$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7fded62-67bd-3e78-a925-b2cec54e836c.roa File: b7fded62-67bd-3e78-a925-b2cec54e836c.roa (raw, json) Hash identifier: oR3Te95DRzRWftelJIumXFOdlu0Lxwcxn1ztpjmB6kc= Subject key identifier: 21:FD:DF:5B:4B:24:48:57:14:74:2B:8B:9B:F4:2F:37:E3:D9:F3:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F024239B59614DB5CA1F99500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7fded62-67bd-3e78-a925-b2cec54e836c.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 20940 IP address blocks: 23.44.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:39:b5:96:14:db:5c:a1:f9:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=c0757ccb-e0ee-4a63-8899-6362884e8fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:43:b0:22:10:78:06:ea:80:27:f7:b9:5b: 62:93:cd:6f:19:1b:b9:d6:ad:30:98:55:42:78:76: 89:cf:6e:b1:63:c8:3f:d0:a7:6c:bc:67:c9:18:9c: 32:a0:60:74:53:f8:ca:fb:48:33:34:bc:09:17:ba: cc:07:36:ba:1e:5c:0c:56:d6:7d:5c:c5:8c:0c:1c: 2d:55:69:ea:c3:5f:bf:6f:a4:7b:38:cc:56:4c:ae: 2d:c0:52:89:69:46:1b:48:64:d9:db:ff:5f:17:12: 79:f9:de:93:33:60:ee:45:21:f5:08:e1:6d:38:b5: 76:f8:ba:d1:b7:d3:b7:f1:d3:00:00:0b:3d:1a:b4: 4a:d7:d3:f7:7b:f9:ab:b8:b5:49:ee:81:b6:0a:a5: fd:b7:29:7b:a1:4e:5e:27:58:ca:e3:ab:6b:80:2e: 32:fb:6c:9f:17:c1:72:70:d6:c0:37:ec:b2:e9:59: 3b:da:9e:70:c2:fc:41:57:ef:0c:43:7e:9b:ff:d2: e9:55:55:e9:c7:31:35:4a:ea:de:9b:62:96:f0:fe: 12:1f:a1:0b:7b:f5:71:95:68:ca:65:fb:5c:e8:f5: d0:db:e6:ba:1e:ba:d7:b8:63:52:e0:f7:02:36:89: 8b:a0:d5:f3:32:31:0f:41:e4:fc:6d:bd:15:d2:d6: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FD:DF:5B:4B:24:48:57:14:74:2B:8B:9B:F4:2F:37:E3:D9:F3:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7fded62-67bd-3e78-a925-b2cec54e836c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:94:d0:8c:92:97:ae:7d:0c:f7:4b:33:92:ef:c5:42:3d:36: b7:fb:ef:1b:ea:41:97:27:17:af:8f:33:31:df:81:0a:4d:45: 07:ec:d9:31:59:22:e1:a2:71:4a:30:3d:5f:7c:ce:dc:24:80: 44:9b:1d:d5:c9:68:82:81:5f:bd:12:1b:54:47:8f:a9:1b:a6: c1:30:e2:af:96:38:16:cb:29:92:a3:91:07:e0:40:fb:86:ce: ab:45:86:32:a7:ed:52:28:db:11:e4:ac:c8:a8:4e:63:d8:41: b5:23:c5:e5:a3:03:ee:51:71:ca:42:80:0d:96:b8:21:58:db: 73:a6:25:db:60:f8:1f:a9:1b:f6:ca:44:8b:e8:bd:68:bd:a2: 2c:87:67:b8:eb:ec:b1:39:8e:c8:da:72:ce:61:5b:e0:be:e1: d1:a9:24:14:43:09:55:44:8a:03:d4:85:1d:ac:2f:7a:03:91: 41:17:fb:1f:61:22:d6:cc:e5:be:40:58:9e:0b:b6:ee:60:79: 72:22:1b:19:86:0e:e1:ef:83:ab:e1:58:74:eb:2c:a6:8b:a9: 70:10:f5:db:b5:80:a4:6d:fb:b7:70:60:d9:b7:37:8e:00:f1: 96:6f:37:72:63:73:71:26:17:82:96:47:c2:ff:1a:b6:14:39: 55:cd:38:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjm1lhTbXKH5lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YzA3NTdjY2ItZTBlZS00YTYzLTg4OTktNjM2Mjg4NGU4ZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKFDsCIQeAbqgCf3uVtik81vGRu51q0wmFVC eHaJz26xY8g/0KdsvGfJGJwyoGB0U/jK+0gzNLwJF7rMBza6HlwMVtZ9XMWMDBwt VWnqw1+/b6R7OMxWTK4twFKJaUYbSGTZ2/9fFxJ5+d6TM2DuRSH1COFtOLV2+LrR t9O38dMAAAs9GrRK19P3e/mruLVJ7oG2CqX9tyl7oU5eJ1jK46trgC4y+2yfF8Fy cNbAN+yy6Vk72p5wwvxBV+8MQ36b/9LpVVXpxzE1Surem2KW8P4SH6ELe/VxlWjK Zftc6PXQ2+a6HrrXuGNS4PcCNomLoNXzMjEPQeT8bb0V0tZgrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH931tLJEhXFHQri5v0Lzfj2fNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjdmZGVkNjItNjdiZC0z ZTc4LWE5MjUtYjJjZWM1NGU4MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiU0IySl659DPdLM5LvxUI9Nrf77xvqQZcnF6+PMzHfgQpNRQfs2TFZ IuGicUowPV98ztwkgESbHdXJaIKBX70SG1RHj6kbpsEw4q+WOBbLKZKjkQfgQPuG zqtFhjKn7VIo2xHkrMioTmPYQbUjxeWjA+5RccpCgA2WuCFY23OmJdtg+B+pG/bK RIvovWi9oiyHZ7jr7LE5jsjacs5hW+C+4dGpJBRDCVVEigPUhR2sL3oDkUEX+x9h ItbM5b5AWJ4Ltu5geXIiGxmGDuHvg6vhWHTrLKaLqXAQ9du1gKRt+7dwYNm3N44A 8ZZvN3Jjc3EmF4KWR8L/GrYUOVXNODw= -----END CERTIFICATE-----Generated at Fri Sep 4 22:30:58 2026 by rpki-client