$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a23c97fe-6bef-3f89-9235-cfc667f953d0.roa File: a23c97fe-6bef-3f89-9235-cfc667f953d0.roa (raw, json) Hash identifier: I+UkXd3r/n4Ncmo25nZ99tdNx+I8W35sNPBlOznzpUw= Subject key identifier: 11:8E:88:3F:E7:D7:1D:3B:0C:85:8E:C1:D8:2B:81:09:AC:26:95:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7878962CAA209BE88A74040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a23c97fe-6bef-3f89-9235-cfc667f953d0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.59.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:89:62:ca:a2:09:be:88:a7:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=81b2c98a-b72d-4dca-b9d8-1c52034ebc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:a1:2d:cb:4d:4d:37:11:9d:bb:14:4f:e2: cc:01:cf:45:d7:de:35:f5:69:91:2c:83:98:b1:59: dc:96:2f:01:f5:1b:0d:db:1f:41:de:8e:ff:fc:81: 18:0d:04:bd:7a:47:34:36:99:f6:17:f1:a4:3e:ae: ba:78:d6:4e:3f:1a:6d:7a:1c:f2:fc:fa:75:ca:c4: a1:53:9d:51:22:13:35:41:5e:1c:cd:53:16:a6:f0: 7b:64:66:06:fc:24:e0:b9:c6:f8:86:a4:a0:de:45: 49:61:99:cc:b7:0c:78:bf:33:d4:83:c0:11:a5:b0: 9b:98:fd:5d:9d:9f:3f:d5:97:ca:3d:f8:5b:fd:3e: 37:2f:a6:8a:ad:72:9d:42:16:73:d6:6c:b4:d4:ff: f8:2b:08:db:a0:1d:5f:6c:08:23:ea:1f:e5:d9:cd: 96:80:4d:55:eb:4c:f3:90:a3:1d:ef:0e:44:51:8c: cc:88:21:6e:ff:39:fc:9c:0f:11:7c:08:57:b1:34: ef:c8:3a:c9:97:5d:10:06:5d:f7:51:84:11:d4:0a: c7:55:8a:16:72:99:c0:19:30:e9:69:22:39:32:e3: 28:ca:bc:fb:55:8d:d0:4b:6e:54:af:fb:3a:d7:03: d9:be:8e:89:e1:a1:55:73:31:2a:5c:72:53:88:96: 88:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8E:88:3F:E7:D7:1D:3B:0C:85:8E:C1:D8:2B:81:09:AC:26:95:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a23c97fe-6bef-3f89-9235-cfc667f953d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:41:3d:c3:e4:ce:d6:82:e2:90:65:66:08:ca:40:90:0d:ee: f5:ea:ae:94:08:9a:71:01:77:4d:e4:9c:df:f5:f2:ef:fe:bb: 47:a9:4b:a4:37:6f:d2:4f:8a:be:64:76:1b:d6:5d:c0:ff:af: 7d:2a:0d:97:b3:21:72:c1:41:2a:74:cb:3d:96:36:27:16:7d: 33:df:9b:4b:20:89:87:8a:c5:c3:63:52:ac:4c:6c:e6:1c:bd: 16:23:4f:af:07:10:57:e1:1e:5b:88:1a:52:4a:3f:db:d1:d7: 4d:64:2c:0f:8a:4e:9a:82:2a:01:09:62:b8:b6:a2:da:af:49: 82:90:a0:70:3d:55:08:26:45:0d:f4:17:60:de:1b:8a:78:a8: 8f:4a:61:be:a5:c8:12:5a:ae:02:05:39:86:31:13:fc:62:d0: 6f:dc:c4:c7:02:89:98:c1:77:09:43:49:ac:72:75:99:dc:11: 67:3a:04:44:89:71:2d:20:e5:a4:6b:ef:ff:4a:f7:36:68:7b: f3:59:3f:8f:24:82:e4:a1:1b:32:70:0d:d9:43:33:ed:19:26: d4:1e:61:64:72:5f:9b:89:0b:9f:57:b2:b5:9f:8b:24:bb:65: 16:49:d4:4b:bf:9c:1f:08:26:c7:6c:72:5d:39:58:e2:66:0a: ea:eb:c5:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh4liyqIJvoinQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODFiMmM5OGEtYjcyZC00ZGNhLWI5ZDgtMWM1MjAzNGViYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHKhLctNTTcRnbsUT+LMAc9F19419WmRLIOY sVncli8B9RsN2x9B3o7//IEYDQS9ekc0Npn2F/GkPq66eNZOPxptehzy/Pp1ysSh U51RIhM1QV4czVMWpvB7ZGYG/CTgucb4hqSg3kVJYZnMtwx4vzPUg8ARpbCbmP1d nZ8/1ZfKPfhb/T43L6aKrXKdQhZz1my01P/4KwjboB1fbAgj6h/l2c2WgE1V60zz kKMd7w5EUYzMiCFu/zn8nA8RfAhXsTTvyDrJl10QBl33UYQR1ArHVYoWcpnAGTDp aSI5MuMoyrz7VY3QS25Ur/s61wPZvo6J4aFVczEqXHJTiJaIZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGOiD/n1x07DIWOwdgrgQmsJpW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTIzYzk3ZmUtNmJlZi0z Zjg5LTkyMzUtY2ZjNjY3Zjk1M2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzsWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxBPcPkztaC4pBlZgjKQJAN7vXqrpQImnEBd03knN/18u/+u0epS6Q3 b9JPir5kdhvWXcD/r30qDZezIXLBQSp0yz2WNicWfTPfm0sgiYeKxcNjUqxMbOYc vRYjT68HEFfhHluIGlJKP9vR101kLA+KTpqCKgEJYri2otqvSYKQoHA9VQgmRQ30 F2DeG4p4qI9KYb6lyBJargIFOYYxE/xi0G/cxMcCiZjBdwlDSaxydZncEWc6BESJ cS0g5aRr7/9K9zZoe/NZP48kguShGzJwDdlDM+0ZJtQeYWRyX5uJC59XsrWfiyS7 ZRZJ1Eu/nB8IJsdscl05WOJmCurrxaA= -----END CERTIFICATE-----Generated at Sat Sep 5 06:12:16 2026 by rpki-client