$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca9d0057-dd74-3699-a83e-e4521709a189.roa File: ca9d0057-dd74-3699-a83e-e4521709a189.roa (raw, json) Hash identifier: uB0czhZa4YNy2P9ZRblCVkwp/9SPM6aRx1WPXAzUD5U= Subject key identifier: F9:8A:AC:28:83:11:25:38:E9:15:50:61:81:20:52:0A:E6:17:FF:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA79A3C8B005FAED281364C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca9d0057-dd74-3699-a83e-e4521709a189.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.63.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:3c:8b:00:5f:ae:d2:81:36:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=10cdab28-00ee-4fed-be39-bc91539bbb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:e0:6f:db:7c:9f:de:84:bf:7b:e3:5f:c7: ea:96:49:d6:86:76:1e:9d:09:a6:c2:58:3d:4c:85: 8e:95:78:55:03:08:41:b3:cb:09:94:0f:1d:00:1d: 6f:90:89:45:d4:1b:49:9e:11:6e:5c:f6:d4:9f:fe: 45:59:7b:35:4d:c7:cc:20:b8:86:30:f7:c0:7e:a0: f6:c2:8a:62:8f:1c:cc:ac:fa:98:fd:51:28:65:ba: 67:fc:11:c2:f1:25:2f:21:23:3f:4e:22:cc:6f:cf: 59:ca:c0:2d:1a:d5:15:fe:fb:1d:d7:fe:b2:4e:78: 84:bb:f2:01:4a:0c:95:c7:b0:8b:ec:10:bd:b5:18: 19:9f:8c:e2:94:45:55:83:1f:cc:fe:2c:e8:d5:d4: aa:a8:b5:b8:ae:5e:20:f2:45:7c:51:f3:18:b0:83: c4:f8:07:0e:83:40:6e:29:5c:f2:97:c5:71:1b:76: 75:0f:66:68:20:c0:07:49:83:33:04:26:2a:99:07: a5:00:a7:a4:26:52:42:20:50:a0:6e:b8:34:6d:90: 58:66:a7:d1:e1:04:30:21:50:f5:d1:a6:a4:da:ea: a6:c5:c2:42:5d:54:e1:79:f4:d3:c8:7c:ec:7f:95: a2:0a:99:7d:81:ea:cf:e2:47:79:86:c0:76:47:2f: 74:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8A:AC:28:83:11:25:38:E9:15:50:61:81:20:52:0A:E6:17:FF:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca9d0057-dd74-3699-a83e-e4521709a189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:4f:a3:eb:35:88:5b:e3:e6:20:38:2d:7a:0f:95:3a:01:aa: f3:e2:ba:ae:99:68:32:78:8d:cb:56:88:39:73:ec:b3:57:fb: af:6c:68:85:21:61:e0:6d:05:26:bc:e3:e7:47:77:41:30:3a: 8a:12:93:37:46:81:ce:2c:74:5c:e8:29:5f:6f:8e:72:03:60: 60:05:97:5f:7b:24:e7:c2:f3:6e:35:47:b6:4a:a5:a9:ea:a3: f5:ff:b4:e1:fa:c2:39:42:d4:be:43:cf:1f:6c:b6:00:0b:cc: 40:72:85:2e:ba:4e:45:c2:a1:4a:f9:e4:d9:2a:3e:71:d5:23: 63:b2:eb:12:06:d0:65:9a:ca:1a:79:6b:a2:53:76:41:4f:5a: 51:6d:75:0d:f5:2e:43:ce:6a:72:4e:6a:a3:e7:78:14:1c:18: f6:0e:d0:0a:b8:0d:6a:de:dd:a3:dd:b3:95:29:94:d0:8f:c0: 81:f8:82:1e:f0:ac:35:26:16:5b:b0:df:7b:d7:8d:c0:8c:11: 2d:3c:58:d5:18:0c:a3:53:01:0e:6c:b4:69:3b:c5:d5:cb:4b: 08:d6:c9:63:dd:6a:f7:da:27:e1:5c:11:80:5a:eb:a3:8e:5d: 36:45:9d:b8:41:4c:88:6d:73:74:ec:03:a2:b5:ea:d8:e5:24: 80:28:63:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmjyLAF+u0oE2TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTBjZGFiMjgtMDBlZS00ZmVkLWJlMzktYmM5MTUzOWJiYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXXgb9t8n96Ev3vjX8fqlknWhnYenQmmwlg9 TIWOlXhVAwhBs8sJlA8dAB1vkIlF1BtJnhFuXPbUn/5FWXs1TcfMILiGMPfAfqD2 wopijxzMrPqY/VEoZbpn/BHC8SUvISM/TiLMb89ZysAtGtUV/vsd1/6yTniEu/IB SgyVx7CL7BC9tRgZn4zilEVVgx/M/izo1dSqqLW4rl4g8kV8UfMYsIPE+AcOg0Bu KVzyl8VxG3Z1D2ZoIMAHSYMzBCYqmQelAKekJlJCIFCgbrg0bZBYZqfR4QQwIVD1 0aak2uqmxcJCXVThefTTyHzsf5WiCpl9gerP4kd5hsB2Ry90OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmKrCiDESU46RVQYYEgUgrmF//DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2E5ZDAwNTctZGQ3NC0z Njk5LWE4M2UtZTQ1MjE3MDlhMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBPo+s1iFvj5iA4LXoPlToBqvPiuq6ZaDJ4jctWiDlz7LNX+69saIUh YeBtBSa84+dHd0EwOooSkzdGgc4sdFzoKV9vjnIDYGAFl197JOfC8241R7ZKpanq o/X/tOH6wjlC1L5Dzx9stgALzEByhS66TkXCoUr55NkqPnHVI2Oy6xIG0GWayhp5 a6JTdkFPWlFtdQ31LkPOanJOaqPneBQcGPYO0Aq4DWre3aPds5UplNCPwIH4gh7w rDUmFluw33vXjcCMES08WNUYDKNTAQ5stGk7xdXLSwjWyWPdavfaJ+FcEYBa66OO XTZFnbhBTIhtc3TsA6K16tjlJIAoY7c= -----END CERTIFICATE-----Generated at Fri Sep 4 22:32:33 2026 by rpki-client