$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8494392-2429-300d-b88c-e55e1544c7b2.roa File: a8494392-2429-300d-b88c-e55e1544c7b2.roa (raw, json) Hash identifier: uKo2Byycf8DHwXLtkEy7G209d+1ZTaRzxPhdN0/o4Wk= Subject key identifier: AA:5B:01:E2:B9:45:78:EB:04:4E:23:C2:84:CE:17:3E:3B:81:2F:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA798205BBEF8889BD8881900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8494392-2429-300d-b88c-e55e1544c7b2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.204.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:20:5b:be:f8:88:9b:d8:88:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4ddb7598-e3fc-44da-8be0-b200b49f939e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:20:e5:2a:ce:36:ce:0c:aa:80:d3:43:26: fd:b1:00:f3:6c:9c:4a:6b:5b:6f:38:bf:17:5d:c6: 7f:a5:6d:78:e6:cb:d5:07:cc:06:2c:28:f4:42:c6: ee:8a:a1:82:0c:fd:a9:6b:e7:c4:ca:ef:98:25:89: 14:62:90:19:b0:2e:bc:ae:df:37:a0:6c:f6:43:92: 12:2d:ab:a6:89:b1:79:dd:0b:6d:8a:98:7d:42:fa: 64:c2:d4:fe:4d:63:c3:bc:7b:08:a7:f2:8f:ec:bb: ea:ab:fa:ee:2f:2f:92:3f:6e:ba:24:e1:c6:99:fe: 60:e4:73:96:2e:2c:eb:1b:b1:8c:f5:cf:60:87:cf: 54:8d:ce:80:e6:1d:c1:c0:91:ab:8e:12:a5:ea:13: 75:f4:27:9f:3b:03:85:e2:fc:09:0f:89:cb:7e:41: 29:c6:7c:dc:e9:f9:e8:25:58:ed:77:d0:41:88:42: 7c:f7:9e:ac:b9:da:8a:f9:8c:57:d9:0e:06:fc:72: 5f:2c:15:f8:65:43:33:dd:c6:1b:72:ad:b6:49:12: ac:10:a6:18:ea:c7:02:e2:1e:cb:d3:6d:93:44:c2: 3d:07:af:4e:d2:8a:76:1a:f0:0b:59:33:28:e7:3c: 3e:39:a3:48:70:95:38:9d:66:6f:55:d8:db:bb:12: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5B:01:E2:B9:45:78:EB:04:4E:23:C2:84:CE:17:3E:3B:81:2F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8494392-2429-300d-b88c-e55e1544c7b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9e:3f:3f:b1:3a:30:67:01:59:1b:38:80:93:68:2e:a3:57: f6:ba:ac:f2:59:2e:37:d1:e5:15:47:9b:2d:24:20:3d:77:62: f4:ae:6c:94:05:25:ed:bc:69:dc:45:ed:2a:f3:0b:72:02:85: 98:f7:9c:24:d7:3b:52:f4:29:42:91:26:94:34:c1:3c:92:2b: d5:8b:1f:54:2a:89:02:0c:eb:76:73:c4:7c:a4:d2:84:34:7c: 75:e2:51:c0:16:1e:38:54:3c:61:92:2e:84:0d:ff:de:9d:b9: 07:68:9a:73:40:ff:07:72:98:66:67:05:45:a6:ed:a1:35:7f: bf:81:0b:cb:fd:ca:47:cd:04:0c:a9:d6:a0:fb:35:6a:61:d8: 73:0c:b1:b8:06:1e:b8:ad:10:e3:16:23:44:d3:b7:8d:85:10: 99:f3:d8:14:71:54:b0:83:b3:ad:ee:d6:cc:a6:5d:10:56:1e: 11:4b:aa:08:ee:dc:54:65:0b:bb:7a:d7:b4:66:c3:3d:d2:6c: ba:81:53:d6:6a:70:2d:1f:42:7e:d4:ba:a3:cc:2b:b6:a9:c6: bc:12:4d:41:b9:b6:bd:40:31:b2:32:17:77:64:32:3e:a8:94: 4c:de:34:4d:48:61:e9:b4:b2:30:9f:bf:e6:3b:30:da:00:12: 6c:05:32:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmCBbvviIm9iIGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGRkYjc1OTgtZTNmYy00NGRhLThiZTAtYjIwMGI0OWY5MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaEg5SrONs4MqoDTQyb9sQDzbJxKa1tvOL8X XcZ/pW145svVB8wGLCj0QsbuiqGCDP2pa+fEyu+YJYkUYpAZsC68rt83oGz2Q5IS LaumibF53Qttiph9QvpkwtT+TWPDvHsIp/KP7Lvqq/ruLy+SP266JOHGmf5g5HOW LizrG7GM9c9gh89Ujc6A5h3BwJGrjhKl6hN19CefOwOF4vwJD4nLfkEpxnzc6fno JVjtd9BBiEJ8956sudqK+YxX2Q4G/HJfLBX4ZUMz3cYbcq22SRKsEKYY6scC4h7L 022TRMI9B69O0op2GvALWTMo5zw+OaNIcJU4nWZvVdjbuxKbwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpbAeK5RXjrBE4jwoTOFz47gS+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg0OTQzOTItMjQyOS0z MDBkLWI4OGMtZTU1ZTE1NDRjN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuePz+xOjBnAVkbOICTaC6jV/a6rPJZLjfR5RVHmy0kID13YvSubJQF Je28adxF7SrzC3IChZj3nCTXO1L0KUKRJpQ0wTySK9WLH1QqiQIM63ZzxHyk0oQ0 fHXiUcAWHjhUPGGSLoQN/96duQdomnNA/wdymGZnBUWm7aE1f7+BC8v9ykfNBAyp 1qD7NWph2HMMsbgGHritEOMWI0TTt42FEJnz2BRxVLCDs63u1symXRBWHhFLqgju 3FRlC7t617Rmwz3SbLqBU9ZqcC0fQn7UuqPMK7apxrwSTUG5tr1AMbIyF3dkMj6o lEzeNE1IYem0sjCfv+Y7MNoAEmwFMqA= -----END CERTIFICATE-----Generated at Sat Sep 5 06:12:39 2026 by rpki-client