$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa File: af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa (raw, json) Hash identifier: 7ECMNrzL8nksUh07g/YcU6jbimrJLUB7FmjDPJFSjRo= Subject key identifier: 2C:C3:AB:F4:30:FC:2E:C5:D1:06:4B:4C:5A:F9:D0:35:85:09:1B:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81B21A1F5672C3A5247080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.222.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:b2:1a:1f:56:72:c3:a5:24:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=c31d5830-fe55-426b-a065-024176928c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:b9:b9:9f:24:bf:3c:a8:20:b4:1e:28:15: e6:7f:e1:f8:a7:d7:fc:69:9d:3d:75:de:c7:e2:1d: bf:20:7f:05:63:7f:d2:7f:1c:e4:2b:5b:db:04:2e: ad:5e:7f:88:fa:1e:76:cc:10:15:e3:fd:4b:4f:ec: 2b:85:4d:1e:67:0a:d0:9e:e1:df:8b:19:83:9d:97: 84:97:7c:70:4b:93:cf:75:8d:28:fb:36:bf:f6:9a: 44:da:2a:8e:57:e7:85:ec:97:e4:ef:a6:f2:9b:47: 82:de:1f:d2:52:54:49:aa:0c:0a:d7:e8:69:22:71: 90:5b:e7:59:17:89:68:1c:c3:31:97:68:83:3c:0d: 80:7b:13:05:66:c0:43:e6:55:80:1d:7b:b2:3f:f0: ab:27:9a:87:ad:e1:be:be:5f:be:34:f2:f0:33:0d: 09:7e:b4:d0:6c:12:eb:1e:21:c9:18:19:d7:19:61: a2:d1:34:2b:78:e0:cb:95:9d:58:bf:cf:18:d0:62: 15:35:59:c4:1f:cb:b7:62:1d:03:f7:01:33:b8:27: f6:e1:56:d4:b4:dc:4c:76:77:d3:39:8a:ef:64:1b: 87:fd:fd:5d:56:79:de:ca:4e:be:dc:c2:53:b3:6e: be:e5:bc:f2:53:f6:fb:d5:f2:f0:e2:f4:64:33:e7: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C3:AB:F4:30:FC:2E:C5:D1:06:4B:4C:5A:F9:D0:35:85:09:1B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af0d45a8-cd5e-3d90-ab9a-bc4d908a1446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:3f:81:b7:1a:8c:07:3e:19:2e:35:fa:01:1d:dd:af:a2:b5: 92:f1:db:54:0a:c1:c1:7c:7f:a7:a6:3e:ed:9c:8d:b0:49:86: b6:07:c8:31:a7:1e:83:6f:05:0f:28:8a:48:ff:47:2f:1c:3c: 28:08:2c:50:47:d5:0d:96:b6:ca:51:c5:eb:71:ca:d6:64:72: 0a:0b:30:10:09:f2:d6:c2:98:26:ee:7d:f0:b6:07:ed:39:47: ad:3b:d7:a8:75:7d:3f:28:8c:94:6b:08:69:74:11:f6:ea:cf: f8:b0:0b:5b:6b:9a:0a:c0:87:7d:e1:12:21:3b:0f:1e:ff:ba: bb:cc:65:f7:a9:15:c0:f9:f7:e7:1c:17:1e:6c:6f:ed:62:cd: 12:fe:7b:d1:73:bc:51:73:9a:96:72:9a:19:f7:c0:5b:67:af: d5:58:9b:6d:53:2d:f4:77:6e:77:cc:36:10:9b:e2:17:57:c0: 78:5d:3d:3a:08:04:8a:75:1a:d3:ea:46:b4:e2:0a:ad:2f:8e: 75:23:7e:4a:e6:a5:1b:c7:fa:c4:32:27:42:9d:59:31:d8:c9: 66:95:ed:ec:66:e2:cf:52:ff:9f:54:fa:56:46:64:49:2e:16: 06:3b:d1:8d:d9:06:8d:be:cb:42:27:ed:42:8f:e3:fe:ce:01: d2:a3:fa:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbIaH1Zyw6UkcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YzMxZDU4MzAtZmU1NS00MjZiLWEwNjUtMDI0MTc2OTI4Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm365uZ8kvzyoILQeKBXmf+H4p9f8aZ09dd7H 4h2/IH8FY3/SfxzkK1vbBC6tXn+I+h52zBAV4/1LT+wrhU0eZwrQnuHfixmDnZeE l3xwS5PPdY0o+za/9ppE2iqOV+eF7Jfk76bym0eC3h/SUlRJqgwK1+hpInGQW+dZ F4loHMMxl2iDPA2AexMFZsBD5lWAHXuyP/CrJ5qHreG+vl++NPLwMw0JfrTQbBLr HiHJGBnXGWGi0TQreODLlZ1Yv88Y0GIVNVnEH8u3Yh0D9wEzuCf24VbUtNxMdnfT OYrvZBuH/f1dVnneyk6+3MJTs26+5bzyU/b71fLw4vRkM+eZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzDq/Qw/C7F0QZLTFr50DWFCRtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWYwZDQ1YTgtY2Q1ZS0z ZDkwLWFiOWEtYmM0ZDkwOGExNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF97yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk/gbcajAc+GS41+gEd3a+itZLx21QKwcF8f6emPu2cjbBJhrYHyDGn HoNvBQ8oikj/Ry8cPCgILFBH1Q2WtspRxetxytZkcgoLMBAJ8tbCmCbuffC2B+05 R60716h1fT8ojJRrCGl0Efbqz/iwC1trmgrAh33hEiE7Dx7/urvMZfepFcD59+cc Fx5sb+1izRL+e9FzvFFzmpZymhn3wFtnr9VYm21TLfR3bnfMNhCb4hdXwHhdPToI BIp1GtPqRrTiCq0vjnUjfkrmpRvH+sQyJ0KdWTHYyWaV7exm4s9S/59U+lZGZEku FgY70Y3ZBo2+y0In7UKP4/7OAdKj+rE= -----END CERTIFICATE-----Generated at Sat Sep 5 02:49:22 2026 by rpki-client