$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa File: ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa (raw, json) Hash identifier: wYyrVcoxoiFGjfWYt05RlIzk8JPylQoUDjreT4gP5Vc= Subject key identifier: ED:BF:09:A0:9F:92:1F:A9:6E:0E:C8:7E:DC:2A:03:C5:5F:28:B1:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81B025BB5362B00E179AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.221.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b0:25:bb:53:62:b0:0e:17:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=197dc5db-3178-40e6-ae2b-4374b22a2ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:75:89:3c:43:dc:1c:37:ad:82:c7:c1:ea: 18:66:d3:e4:3d:61:28:f7:a9:c1:9d:fc:4f:aa:ef: 87:8a:c1:67:aa:f1:af:02:96:4d:9b:fd:d8:b3:40: 64:26:68:f8:c6:cd:4b:76:9a:b9:6a:36:c3:58:9f: 9f:a9:fe:37:f2:34:a6:95:86:02:92:de:01:0e:f8: 7f:53:04:76:ed:28:73:66:7f:8d:98:fc:08:ec:3d: f0:bd:27:41:35:d8:30:f4:69:fd:be:1e:96:9d:c2: 7a:da:31:97:04:b0:8d:24:5b:f2:fc:4f:42:7a:05: 1b:3d:de:be:04:8d:3d:2c:19:00:a7:24:15:39:c1: 96:47:3a:57:7d:d3:aa:fe:32:30:36:aa:f5:72:0d: 3b:06:49:c4:f1:be:d2:77:d0:e7:e4:d9:c5:e6:c9: 4f:fe:c0:ce:61:1e:1b:af:04:cb:ba:86:ca:18:0c: a9:b2:e7:c5:15:20:4e:5b:a5:1b:2a:dc:95:a6:bf: 82:dc:23:e4:4b:a7:f1:96:85:d9:4d:c6:dd:3b:09: b0:b5:44:24:72:29:74:e2:92:14:8a:d1:3f:c2:5d: 74:f2:c3:58:91:f0:7f:e7:8a:02:91:48:f8:92:98: 22:c8:e4:fb:d3:d1:26:95:a3:b5:8e:6d:f8:84:30: c8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BF:09:A0:9F:92:1F:A9:6E:0E:C8:7E:DC:2A:03:C5:5F:28:B1:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac2d5ba9-0fe6-3e4d-993c-039f1e186a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:92:7b:16:65:dd:f0:84:98:09:c2:0e:a2:94:9e:bb:79:07: b0:44:0f:6e:a9:f6:8b:f0:b7:ba:96:b8:e8:02:e2:5f:f1:af: 2e:73:97:04:84:ec:6f:af:61:0c:af:42:82:38:bf:62:64:4c: ef:2b:a5:5c:bb:d1:7b:d7:8b:8e:fd:cd:dc:d9:c0:aa:c6:1f: 12:26:70:22:a4:12:9d:f8:35:0a:9b:98:27:2b:69:5e:f7:07: c0:a2:c2:55:5f:96:fb:98:87:fb:90:21:6d:c3:83:29:3d:12: 60:4d:a5:5e:97:f4:06:58:fa:e0:4c:dc:1d:41:1d:86:c7:60: f5:42:9f:9a:92:40:e2:a9:e7:b6:78:48:bb:da:7f:34:1c:fb: 53:b2:11:5f:25:14:a2:a6:ce:03:1c:4c:fa:33:61:44:25:07: 92:c6:8a:93:dc:fd:00:ae:37:d4:c3:6b:3d:47:37:b6:d7:76: 45:55:28:b9:1e:7a:3c:3a:e4:bd:b5:d4:3a:de:a6:7b:13:e1: c0:38:b7:5c:70:b7:ec:d4:79:f0:b4:90:23:2e:08:10:bf:07: 64:da:ba:41:a4:ac:db:5a:ff:a9:24:9b:44:0e:9f:aa:ff:7d: ad:b5:e1:7c:fd:93:6d:cf:a1:f9:db:4b:ef:9e:c6:f1:68:1b: 0a:75:91:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbAlu1NisA4XmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk MTk3ZGM1ZGItMzE3OC00MGU2LWFlMmItNDM3NGIyMmEyY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMN1iTxD3Bw3rYLHweoYZtPkPWEo96nBnfxP qu+HisFnqvGvApZNm/3Ys0BkJmj4xs1Ldpq5ajbDWJ+fqf438jSmlYYCkt4BDvh/ UwR27ShzZn+NmPwI7D3wvSdBNdgw9Gn9vh6WncJ62jGXBLCNJFvy/E9CegUbPd6+ BI09LBkApyQVOcGWRzpXfdOq/jIwNqr1cg07BknE8b7Sd9Dn5NnF5slP/sDOYR4b rwTLuobKGAypsufFFSBOW6UbKtyVpr+C3CPkS6fxloXZTcbdOwmwtUQkcil04pIU itE/wl108sNYkfB/54oCkUj4kpgiyOT709EmlaO1jm34hDDIOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2/CaCfkh+pbg7IftwqA8VfKLE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWMyZDViYTktMGZlNi0z ZTRkLTk5M2MtMDM5ZjFlMTg2YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF90qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuSexZl3fCEmAnCDqKUnrt5B7BED26p9ovwt7qWuOgC4l/xry5zlwSE 7G+vYQyvQoI4v2JkTO8rpVy70XvXi479zdzZwKrGHxImcCKkEp34NQqbmCcraV73 B8CiwlVflvuYh/uQIW3Dgyk9EmBNpV6X9AZY+uBM3B1BHYbHYPVCn5qSQOKp57Z4 SLvafzQc+1OyEV8lFKKmzgMcTPozYUQlB5LGipPc/QCuN9TDaz1HN7bXdkVVKLke ejw65L211DrepnsT4cA4t1xwt+zUefC0kCMuCBC/B2TaukGkrNta/6kkm0QOn6r/ fa214Xz9k23PofnbS++exvFoGwp1kVs= -----END CERTIFICATE-----Generated at Fri Sep 4 22:34:44 2026 by rpki-client