$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa File: aa87476e-6587-32f8-9e25-ff671f5c947a.roa (raw, json) Hash identifier: 3aXOfu/L/jLFLM4+DX/2TDU6Jh3BMz1X/ZwfjNoqavo= Subject key identifier: 25:99:4D:7B:F4:E2:E8:2A:4A:5B:3C:9E:EF:29:07:88:18:A4:AF:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA787E6D5B14A1AC82A368968 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.195.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:e6:d5:b1:4a:1a:c8:2a:36:89:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6e68decd-c123-4d20-98be-d92b4ec04512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:70:64:22:85:ae:a9:3e:f3:21:f6:f3:6a:db: b6:33:d1:11:9a:12:3a:aa:e7:79:7e:54:92:bd:3e: 2b:fa:40:44:9d:2e:3b:f7:cd:4a:02:30:4e:68:f5: 93:8f:c0:92:93:f1:c6:b5:f6:e1:80:14:e1:75:30: 26:93:68:5e:a9:33:40:7c:16:9f:87:70:01:f6:8f: 64:b6:4e:de:a0:61:46:28:dd:1f:f7:5c:e5:42:97: 0f:23:bf:48:cc:1a:70:e5:f5:85:6c:10:88:4a:e3: 5b:c2:8b:36:55:40:a2:69:96:39:4b:36:68:61:dd: 82:8f:c1:ee:c6:fe:6a:bc:a4:99:70:f5:2f:65:4e: 2a:fb:62:39:2a:cd:97:59:06:9d:32:d4:c4:43:52: 54:1f:70:c5:45:36:7b:6e:6b:c2:c4:a3:86:e8:2e: 45:ff:ba:fe:fa:df:23:a0:f3:b4:4d:7f:64:a3:20: 8c:5e:70:a7:cb:d5:8c:72:e2:df:7b:01:95:af:20: 0d:27:9c:c4:7c:50:2c:22:b9:d6:70:15:ef:45:e0: 32:01:d4:86:31:46:c2:f8:f5:8f:11:3d:0b:a3:03: 01:cf:92:34:a6:a6:e6:00:b0:59:4a:ab:99:19:57: a9:c7:1a:6e:57:8b:35:00:90:68:a2:78:f1:55:b3: ae:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:99:4D:7B:F4:E2:E8:2A:4A:5B:3C:9E:EF:29:07:88:18:A4:AF:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e3:8a:fb:1e:72:5f:26:4b:b0:7d:72:38:6f:8b:0e:d3:1c: a3:c2:35:dd:fa:fa:58:64:d4:0d:db:26:65:15:dd:87:2b:4c: 99:9c:b6:60:c5:d0:0e:85:fe:c8:a4:7a:17:64:03:0b:20:e1: e9:34:0b:27:2b:07:1f:5b:be:81:12:b6:12:6c:76:97:ba:47: aa:08:bb:6f:7a:f0:15:cb:6c:3f:4c:28:46:26:45:a4:98:0d: b7:6c:4c:8b:e0:32:c0:6f:e8:fa:70:65:03:fa:44:e0:0d:37: 6b:ea:a2:d0:b8:8b:c7:a5:48:75:f5:dc:86:7b:bd:b1:d6:be: e6:73:a6:37:76:37:40:6a:0b:ea:90:3d:12:c4:47:97:2b:fc: b5:bd:23:07:27:4f:75:62:cc:6f:01:d1:41:5d:80:a6:ba:8c: 53:eb:51:5f:21:43:e3:d5:1b:5f:c7:b9:95:28:06:71:7e:7e: a4:dc:8b:4f:0e:5f:41:57:a0:ee:50:d3:3b:2d:25:f0:31:c6: 12:9f:f9:5f:13:0c:d1:3d:78:f4:3c:b8:ce:bf:17:b2:5e:c9: 69:59:c7:95:a4:2b:02:be:3c:06:3d:41:c3:01:db:44:f7:a8: fb:a4:8b:76:aa:aa:53:08:bc:66:1f:3f:d6:8a:4d:63:47:1e: 2d:f5:f9:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh+bVsUoayCo2iWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmU2OGRlY2QtYzEyMy00ZDIwLTk4YmUtZDkyYjRlYzA0NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnBkIoWuqT7zIfbzatu2M9ERmhI6qud5flSS vT4r+kBEnS47981KAjBOaPWTj8CSk/HGtfbhgBThdTAmk2heqTNAfBafh3AB9o9k tk7eoGFGKN0f91zlQpcPI79IzBpw5fWFbBCISuNbwos2VUCiaZY5SzZoYd2Cj8Hu xv5qvKSZcPUvZU4q+2I5Ks2XWQadMtTEQ1JUH3DFRTZ7bmvCxKOG6C5F/7r++t8j oPO0TX9koyCMXnCny9WMcuLfewGVryANJ5zEfFAsIrnWcBXvReAyAdSGMUbC+PWP ET0LowMBz5I0pqbmALBZSquZGVepxxpuV4s1AJBoonjxVbOuAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWZTXv04ugqSls8nu8pB4gYpK+LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE4NzQ3NmUtNjU4Ny0z MmY4LTllMjUtZmY2NzFmNWM5NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3jivsecl8mS7B9cjhviw7THKPCNd36+lhk1A3bJmUV3YcrTJmctmDF 0A6F/sikehdkAwsg4ek0CycrBx9bvoESthJsdpe6R6oIu2968BXLbD9MKEYmRaSY DbdsTIvgMsBv6PpwZQP6ROANN2vqotC4i8elSHX13IZ7vbHWvuZzpjd2N0BqC+qQ PRLER5cr/LW9IwcnT3VizG8B0UFdgKa6jFPrUV8hQ+PVG1/HuZUoBnF+fqTci08O X0FXoO5Q0zstJfAxxhKf+V8TDNE9ePQ8uM6/F7JeyWlZx5WkKwK+PAY9QcMB20T3 qPuki3aqqlMIvGYfP9aKTWNHHi31+b0= -----END CERTIFICATE-----Generated at Sat Sep 5 01:28:41 2026 by rpki-client