$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c227707b-f168-32f2-995d-6bf7c66c06eb.roa File: c227707b-f168-32f2-995d-6bf7c66c06eb.roa (raw, json) Hash identifier: Q5vruvTuIfTmCNNwHTrTX7o5s6d3IQ7kRlVaA/Q2uPo= Subject key identifier: 11:45:40:65:50:FD:85:AF:23:66:18:BD:B1:A9:8A:93:B6:83:0F:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA790E75A670915637808F4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c227707b-f168-32f2-995d-6bf7c66c06eb.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.195.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:e7:5a:67:09:15:63:78:08:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=653206ff-f1de-4199-aca7-ae8a92914a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:e1:0f:42:fb:8b:3e:e4:9d:62:c5:1e:e8: f9:4c:bf:89:8a:9d:21:ec:2a:37:fa:5d:8d:18:df: 20:65:21:f0:f1:7c:ff:8f:34:9e:dc:fe:33:fc:1e: fe:64:62:f0:7e:db:81:04:19:50:9a:4a:d6:95:52: f8:1d:44:7a:ed:fc:85:e8:69:98:0f:08:da:f0:78: 0b:b8:b0:d3:00:c2:9b:b5:90:09:4e:8b:2e:f8:36: 70:e5:cc:e0:8f:33:12:68:1d:96:f4:c5:ab:fa:7a: c8:d0:85:f3:7e:4f:2a:66:0f:83:da:a9:d5:50:1d: 62:f6:bc:34:f8:de:31:02:52:97:66:54:eb:6b:d0: 87:24:1f:45:30:7e:c8:75:ba:08:cc:86:a0:fc:7e: f8:1d:01:f9:c2:0a:86:3b:79:da:88:a9:74:55:b4: e4:e6:1c:58:61:73:0e:f8:ca:4e:e4:08:ea:63:20: c0:65:12:c9:3f:44:90:77:4a:63:c0:21:79:84:f1: 22:9d:84:79:88:21:a3:71:00:e9:94:23:ed:da:8a: ba:e8:a7:6e:99:9e:a1:a7:d0:f0:42:ca:f0:17:8a: 7f:35:c3:df:16:8f:48:cf:11:3d:30:8e:54:e2:f1: 80:e4:f9:d5:c7:9e:ba:3c:22:61:70:cd:f0:cc:47: b2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:45:40:65:50:FD:85:AF:23:66:18:BD:B1:A9:8A:93:B6:83:0F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c227707b-f168-32f2-995d-6bf7c66c06eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fb:bf:a8:22:7c:e7:0c:5c:9a:47:f1:5f:ab:c6:92:f5:07: 4e:3f:0d:fa:b4:c0:6d:81:7b:02:86:9a:c7:91:9f:2f:f7:42: 89:fe:e9:03:63:ef:b8:27:17:ed:81:dc:1c:7e:99:40:65:fe: 02:79:fd:e0:11:6e:ac:a1:4e:a8:3b:ce:fa:bc:4a:9a:f3:67: 42:a9:53:2a:c3:31:00:5f:eb:58:b2:67:a7:63:21:a2:1e:c7: d7:86:80:a2:72:bd:12:73:8d:ef:0c:d2:38:cf:21:10:e7:61: ab:07:50:58:a9:13:86:72:0c:0b:32:83:49:c4:6d:f8:4b:98: e2:04:a8:b7:00:33:70:b3:b3:0a:8c:83:3b:0a:29:02:b4:33: 4b:79:32:50:65:fa:54:e3:90:be:ff:55:e8:7f:4c:5e:a7:4b: cf:79:cf:b6:62:90:28:4c:ad:e6:71:3c:b1:e1:8a:21:14:7b: ba:ae:59:8b:8d:66:b8:3d:2a:ad:6e:3f:cb:dc:70:15:48:ee: 5a:b4:29:46:03:cf:7e:ce:f0:47:e6:32:cf:4c:bb:1c:8e:0d: e6:49:e5:dd:c0:72:b6:42:0b:44:ea:be:98:ea:e6:ab:c3:f4: 69:2e:35:37:8c:bf:c1:13:2a:77:ad:c3:36:6d:d1:a6:b2:15: f3:72:2c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkOdaZwkVY3gI9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjUzMjA2ZmYtZjFkZS00MTk5LWFjYTctYWU4YTkyOTE0YTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwovhD0L7iz7knWLFHuj5TL+Jip0h7Co3+l2N GN8gZSHw8Xz/jzSe3P4z/B7+ZGLwftuBBBlQmkrWlVL4HUR67fyF6GmYDwja8HgL uLDTAMKbtZAJTosu+DZw5czgjzMSaB2W9MWr+nrI0IXzfk8qZg+D2qnVUB1i9rw0 +N4xAlKXZlTra9CHJB9FMH7IdboIzIag/H74HQH5wgqGO3naiKl0VbTk5hxYYXMO +MpO5AjqYyDAZRLJP0SQd0pjwCF5hPEinYR5iCGjcQDplCPt2oq66KdumZ6hp9Dw QsrwF4p/NcPfFo9IzxE9MI5U4vGA5PnVx566PCJhcM3wzEeyxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFFQGVQ/YWvI2YYvbGpipO2gw9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzIyNzcwN2ItZjE2OC0z MmYyLTk5NWQtNmJmN2M2NmMwNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8MQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/7v6gifOcMXJpH8V+rxpL1B04/Dfq0wG2BewKGmseRny/3Qon+6QNj 77gnF+2B3Bx+mUBl/gJ5/eARbqyhTqg7zvq8SprzZ0KpUyrDMQBf61iyZ6djIaIe x9eGgKJyvRJzje8M0jjPIRDnYasHUFipE4ZyDAsyg0nEbfhLmOIEqLcAM3CzswqM gzsKKQK0M0t5MlBl+lTjkL7/Veh/TF6nS895z7ZikChMreZxPLHhiiEUe7quWYuN Zrg9Kq1uP8vccBVI7lq0KUYDz37O8EfmMs9MuxyODeZJ5d3AcrZCC0Tqvpjq5qvD 9GkuNTeMv8ETKnetwzZt0aayFfNyLEk= -----END CERTIFICATE-----Generated at Fri Sep 4 22:24:09 2026 by rpki-client