$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca31543c-59f4-304f-949c-486abba16339.roa File: ca31543c-59f4-304f-949c-486abba16339.roa (raw, json) Hash identifier: Q8e9hlcfDCOzl/P2+DhXVwIbyZjhHleHaAvQ+Lxkwog= Subject key identifier: DA:E4:04:96:18:85:1E:C7:98:59:59:EA:67:D6:0C:A7:04:05:D5:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7996E5F7A287B9AC9689990 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca31543c-59f4-304f-949c-486abba16339.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.209.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:6e:5f:7a:28:7b:9a:c9:68:99:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=451de98a-15e3-4030-a802-c82cdc7cb074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:3c:03:f0:83:00:8c:46:55:ba:38:35:7e: fc:89:db:37:7e:d6:cb:83:86:3d:34:b9:06:9f:80: f8:61:02:6a:ee:a7:8f:4d:7f:31:80:37:d3:ca:8f: 6e:b7:a6:62:21:3b:d8:e3:04:5f:f7:58:4c:2f:58: a6:e5:4d:cf:d5:4c:45:03:b9:59:19:7e:dc:ed:90: 58:36:6d:27:cc:3f:c4:48:ef:bf:50:88:c3:03:ed: 48:f8:2d:f5:ea:2e:56:0d:52:a8:0b:8e:2a:65:99: 11:ae:91:03:7d:4b:f9:02:77:e6:ec:11:43:ae:0f: b8:3f:86:aa:87:6e:c9:da:86:a9:90:b7:de:f3:02: 8c:34:37:7c:66:9e:14:52:43:5f:bc:ec:33:e8:7e: 8a:73:ea:34:49:e7:8c:c5:ef:7e:00:27:a3:ee:12: e3:14:94:2c:6d:f7:43:cb:0f:04:17:b4:8c:0b:b6: 93:14:33:27:33:9e:ca:76:a0:d2:30:2a:6e:9c:24: af:3a:b4:47:c6:c9:d9:96:1a:8e:d7:c1:23:d5:ac: b2:c6:1b:5c:a7:0d:c0:9b:d5:12:13:2f:9d:c2:8d: cf:0b:f5:44:01:a4:11:68:56:39:c6:05:81:a7:88: 1f:d4:1e:d9:0f:8a:f6:ae:59:4d:1c:da:94:3a:aa: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E4:04:96:18:85:1E:C7:98:59:59:EA:67:D6:0C:A7:04:05:D5:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca31543c-59f4-304f-949c-486abba16339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0b:d2:c5:1d:47:cd:9e:c1:f4:49:27:c1:d8:20:b4:01:a9: 11:03:58:90:86:12:0b:0e:01:01:b9:b5:af:e5:ab:ea:4c:32: 53:d2:fb:83:62:f2:10:df:af:a1:76:8f:14:7b:75:0e:0a:5a: bb:e1:01:2f:cf:45:07:4a:12:e3:60:a8:fe:3f:e2:88:10:7d: 64:a5:62:2f:30:35:c8:3e:ce:64:25:80:08:96:14:cc:d3:bc: 39:ae:22:ba:ea:e6:55:ac:08:c6:2f:90:a7:0c:22:51:3d:8a: c9:c3:2b:0d:52:97:0c:4b:19:02:71:d2:0a:87:4e:8c:43:f6: 04:d2:60:5b:f7:57:6c:c9:39:48:e3:46:86:51:61:33:18:cf: 6f:e7:9a:03:9a:a4:e3:99:db:28:e3:5b:73:74:71:e8:6c:8b: ae:10:d6:d2:23:ec:f5:5e:d3:4f:1a:f0:2d:eb:9c:cd:84:33: ac:e2:ce:1f:b7:44:08:3f:46:cc:eb:44:91:16:5f:21:27:a3: 8b:51:3f:ba:9d:35:cd:a9:3d:58:50:46:a4:54:b8:f3:c7:ae: 8e:f0:ad:21:67:d1:1d:68:6f:f0:ac:c6:aa:ce:e1:c5:70:29: 7b:23:c9:e0:be:6c:1a:bb:34:41:01:c1:a2:25:b5:03:c9:d7: b1:00:80:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmW5feih7mslomZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDUxZGU5OGEtMTVlMy00MDMwLWE4MDItYzgyY2RjN2NiMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9s8A/CDAIxGVbo4NX78ids3ftbLg4Y9NLkG n4D4YQJq7qePTX8xgDfTyo9ut6ZiITvY4wRf91hML1im5U3P1UxFA7lZGX7c7ZBY Nm0nzD/ESO+/UIjDA+1I+C316i5WDVKoC44qZZkRrpEDfUv5Anfm7BFDrg+4P4aq h27J2oapkLfe8wKMNDd8Zp4UUkNfvOwz6H6Kc+o0SeeMxe9+ACej7hLjFJQsbfdD yw8EF7SMC7aTFDMnM57KdqDSMCpunCSvOrRHxsnZlhqO18Ej1ayyxhtcpw3Am9US Ey+dwo3PC/VEAaQRaFY5xgWBp4gf1B7ZD4r2rllNHNqUOqpFYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrkBJYYhR7HmFlZ6mfWDKcEBdWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2EzMTU0M2MtNTlmNC0z MDRmLTk0OWMtNDg2YWJiYTE2MzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9F4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4L0sUdR82ewfRJJ8HYILQBqREDWJCGEgsOAQG5ta/lq+pMMlPS+4Ni 8hDfr6F2jxR7dQ4KWrvhAS/PRQdKEuNgqP4/4ogQfWSlYi8wNcg+zmQlgAiWFMzT vDmuIrrq5lWsCMYvkKcMIlE9isnDKw1SlwxLGQJx0gqHToxD9gTSYFv3V2zJOUjj RoZRYTMYz2/nmgOapOOZ2yjjW3N0cehsi64Q1tIj7PVe008a8C3rnM2EM6zizh+3 RAg/RszrRJEWXyEno4tRP7qdNc2pPVhQRqRUuPPHro7wrSFn0R1ob/CsxqrO4cVw KXsjyeC+bBq7NEEBwaIltQPJ17EAgD8= -----END CERTIFICATE-----Generated at Fri Sep 4 22:24:31 2026 by rpki-client