$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7b5a232-0a5b-3fee-b7a7-76db7f824217.roa File: d7b5a232-0a5b-3fee-b7a7-76db7f824217.roa (raw, json) Hash identifier: vUcQ78rqNihdPxnZwxRltYNIpYX/fxM3t8jFfDdAwno= Subject key identifier: C4:D5:4B:F3:A4:A5:F8:1F:EC:0D:02:72:BF:2D:E0:CD:DB:D5:76:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF87CD85CF027E4F348B19880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7b5a232-0a5b-3fee-b7a7-76db7f824217.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.67.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:d8:5c:f0:27:e4:f3:48:b1:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=f1a9f0e2-f81f-48ca-9d48-46eb811192e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:53:c3:da:ee:5d:de:b8:eb:82:22:1e:b6: 9e:9e:f5:ba:e3:3b:3b:b7:95:c5:48:db:7e:38:02: fa:42:ef:45:a3:8b:50:63:23:19:6d:49:19:b7:0b: 59:49:99:51:28:ea:5a:34:92:de:70:47:37:43:3f: f7:b5:f7:8a:90:e5:f9:01:68:6d:f0:d8:55:ff:78: c1:04:ae:ce:46:6f:a5:19:0a:bf:0f:57:3c:58:5c: fb:8c:18:9a:93:b2:2c:59:86:a4:ae:2d:33:07:a5: 41:be:aa:0c:47:74:f2:09:e1:5e:1a:b1:ee:d4:ac: 60:f5:5a:33:2b:0d:b7:2a:ee:b1:11:e9:62:d8:81: 30:93:04:6b:8e:5c:b3:05:b7:5b:37:9c:4d:ec:e4: ff:6b:7d:31:2b:15:70:dc:25:30:15:dc:6d:5d:e5: 39:73:4e:f7:5a:3d:ba:0b:64:56:01:10:88:5f:ff: f7:a1:6b:c1:23:97:75:91:53:8a:ad:2f:57:66:84: 8e:ac:86:0b:d9:ad:47:2b:d2:ce:78:00:76:b8:88: 55:79:69:d2:e8:d6:fd:3f:ae:c2:36:f7:97:ce:37: 72:9b:22:56:ae:c9:90:49:6c:a0:ed:7a:8f:d8:c8: fb:e3:5b:ab:c4:e0:85:f4:4a:5c:13:54:f0:d0:6e: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D5:4B:F3:A4:A5:F8:1F:EC:0D:02:72:BF:2D:E0:CD:DB:D5:76:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7b5a232-0a5b-3fee-b7a7-76db7f824217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:73:a2:e7:75:9b:f9:a8:ac:42:4d:0b:9e:c2:1a:ff:c0:4b: 4c:b0:c7:df:f6:0a:3b:64:88:b3:02:ff:15:c9:7b:96:92:89: a3:ba:89:06:c8:63:1e:cd:dd:b4:58:c7:a9:de:92:16:ea:e4: 4a:f5:36:03:8e:c3:4f:62:c8:32:1c:47:f6:e6:60:3a:ad:cc: 95:92:6b:96:ca:5a:44:51:e9:1a:5f:8d:db:a9:8a:f4:06:bc: 78:62:20:e0:3d:a9:ca:70:73:5e:73:d8:42:1c:90:fe:20:67: 7a:b5:a5:2d:64:17:97:ed:e0:3a:37:64:03:5e:fd:1f:90:7b: 90:cc:c6:95:0e:d2:ff:de:79:7d:71:39:fa:81:36:96:c3:e1: cf:0d:b0:7d:06:eb:af:f8:71:ac:2b:f9:ed:d2:20:02:53:62: 19:f0:43:3b:df:fa:43:fb:3e:e4:23:25:53:21:48:a4:b1:d3: 22:f3:28:de:24:53:e5:e2:aa:79:f1:11:62:5d:be:28:6e:2f: 6f:1f:e1:e7:71:20:bf:49:3d:d6:fc:94:5e:cc:6b:31:67:6a: 67:ac:c8:26:a6:2c:53:39:34:2d:a4:05:57:54:4b:e6:66:38: 0d:78:20:e5:d1:98:9b:7f:e3:f1:d0:9a:33:a3:02:a1:55:86: 1d:c7:28:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fNhc8Cfk80ixmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZjFhOWYwZTItZjgxZi00OGNhLTlkNDgtNDZlYjgxMTE5MmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry1Tw9ruXd6464IiHraenvW64zs7t5XFSNt+ OAL6Qu9Fo4tQYyMZbUkZtwtZSZlRKOpaNJLecEc3Qz/3tfeKkOX5AWht8NhV/3jB BK7ORm+lGQq/D1c8WFz7jBiak7IsWYakri0zB6VBvqoMR3TyCeFeGrHu1Kxg9Voz Kw23Ku6xEeli2IEwkwRrjlyzBbdbN5xN7OT/a30xKxVw3CUwFdxtXeU5c073Wj26 C2RWARCIX//3oWvBI5d1kVOKrS9XZoSOrIYL2a1HK9LOeAB2uIhVeWnS6Nb9P67C NveXzjdymyJWrsmQSWyg7XqP2Mj741urxOCF9EpcE1Tw0G5njwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTVS/Okpfgf7A0Ccr8t4M3b1XbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDdiNWEyMzItMGE1Yi0z ZmVlLWI3YTctNzZkYjdmODI0MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0NPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNzoud1m/morEJNC57CGv/AS0ywx9/2CjtkiLMC/xXJe5aSiaO6iQbI Yx7N3bRYx6nekhbq5Er1NgOOw09iyDIcR/bmYDqtzJWSa5bKWkRR6RpfjdupivQG vHhiIOA9qcpwc15z2EIckP4gZ3q1pS1kF5ft4Do3ZANe/R+Qe5DMxpUO0v/eeX1x OfqBNpbD4c8NsH0G66/4cawr+e3SIAJTYhnwQzvf+kP7PuQjJVMhSKSx0yLzKN4k U+XiqnnxEWJdvihuL28f4edxIL9JPdb8lF7MazFnamesyCamLFM5NC2kBVdUS+Zm OA14IOXRmJt/4/HQmjOjAqFVhh3HKMM= -----END CERTIFICATE-----Generated at Sat Sep 5 07:16:30 2026 by rpki-client