$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca448860-2ef3-3c07-98b0-d502ee2deb63.roa File: ca448860-2ef3-3c07-98b0-d502ee2deb63.roa (raw, json) Hash identifier: HHaTDWmHkc2DwQdBSwfa5Cnpe+6LGvzk6sEeL30aJDI= Subject key identifier: 70:08:EB:F7:6C:A5:C5:BC:31:7D:0A:B1:7F:E0:D4:DF:E5:5A:86:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF44CCA2411B66749E00DFC90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca448860-2ef3-3c07-98b0-d502ee2deb63.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.210.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ca:24:11:b6:67:49:e0:0d:fc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=7543d852-77c8-4b89-9991-7010521b3d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:82:2a:4f:1b:cc:ed:6f:33:90:67:a6:72:9f: 80:51:51:28:67:41:a4:3a:d2:84:32:23:d7:f9:3d: a6:4e:97:02:f6:26:8f:a0:49:bd:4e:74:d3:3c:c4: c8:05:e0:47:84:33:c8:b5:31:df:a2:f6:ee:5c:4f: 25:06:a5:6c:0d:8d:20:a6:e7:8f:f1:37:75:e7:3a: 8d:89:01:60:f6:10:70:a1:85:b4:82:a8:0b:02:e1: bd:fa:73:34:df:4b:f5:aa:a6:22:07:d0:36:21:44: 41:90:82:a7:0b:1b:92:a5:79:e1:30:b4:1a:67:3f: 6a:67:e4:d9:9f:6e:c1:db:bf:b0:9b:15:25:7f:d8: 80:d9:b1:d8:fa:31:e9:91:c6:6c:57:36:c0:81:fa: 18:dc:3e:40:fa:0d:ab:3a:6e:26:ba:b4:55:61:a8: b0:ac:95:06:05:9b:82:a9:2c:f3:ac:d8:ca:34:10: f6:92:ed:3a:92:32:db:d9:32:34:73:54:89:1f:54: 5a:4c:6b:73:6f:ae:68:2b:54:72:b8:a2:fc:53:22: 45:34:ea:af:38:73:80:72:0b:ba:ed:87:29:90:e7: dc:20:0d:86:15:7a:d3:26:91:2b:80:10:e3:9b:a2: 76:b2:91:1a:61:24:41:b5:25:1f:2c:4e:97:6c:59: 7d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:08:EB:F7:6C:A5:C5:BC:31:7D:0A:B1:7F:E0:D4:DF:E5:5A:86:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca448860-2ef3-3c07-98b0-d502ee2deb63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:49:6f:9f:92:50:ea:9a:1e:53:84:3a:93:ae:cd:a4:55:88: 1d:3d:54:58:08:4a:b3:f2:03:75:26:a3:04:08:41:f1:d7:41: db:9c:15:50:e3:7f:f0:c2:dd:28:2c:1d:17:2e:19:4e:3d:c0: a2:bf:82:5b:78:65:6b:f1:4c:fb:7e:f2:eb:85:7e:b2:c7:5b: 46:85:cd:e1:97:53:65:be:b7:4e:b5:e1:bc:c9:2d:93:6e:8c: d7:e4:1c:42:e2:75:12:98:4c:a4:72:04:a9:82:72:c0:1f:95: 28:1f:00:b4:62:7c:e9:2e:07:5f:ed:49:60:f2:3f:1a:54:34: eb:ee:60:34:3b:81:83:ce:4e:9f:6d:28:ad:c8:f9:87:e3:04: 4a:c0:e4:d8:01:5c:9a:f2:19:1a:aa:de:34:d4:f6:12:50:d0: ac:59:e4:ea:8b:b9:03:28:13:2f:c8:54:e3:10:fa:54:c3:c1: 20:68:8c:8d:60:30:2f:c4:0f:1f:1b:08:0d:e8:ea:9b:40:4b: 9b:c6:8f:1d:d8:b7:17:bb:7c:b1:5d:74:23:58:b9:fb:94:bb: 39:07:df:55:35:70:6c:9a:85:50:c6:f9:0a:61:e9:f2:fc:ae: 52:ce:36:f6:66:e1:5e:b1:c7:b9:6d:f0:82:9c:58:65:7a:9a: 8c:b2:65:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMokEbZnSeAN/JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk NzU0M2Q4NTItNzdjOC00Yjg5LTk5OTEtNzAxMDUyMWIzZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloIqTxvM7W8zkGemcp+AUVEoZ0GkOtKEMiPX +T2mTpcC9iaPoEm9TnTTPMTIBeBHhDPItTHfovbuXE8lBqVsDY0gpueP8Td15zqN iQFg9hBwoYW0gqgLAuG9+nM030v1qqYiB9A2IURBkIKnCxuSpXnhMLQaZz9qZ+TZ n27B27+wmxUlf9iA2bHY+jHpkcZsVzbAgfoY3D5A+g2rOm4murRVYaiwrJUGBZuC qSzzrNjKNBD2ku06kjLb2TI0c1SJH1RaTGtzb65oK1RyuKL8UyJFNOqvOHOAcgu6 7YcpkOfcIA2GFXrTJpErgBDjm6J2spEaYSRBtSUfLE6XbFl9PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAI6/dspcW8MX0KsX/g1N/lWoZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2E0NDg4NjAtMmVmMy0z YzA3LTk4YjAtZDUwMmVlMmRlYjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9LZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABJb5+SUOqaHlOEOpOuzaRViB09VFgISrPyA3UmowQIQfHXQducFVDj f/DC3SgsHRcuGU49wKK/glt4ZWvxTPt+8uuFfrLHW0aFzeGXU2W+t0614bzJLZNu jNfkHELidRKYTKRyBKmCcsAflSgfALRifOkuB1/tSWDyPxpUNOvuYDQ7gYPOTp9t KK3I+YfjBErA5NgBXJryGRqq3jTU9hJQ0KxZ5OqLuQMoEy/IVOMQ+lTDwSBojI1g MC/EDx8bCA3o6ptAS5vGjx3Ytxe7fLFddCNYufuUuzkH31U1cGyahVDG+Qph6fL8 rlLONvZm4V6xx7lt8IKcWGV6moyyZeA= -----END CERTIFICATE-----Generated at Fri Sep 4 22:32:18 2026 by rpki-client