:89:f7:7d:bf:c1:eb:06:a5:08:54:5d:d6:0e:b3:02:99: b5:65:4b:a4:3e:4c:51:d4:83:50:ca:b5:4e:db:c1:02:10:c2: 2d:87:a6:60:8d:58:92:31:15:ac:fd:2b:dc:53:ee:94:9e:2c: 12:76:6e:db:79:82:ba:a2:d8:83:bc:47:69:32:8b:d9:3c:ac: a2:96:55:ab:2d:c2:a9:a0:08:77:53:5f:4c:e4:ba:25:dc:03: 57:e8:92:b4:f9:78:07:0f:77:1a:fb:7e:eb:36:c0:6e:04:41: c5:a5:bc:d7:75:f5:33:64:42:e8:f8:53:fd:38:81:65:97:d8: 64:94:58:6f:b6:ff:1d:cd:3f:f8:74:6d:48:75:83:d4:75:c7: d4:4a:4d:7e:9e:a5:ca:76:58:c6:ec:f4:74:26:00:37:21:23: a3:a5:f7:25:6c:7e:9d:0e:20:9c:d2:35:62:cd:97:fe:4c:6b: fd:13:6d:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhx02HL+NVBPZM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWEyMWFiYTYtZDY1NS00MDM2LWI0ZTEtYzY0MjY2ZTAyODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGZReI4OJfMtGnemb0SxdKwCl1+a0JUFaRF1 xqd4/xw/v7aZYdl86znPaLgYIObyCRgcDJ756cUzJC6/Vt8TL+/zgS62UsNzQtVW N2apJM7WRkHSazPx67s77KZ/56dB0YHsnUgWzDkgijm6natcjk6qL8wnZE+hkGND X7SV8L9OuYUKVtjUnpn+dGFKL2R2RYihl1NasGLe2UIUU6jjf1+9SnoDKNHkDhqe zeDUlrv3gx2UadPJtKG0yJkVLRg2mM5IZVuQFeYRpvE7I9rqn3Ct/YrrdY8XmTYo 9wEXfGuCQlQPdOZ1wxzGq1HkuXcdUn271v2pR8LMJkLJndpABQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr37zCthirVvloAK0ikwMBd52P7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTllZTU5YzItODQzZC0z NWUwLTk5ZjgtZThjYTcwNDVkODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF92AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERwcTc4dlYSh/4QMdBK838Du69e9aERGr8WuSEXEJyLaEqW/Tlgg5O7 1YXIJpPhJRJbruRnZ+wQz7R9H+P7sZG0wFyxXyDGGsK9ifd9v8HrBqUIVF3WDrMC mbVlS6Q+TFHUg1DKtU7bwQIQwi2HpmCNWJIxFaz9K9xT7pSeLBJ2btt5grqi2IO8 R2kyi9k8rKKWVastwqmgCHdTX0zkuiXcA1fokrT5eAcPdxr7fus2wG4EQcWlvNd1 9TNkQuj4U/04gWWX2GSUWG+2/x3NP/h0bUh1g9R1x9RKTX6epcp2WMbs9HQmADch I6Ol9yVsfp0OIJzSNWLNl/5Ma/0TbT0= -----END CERTIFICATE-----Generated at Sat Sep 5 02:09:10 2026 by rpki-client