$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cee8ed3b-927f-3921-b786-5da571dae1a1.roa File: cee8ed3b-927f-3921-b786-5da571dae1a1.roa (raw, json) Hash identifier: y2pMmra8Vt8CvhVqjzPgQmAEsn99nQLE11z1ZrPMcNA= Subject key identifier: 34:CC:39:65:B6:B4:0F:75:5B:7E:0D:08:AC:FF:17:06:03:30:E3:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81ABECD1B2A3DD897B4A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cee8ed3b-927f-3921-b786-5da571dae1a1.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.223.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:ab:ec:d1:b2:a3:dd:89:7b:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=c029aa9c-0793-4ac8-a34c-e2879f195d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:fc:59:92:85:87:b7:cb:34:56:f9:d1:17: 23:f9:4a:ea:52:d1:80:8b:fa:4b:1e:ce:ca:2b:c1: 49:f4:b6:69:3a:91:6f:1a:37:0c:71:33:0e:5f:a1: 24:58:b3:0d:7d:90:29:8f:21:b1:df:c6:21:ce:f8: 7a:d7:b5:ef:aa:70:6b:47:cf:21:8d:88:da:65:51: 05:51:5f:55:aa:c9:a5:c6:ed:67:4c:bf:1d:81:a4: 11:f9:3e:a6:16:2f:77:b4:24:c6:41:b6:6f:c6:3f: 68:a5:0c:91:f4:ee:b5:5f:af:de:86:e4:bb:76:5a: 06:a4:85:a6:73:9e:83:e3:ef:27:1e:9e:26:8f:ee: 74:f0:2d:ad:7b:fc:15:4f:44:cc:cd:ec:fe:c5:d8: a9:98:18:c7:d6:2f:b9:1c:58:0b:f1:e3:e9:a2:25: 64:98:85:bf:14:f2:5a:29:3d:29:27:35:4c:78:02: 58:f0:3a:f4:cd:94:5f:4d:00:88:b7:b6:32:56:e9: 15:11:a1:02:b5:d5:72:70:2b:09:9c:7b:f1:0a:3c: e3:38:83:f6:e0:78:26:9d:dc:ea:49:9c:3a:1e:d1: da:e6:a7:ab:bb:09:68:b8:4d:40:6a:ea:0f:b2:bc: 65:84:18:73:24:f9:2f:d6:6c:05:37:f3:7e:6e:27: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:39:65:B6:B4:0F:75:5B:7E:0D:08:AC:FF:17:06:03:30:E3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cee8ed3b-927f-3921-b786-5da571dae1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9f:9e:bd:19:65:8d:18:7d:4c:21:a8:2e:08:49:cc:7b:a8: 80:ad:54:7c:5d:52:ad:18:db:3f:7a:eb:6c:b4:70:20:b5:bc: 28:96:d0:a0:e3:92:80:f4:69:e6:7e:cc:48:32:da:98:03:a0: 86:86:c7:80:3c:5f:e4:a9:de:06:86:ab:f3:0d:d9:db:f9:05: 09:1c:25:c6:b7:26:5c:a7:fa:03:ab:f1:e3:96:9d:13:a3:38: a8:02:ce:f6:a4:ab:5b:d8:4b:dc:45:3b:6a:04:39:6e:45:f6: b5:ad:85:06:14:f6:c3:dc:93:44:39:9d:e5:3a:b3:b3:c6:9f: ce:e4:67:6d:38:a7:b7:f7:a8:ba:21:a1:c1:e1:33:7f:ca:53: 1d:81:d0:93:1e:fc:70:a6:c9:75:9e:64:a2:3b:78:c1:19:25: e3:c6:94:97:d3:6b:2b:80:8d:8d:74:c9:4e:58:a2:ba:a4:26: f6:6f:aa:e5:34:fd:d6:34:66:9c:64:1d:72:c4:47:1b:18:86: 75:09:e4:78:ac:9a:a9:fd:25:3c:38:00:d5:73:e1:26:6b:84: 4a:34:72:31:d8:2b:4f:7a:e1:c9:11:ab:b1:47:d8:2e:96:f7: e4:46:9e:4a:f2:94:e2:6a:36:08:ff:42:26:e2:ae:7d:51:4a: 22:59:27:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugavs0bKj3Yl7SgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk YzAyOWFhOWMtMDc5My00YWM4LWEzNGMtZTI4NzlmMTk1ZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2n8WZKFh7fLNFb50Rcj+UrqUtGAi/pLHs7K K8FJ9LZpOpFvGjcMcTMOX6EkWLMNfZApjyGx38Yhzvh617XvqnBrR88hjYjaZVEF UV9Vqsmlxu1nTL8dgaQR+T6mFi93tCTGQbZvxj9opQyR9O61X6/ehuS7dloGpIWm c56D4+8nHp4mj+508C2te/wVT0TMzez+xdipmBjH1i+5HFgL8ePpoiVkmIW/FPJa KT0pJzVMeAJY8Dr0zZRfTQCIt7YyVukVEaECtdVycCsJnHvxCjzjOIP24Hgmndzq SZw6HtHa5qeruwlouE1AauoPsrxlhBhzJPkv1mwFN/N+bicZNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTMOWW2tA91W34NCKz/FwYDMOP/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2VlOGVkM2ItOTI3Zi0z OTIxLWI3ODYtNWRhNTcxZGFlMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqfnr0ZZY0YfUwhqC4IScx7qICtVHxdUq0Y2z9662y0cCC1vCiW0KDj koD0aeZ+zEgy2pgDoIaGx4A8X+Sp3gaGq/MN2dv5BQkcJca3Jlyn+gOr8eOWnROj OKgCzvakq1vYS9xFO2oEOW5F9rWthQYU9sPck0Q5neU6s7PGn87kZ204p7f3qLoh ocHhM3/KUx2B0JMe/HCmyXWeZKI7eMEZJePGlJfTayuAjY10yU5YorqkJvZvquU0 /dY0ZpxkHXLERxsYhnUJ5Hismqn9JTw4ANVz4SZrhEo0cjHYK0964ckRq7FH2C6W 9+RGnkrylOJqNgj/Qibirn1RSiJZJ10= -----END CERTIFICATE-----Generated at Fri Sep 4 22:21:54 2026 by rpki-client