$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0b9a80c-0bfd-3e08-95c5-3161f6dc3051.roa File: c0b9a80c-0bfd-3e08-95c5-3161f6dc3051.roa (raw, json) Hash identifier: y60ynaK0x/hS384SMzwPuSCVxlSq8Elw+XgnaiVWGdQ= Subject key identifier: 98:AB:AF:36:CC:3C:76:8C:66:21:25:D1:8D:F5:F9:E9:73:C4:35:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EED5204CB2C819F0266114460 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0b9a80c-0bfd-3e08-95c5-3161f6dc3051.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 24319 IP address blocks: 72.247.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:04:cb:2c:81:9f:02:66:11:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=6dfd357a-e4e7-4907-9300-77030d0b390b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:55:12:e3:f0:e0:12:6c:f1:69:cb:d7:57: cc:b8:38:0b:b1:b2:93:8b:7b:f3:3f:ea:7c:2d:8c: 2e:bd:74:14:3a:ac:95:58:d3:75:2c:f4:cc:94:90: 13:c8:98:7d:58:99:d5:39:cd:fe:72:86:ea:a4:07: f1:5a:40:a8:f4:f0:6a:e0:95:5d:6a:0d:6a:b6:a8: ca:94:e6:42:69:02:3b:d1:f6:56:ba:1c:bc:27:1d: cc:98:11:84:3e:32:c8:e5:80:6e:5b:b8:cd:1b:3a: 63:f5:31:37:03:d1:59:d9:f4:29:99:fd:cb:9f:6e: a7:27:06:68:a8:fb:d1:59:86:df:54:d3:48:1d:1c: dc:a2:2d:7e:de:2f:c5:61:bd:ba:1e:df:63:17:34: 47:7a:bb:32:e6:39:5f:13:e1:93:32:88:c9:76:c2: 2b:ec:fe:f5:db:6e:02:42:41:83:c3:f8:d7:53:22: 35:44:2c:e3:ed:04:c2:dc:50:d4:fd:9f:57:c8:b7: 9d:5a:f8:97:a6:b1:25:c7:cd:08:c3:87:72:8e:76: a7:71:be:cd:6c:f4:ef:fa:c8:f7:80:67:9c:9b:36: f0:ef:98:ad:89:75:83:8f:0b:d8:20:dd:17:ce:79: 61:5b:67:5d:fb:e5:1f:57:89:99:e6:f8:03:48:f8: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AB:AF:36:CC:3C:76:8C:66:21:25:D1:8D:F5:F9:E9:73:C4:35:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0b9a80c-0bfd-3e08-95c5-3161f6dc3051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e9:54:87:3a:07:fd:d2:d3:81:c7:a0:20:fc:7d:e1:9d:00: 89:99:70:83:52:59:0d:fe:3d:ce:8f:be:e1:d6:94:a2:ba:03: e2:71:11:f7:aa:33:39:c2:f1:90:85:99:40:db:98:4a:5a:35: 26:62:f2:a1:7d:cf:f6:12:dd:3a:69:ff:4e:cb:64:ce:4e:9e: 0c:c2:62:cd:4d:32:90:68:3f:05:89:b9:e4:d4:4e:e7:80:42: 07:f5:a5:ae:7b:66:fb:2d:e5:9e:97:33:be:d3:c0:ec:31:f1: 50:32:f2:7b:9c:d3:14:81:9d:f0:ec:2e:d2:24:3a:f3:a1:4a: f6:93:90:de:93:70:41:81:88:65:d7:ae:05:0e:40:ed:f6:fb: 62:9b:24:bb:a0:60:61:73:e7:dc:aa:5d:97:d4:19:f7:6b:39: f5:8d:b7:a8:3b:4e:42:9a:47:b5:bc:3c:d7:94:32:a5:54:d4: 03:85:de:48:5b:db:f2:06:b8:f0:ae:32:22:03:33:cb:f8:8b: 8e:96:e5:f4:dc:5d:3c:bc:9a:b0:64:2e:8c:de:48:b2:24:fe: 64:d7:50:df:79:60:d4:6d:d8:b3:84:8a:04:4c:e6:db:e3:c5: ba:04:5e:87:e4:ca:87:28:4d:fa:b7:be:08:96:00:ed:d1:70: aa:21:74:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgTLLIGfAmYRRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NmRmZDM1N2EtZTRlNy00OTA3LTkzMDAtNzcwMzBkMGIzOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju1VEuPw4BJs8WnL11fMuDgLsbKTi3vzP+p8 LYwuvXQUOqyVWNN1LPTMlJATyJh9WJnVOc3+cobqpAfxWkCo9PBq4JVdag1qtqjK lOZCaQI70fZWuhy8Jx3MmBGEPjLI5YBuW7jNGzpj9TE3A9FZ2fQpmf3Ln26nJwZo qPvRWYbfVNNIHRzcoi1+3i/FYb26Ht9jFzRHersy5jlfE+GTMojJdsIr7P71224C QkGDw/jXUyI1RCzj7QTC3FDU/Z9XyLedWviXprElx80Iw4dyjnancb7NbPTv+sj3 gGecmzbw75itiXWDjwvYIN0XznlhW2dd++UfV4mZ5vgDSPh53QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJirrzbMPHaMZiEl0Y31+elzxDWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzBiOWE4MGMtMGJmZC0z ZTA4LTk1YzUtMzE2MWY2ZGMzMDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInpVIc6B/3S04HHoCD8feGdAImZcINSWQ3+Pc6PvuHWlKK6A+JxEfeq MznC8ZCFmUDbmEpaNSZi8qF9z/YS3Tpp/07LZM5OngzCYs1NMpBoPwWJueTUTueA Qgf1pa57Zvst5Z6XM77TwOwx8VAy8nuc0xSBnfDsLtIkOvOhSvaTkN6TcEGBiGXX rgUOQO32+2KbJLugYGFz59yqXZfUGfdrOfWNt6g7TkKaR7W8PNeUMqVU1AOF3khb 2/IGuPCuMiIDM8v4i46W5fTcXTy8mrBkLozeSLIk/mTXUN95YNRt2LOEigRM5tvj xboEXofkyocoTfq3vgiWAO3RcKohdBY= -----END CERTIFICATE-----Generated at Sat Sep 5 01:28:18 2026 by rpki-client