$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af2d353f-f876-38fc-a3c7-0bbe6ff26a3b.roa File: af2d353f-f876-38fc-a3c7-0bbe6ff26a3b.roa (raw, json) Hash identifier: C0sKz1XN8UeAkIM5JwHgry6pUsMWso3dhJ03er12X34= Subject key identifier: 06:46:57:B9:D5:62:DD:B9:9D:EA:50:BD:04:B2:06:FA:72:6A:68:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093D043BE5DCD018771E4A88 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af2d353f-f876-38fc-a3c7-0bbe6ff26a3b.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.11.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:04:3b:e5:dc:d0:18:77:1e:4a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=070f18e5-9395-48df-8a40-71935ad61f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:08:a9:d5:bf:58:dc:03:39:44:8f:e5:46: b5:ba:fa:72:67:4b:74:d0:9e:1e:4a:96:7f:62:61: c2:4f:af:6f:7f:4b:be:3a:1f:0a:38:34:a8:5c:51: 4e:90:fd:40:fd:d9:d1:f7:3a:66:15:ab:b2:27:7c: e3:57:cd:95:aa:d2:00:cd:1c:10:b9:b2:44:d2:7a: c4:4f:52:ca:00:2c:ec:bb:43:c3:56:26:c2:11:0a: ad:ab:77:db:79:57:9e:47:cd:1c:f2:3a:42:12:19: a3:f5:c9:10:a4:6d:f0:b5:b0:45:65:2e:8b:f1:25: 15:68:eb:df:81:9a:1f:f3:44:4d:48:cb:0b:c4:20: a6:b7:db:6d:b6:3c:9d:10:34:ec:d6:d3:2f:62:1e: 29:68:dc:25:5d:e9:b5:4f:29:cd:2b:2d:b7:a4:90: bb:92:20:66:5e:7c:15:8e:c5:a5:77:89:fe:cf:ad: bc:52:23:59:98:29:a6:0a:6a:8e:db:0c:fa:fa:2c: fc:3b:ec:e6:a2:26:f5:9a:4e:08:83:7d:cd:f5:01: 9f:2a:a8:e4:37:16:c5:1f:1e:6a:a3:f4:21:8d:41: 96:a5:17:20:23:77:73:e8:ca:51:29:96:9e:be:33: 2d:2e:dc:0c:04:63:62:7f:8b:ce:b9:70:d3:82:92: 12:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:46:57:B9:D5:62:DD:B9:9D:EA:50:BD:04:B2:06:FA:72:6A:68:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af2d353f-f876-38fc-a3c7-0bbe6ff26a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:70:03:41:4c:33:c2:01:c2:cb:2c:8d:9f:71:2f:8a:fe:05: 5d:f5:d0:af:60:de:fc:2f:d6:88:c7:7e:12:28:81:37:0c:0d: 6d:14:66:0f:57:d4:ec:dc:bd:f4:54:4a:4d:09:bc:4b:84:0c: cb:74:80:83:cb:a9:86:72:65:06:cb:d0:11:ff:e6:29:53:33: cd:bb:c5:e3:a8:44:76:5e:61:a2:ff:ea:7a:7f:56:a4:78:60: 17:b3:48:b1:1d:1e:ed:65:01:6d:e2:c7:53:3b:0d:32:8d:95: 82:a8:61:06:8c:25:04:78:5e:c3:f8:73:b8:f5:eb:c8:e1:12: ad:69:52:10:0e:77:13:e8:dc:4b:01:36:c1:36:48:7b:e5:71: fe:fd:b2:e6:2f:a4:bc:d0:c1:93:5d:ce:3e:c5:3b:3f:7a:f1: fd:2b:ba:0f:3f:9b:4d:24:75:81:4d:86:1c:e3:66:21:b6:cb: 55:14:4f:38:15:b2:27:4f:8a:cf:67:a4:c1:b4:bd:22:1e:b0: fb:28:61:cf:9d:f6:fb:4b:41:4c:af:27:38:43:51:19:29:90: fa:93:25:dc:97:33:6f:a5:b8:89:11:b4:05:cd:af:5a:42:2a: b2:53:2d:6e:58:26:7a:31:bd:df:8e:34:6f:60:de:ed:e2:95: 48:22:b0:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQQ75dzQGHceSogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MDcwZjE4ZTUtOTM5NS00OGRmLThhNDAtNzE5MzVhZDYxZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0MIqdW/WNwDOUSP5Ua1uvpyZ0t00J4eSpZ/ YmHCT69vf0u+Oh8KODSoXFFOkP1A/dnR9zpmFauyJ3zjV82VqtIAzRwQubJE0nrE T1LKACzsu0PDVibCEQqtq3fbeVeeR80c8jpCEhmj9ckQpG3wtbBFZS6L8SUVaOvf gZof80RNSMsLxCCmt9tttjydEDTs1tMvYh4paNwlXem1TynNKy23pJC7kiBmXnwV jsWld4n+z628UiNZmCmmCmqO2wz6+iz8O+zmoib1mk4Ig33N9QGfKqjkNxbFHx5q o/QhjUGWpRcgI3dz6MpRKZaevjMtLtwMBGNif4vOuXDTgpISDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZGV7nVYt25nepQvQSyBvpyamheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWYyZDM1M2YtZjg3Ni0z OGZjLWEzYzctMGJiZTZmZjI2YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwvXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxwA0FMM8IBwsssjZ9xL4r+BV310K9g3vwv1ojHfhIogTcMDW0UZg9X 1OzcvfRUSk0JvEuEDMt0gIPLqYZyZQbL0BH/5ilTM827xeOoRHZeYaL/6np/VqR4 YBezSLEdHu1lAW3ix1M7DTKNlYKoYQaMJQR4XsP4c7j168jhEq1pUhAOdxPo3EsB NsE2SHvlcf79suYvpLzQwZNdzj7FOz968f0rug8/m00kdYFNhhzjZiG2y1UUTzgV sidPis9npMG0vSIesPsoYc+d9vtLQUyvJzhDURkpkPqTJdyXM2+luIkRtAXNr1pC KrJTLW5YJnoxvd+ONG9g3u3ilUgisH0= -----END CERTIFICATE-----Generated at Sat Sep 5 01:27:02 2026 by rpki-client