$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc43b7af-674b-3639-b972-1363cf194946.roa File: bc43b7af-674b-3639-b972-1363cf194946.roa (raw, json) Hash identifier: p2aeYqJ93gbVK7zixdO4X86IxZsk4g868Hukmx7R+Yw= Subject key identifier: C3:57:69:76:62:B9:B8:E9:7E:B5:1C:8D:82:C2:31:25:2C:20:34:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EB6E1AC84BB543A298C2C0500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc43b7af-674b-3639-b972-1363cf194946.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.220.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:ac:84:bb:54:3a:29:8c:2c:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=998a0cba-f075-4cce-a4c0-a91805e52760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:d6:fd:cd:52:58:1c:73:fc:51:22:4c:ef: e2:a8:e5:14:cd:4d:3e:91:87:ed:c7:b6:64:a0:ff: 22:e1:cf:d8:cd:87:55:44:fa:f2:0a:28:4d:99:61: 01:d2:2c:62:94:51:f1:c7:13:18:ae:09:8e:fe:a2: df:bb:db:ad:b3:3b:30:b9:4d:e9:35:c5:bf:a7:f5: 48:52:d0:7d:d5:67:09:5f:2a:42:10:79:af:af:70: 61:ca:a1:2a:65:16:74:9d:97:54:97:c7:db:6a:f5: e9:5a:75:25:c9:f7:a2:93:5a:4c:d1:f5:b5:de:ad: 67:45:54:b0:40:21:89:04:ce:d6:8b:be:7f:24:fb: 9f:90:8b:e6:59:c1:78:3c:5b:a1:07:49:7b:2d:a8: eb:8b:27:46:39:43:76:60:8b:e7:70:84:fd:48:e5: 58:19:39:f1:a8:56:6d:db:23:c8:e5:0c:24:2d:47: 2f:84:ee:51:e1:14:c5:9d:fd:e7:af:57:95:70:1a: 8b:ba:55:d3:d9:e6:58:5e:4e:64:3e:cf:8f:23:d0: e6:3f:56:28:d8:78:2a:c6:45:fa:9e:74:eb:34:fc: 92:10:4f:5b:a0:9f:14:01:89:34:d4:2e:ac:6d:c9: 1e:00:d3:c3:f6:d1:a7:e9:75:a6:3a:3a:2d:aa:65: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:57:69:76:62:B9:B8:E9:7E:B5:1C:8D:82:C2:31:25:2C:20:34:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc43b7af-674b-3639-b972-1363cf194946.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:88:cb:67:aa:82:a2:0f:66:80:6c:75:19:24:24:6c:73:b6: 2f:50:c0:e3:11:ea:39:5e:e4:00:39:63:c1:b3:fd:68:78:c0: ed:b8:95:72:b9:02:d8:b4:1d:a1:33:d3:db:6c:24:fb:22:4f: a9:cd:15:45:7e:12:e5:71:99:a9:2d:93:30:5d:25:53:e9:dd: 4c:3e:b5:1b:be:c8:15:b3:c5:1b:93:f8:7c:5c:c8:2f:1e:d7: 2e:4c:b8:86:82:f6:b0:ab:df:9b:24:b9:e4:5b:9e:ef:44:4c: 45:8b:c1:e9:15:bf:07:ef:af:67:9a:1b:d6:d8:3d:80:06:42: 6d:ee:cc:ad:4f:c4:c5:ac:7b:f1:8e:dd:1d:64:5f:6f:dc:4e: e7:eb:c0:ad:2f:2a:ad:91:48:93:95:dd:70:a1:97:f6:73:d4: e7:28:6b:b4:fa:aa:84:5b:20:51:03:e2:9f:08:8b:51:67:26: dc:e9:da:f7:8a:c3:8b:f2:49:f7:c5:22:2d:fb:20:39:f1:fd: b1:16:35:89:44:bb:5f:37:42:e8:8e:c9:5d:b1:30:b2:6e:23: e0:82:f5:81:f0:97:95:be:6a:20:a7:30:3d:60:f3:7b:05:03: b3:34:cb:f5:d2:ea:e3:c8:9c:05:2f:ac:f7:8b:ce:2f:53:23: 7c:4f:31:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624ayEu1Q6KYwsBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk OTk4YTBjYmEtZjA3NS00Y2NlLWE0YzAtYTkxODA1ZTUyNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuonW/c1SWBxz/FEiTO/iqOUUzU0+kYftx7Zk oP8i4c/YzYdVRPryCihNmWEB0ixilFHxxxMYrgmO/qLfu9utszswuU3pNcW/p/VI UtB91WcJXypCEHmvr3BhyqEqZRZ0nZdUl8fbavXpWnUlyfeik1pM0fW13q1nRVSw QCGJBM7Wi75/JPufkIvmWcF4PFuhB0l7LajriydGOUN2YIvncIT9SOVYGTnxqFZt 2yPI5QwkLUcvhO5R4RTFnf3nr1eVcBqLulXT2eZYXk5kPs+PI9DmP1Yo2HgqxkX6 nnTrNPySEE9boJ8UAYk01C6sbckeANPD9tGn6XWmOjotqmVy0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNXaXZiubjpfrUcjYLCMSUsIDSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmM0M2I3YWYtNjc0Yi0z NjM5LWI5NzItMTM2M2NmMTk0OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9z1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOIy2eqgqIPZoBsdRkkJGxzti9QwOMR6jle5AA5Y8Gz/Wh4wO24lXK5 Ati0HaEz09tsJPsiT6nNFUV+EuVxmaktkzBdJVPp3Uw+tRu+yBWzxRuT+HxcyC8e 1y5MuIaC9rCr35skueRbnu9ETEWLwekVvwfvr2eaG9bYPYAGQm3uzK1PxMWse/GO 3R1kX2/cTufrwK0vKq2RSJOV3XChl/Zz1Ocoa7T6qoRbIFED4p8Ii1FnJtzp2veK w4vySffFIi37IDnx/bEWNYlEu183QuiOyV2xMLJuI+CC9YHwl5W+aiCnMD1g83sF A7M0y/XS6uPInAUvrPeLzi9TI3xPMa4= -----END CERTIFICATE-----Generated at Sat Sep 5 04:39:50 2026 by rpki-client