$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec2bffa-47a6-3973-a243-b0c617e03dc4.roa File: bec2bffa-47a6-3973-a243-b0c617e03dc4.roa (raw, json) Hash identifier: h3uH0NgqAkJvLw7zQ6Q5I/aNtPCfylhC8VHqS0HqOn4= Subject key identifier: 47:8F:48:39:E2:75:83:28:B6:61:DA:D3:6C:A9:9C:11:6C:A3:E0:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81AA352B766C40F410F300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec2bffa-47a6-3973-a243-b0c617e03dc4.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 35994 IP address blocks: 23.221.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:aa:35:2b:76:6c:40:f4:10:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=f96553ba-4573-4ccf-b9de-ed6223274f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:58:fe:37:88:a0:45:71:de:c6:3d:2a:7d: 7f:e2:c7:eb:c9:1e:fc:cb:f4:82:30:02:bd:24:f5: 38:f6:d7:f9:7b:02:20:fe:0b:70:62:7f:0c:01:32: d1:9e:d1:5f:85:47:bc:88:f4:5c:0c:35:c5:a3:f3: 69:45:7a:3a:c6:33:34:42:c4:70:0b:f7:1e:6e:4f: 6a:89:94:04:ab:f8:ac:5f:a4:d9:4e:d6:a3:c1:70: 0d:e5:a9:a5:eb:5f:85:ad:4b:6f:f5:a6:11:26:47: 65:d5:f5:f1:75:49:ce:08:ed:59:c3:07:b4:67:09: c8:de:7d:e8:90:f3:f3:5d:d8:00:fe:e2:cd:a3:06: 38:79:2c:12:6e:1c:d5:16:b7:ef:0b:c7:d6:c8:03: b7:b5:13:0a:12:82:5f:47:0e:11:d7:55:ab:f3:db: aa:a3:43:92:13:2f:24:80:64:f7:95:04:d6:c2:8e: 2e:ba:18:2f:69:f3:59:d7:60:7a:53:54:c9:66:98: 69:c5:69:20:e9:5e:d4:bd:32:02:48:65:0b:be:42: 23:ff:b6:c6:9b:f5:c9:90:a3:fa:f1:e2:86:88:38: df:a8:52:1a:c8:2c:33:ef:64:ec:22:8d:e7:5d:50: 24:cf:35:6d:c6:9c:cc:e8:d7:45:ad:73:e3:27:be: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8F:48:39:E2:75:83:28:B6:61:DA:D3:6C:A9:9C:11:6C:A3:E0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec2bffa-47a6-3973-a243-b0c617e03dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d5:4c:4d:33:0a:fa:23:b0:21:c7:6b:bf:ee:a4:2f:66:09: b5:35:37:f9:bb:99:8e:97:75:6d:33:74:06:65:56:be:a6:22: c5:73:e6:6c:93:df:34:87:30:7c:41:30:17:67:38:59:47:ce: 13:03:3e:91:8f:7b:83:fc:02:aa:bc:e0:98:78:af:91:1f:b5: bc:bc:b0:2c:2c:bf:18:f4:28:c2:ed:e9:0d:17:4a:96:f6:b1: 4f:74:ba:e8:b2:ef:24:47:b1:e7:ba:b2:58:80:98:50:eb:1c: 69:a0:07:b3:56:c6:f1:5d:cb:5e:cb:43:39:3e:86:cb:ae:9f: b5:41:09:ee:01:09:59:4f:ae:16:15:25:08:0b:83:e6:21:f8: c6:3c:bd:01:2c:b6:e2:43:f4:b6:72:44:37:3c:be:14:cd:a5: 37:ce:71:35:fb:06:d3:b5:57:d7:2f:56:9c:09:c9:56:48:24: d0:a6:c9:83:e1:f7:b5:1b:73:5b:5a:e6:dd:b5:75:bc:5c:6f: f2:0b:7f:6a:66:1c:d9:6c:54:10:c9:36:96:73:96:b2:36:12: 27:db:66:49:fe:46:65:73:c9:0f:d5:88:0a:1c:c3:a8:08:8c: 07:63:61:82:e0:0a:56:0c:62:55:cb:50:9a:c6:c9:b5:e9:84: 72:bb:1d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugao1K3ZsQPQQ8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk Zjk2NTUzYmEtNDU3My00Y2NmLWI5ZGUtZWQ2MjIzMjc0ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00pY/jeIoEVx3sY9Kn1/4sfryR78y/SCMAK9 JPU49tf5ewIg/gtwYn8MATLRntFfhUe8iPRcDDXFo/NpRXo6xjM0QsRwC/cebk9q iZQEq/isX6TZTtajwXAN5aml61+FrUtv9aYRJkdl1fXxdUnOCO1Zwwe0ZwnI3n3o kPPzXdgA/uLNowY4eSwSbhzVFrfvC8fWyAO3tRMKEoJfRw4R11Wr89uqo0OSEy8k gGT3lQTWwo4uuhgvafNZ12B6U1TJZphpxWkg6V7UvTICSGULvkIj/7bGm/XJkKP6 8eKGiDjfqFIayCwz72TsIo3nXVAkzzVtxpzM6NdFrXPjJ745RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEePSDnidYMotmHa02ypnBFso+CQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmVjMmJmZmEtNDdhNi0z OTczLWEyNDMtYjBjNjE3ZTAzZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF93oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPVTE0zCvojsCHHa7/upC9mCbU1N/m7mY6XdW0zdAZlVr6mIsVz5myT 3zSHMHxBMBdnOFlHzhMDPpGPe4P8Aqq84Jh4r5Eftby8sCwsvxj0KMLt6Q0XSpb2 sU90uuiy7yRHsee6sliAmFDrHGmgB7NWxvFdy17LQzk+hsuun7VBCe4BCVlPrhYV JQgLg+Yh+MY8vQEstuJD9LZyRDc8vhTNpTfOcTX7BtO1V9cvVpwJyVZIJNCmyYPh 97Ubc1ta5t21dbxcb/ILf2pmHNlsVBDJNpZzlrI2EifbZkn+RmVzyQ/ViAocw6gI jAdjYYLgClYMYlXLUJrGybXphHK7Hfk= -----END CERTIFICATE-----Generated at Sat Sep 5 01:29:21 2026 by rpki-client