$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa File: dca916ca-ad90-3431-af73-4909a30fd958.roa (raw, json) Hash identifier: alaTy8mvMgyKOaT72PWyZdHczDfzWxDFoHx/7VVrjrI= Subject key identifier: EC:CF:01:B9:7E:DC:FD:E1:1E:E7:05:09:95:00:34:19:56:FA:27:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF87CB932487985F3718D8780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.3.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:b9:32:48:79:85:f3:71:8d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=1e7190fd-bdff-4fb9-87c6-b061fe2b95ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:f0:42:58:fc:91:89:a6:67:33:56:d1:28: 18:c4:98:52:51:8d:5c:c5:3b:89:65:bd:83:72:89: 30:10:59:2a:05:20:d0:25:7f:a9:4b:53:3b:77:54: df:cf:a9:d2:c3:72:30:e7:1c:1d:e3:52:26:51:0e: 23:4d:f5:aa:dc:d6:6c:15:d2:b5:28:ca:40:a8:7a: ba:17:81:3e:e7:bd:7f:ee:0f:56:e7:cd:37:92:1c: 4f:1e:e2:1a:6c:bd:5a:60:dc:79:a0:0f:4c:74:c4: 98:f3:f9:69:04:f9:d6:98:16:54:18:19:6f:1d:5c: 9a:44:a2:30:a0:83:24:15:79:3d:40:4e:41:be:5a: 5e:f5:67:3f:34:97:d9:b5:45:06:07:44:b1:80:18: 02:e9:fc:45:b4:45:5c:6e:52:7c:97:fa:c8:59:a2: 86:3b:1b:1c:25:22:70:f3:36:09:49:a4:61:db:0c: a0:33:e0:13:f0:42:9f:28:3d:43:a3:fc:37:51:17: 65:f3:0e:c5:fb:87:eb:28:ef:bd:d6:16:0c:9e:33: ad:d8:29:89:62:ff:f5:1c:7b:85:5c:4b:a7:98:91: 0b:a7:64:97:fe:1c:b5:2b:c8:51:22:a1:e1:8d:b1: 85:d9:dc:8c:47:49:2f:b1:ac:45:13:75:06:fc:a8: 1b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CF:01:B9:7E:DC:FD:E1:1E:E7:05:09:95:00:34:19:56:FA:27:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dca916ca-ad90-3431-af73-4909a30fd958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f1:47:60:1b:46:ab:a5:8c:2f:6c:7b:52:43:46:5d:a3:c6: 6f:71:3f:dd:05:78:a4:b9:1a:42:36:62:ed:ed:16:ee:b4:b9: 50:84:42:75:17:16:94:55:0b:d5:ba:73:d4:fb:c8:c5:44:f0: 6f:ad:63:11:b3:27:9f:11:4c:0e:53:bd:54:34:69:4b:25:c5: f1:e3:5f:d0:18:d0:9d:7e:c5:0c:6e:30:f4:01:5a:1f:15:1d: b6:15:2b:05:a6:98:77:1c:9b:ad:fa:8a:7e:74:76:69:8a:f4: 23:db:b5:41:82:02:72:6e:da:89:ae:ae:eb:db:60:62:84:b0: d2:a4:1c:51:38:3e:9e:d5:d7:97:5a:11:28:62:7e:6e:8b:ea: c7:58:f3:e3:b9:50:8f:c2:2b:e5:92:15:6d:69:69:9d:0a:fd: e4:82:44:f8:fe:77:6c:2f:53:c2:8d:60:d2:0b:b4:65:4f:55: ba:06:7b:0c:ff:50:82:b8:95:4e:c1:14:ea:c1:76:f9:1b:11: 31:2e:45:7e:97:7e:c5:d9:b9:78:13:e3:cd:e7:9a:6d:da:c0: e8:ee:0d:d2:26:b2:cc:06:47:d7:38:d4:b2:4b:9a:16:f8:ec: 8f:db:f4:b9:2c:a5:ff:73:0a:c3:37:46:05:ce:17:b4:45:00: 83:bd:48:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLkySHmF83GNh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk MWU3MTkwZmQtYmRmZi00ZmI5LTg3YzYtYjA2MWZlMmI5NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKTwQlj8kYmmZzNW0SgYxJhSUY1cxTuJZb2D cokwEFkqBSDQJX+pS1M7d1Tfz6nSw3Iw5xwd41ImUQ4jTfWq3NZsFdK1KMpAqHq6 F4E+571/7g9W5803khxPHuIabL1aYNx5oA9MdMSY8/lpBPnWmBZUGBlvHVyaRKIw oIMkFXk9QE5Bvlpe9Wc/NJfZtUUGB0SxgBgC6fxFtEVcblJ8l/rIWaKGOxscJSJw 8zYJSaRh2wygM+AT8EKfKD1Do/w3URdl8w7F+4frKO+91hYMnjOt2CmJYv/1HHuF XEunmJELp2SX/hy1K8hRIqHhjbGF2dyMR0kvsaxFE3UG/KgbOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzPAbl+3P3hHucFCZUANBlW+ieOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGNhOTE2Y2EtYWQ5MC0z NDMxLWFmNzMtNDkwOWEzMGZkOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrxR2AbRquljC9se1JDRl2jxm9xP90FeKS5GkI2Yu3tFu60uVCEQnUX FpRVC9W6c9T7yMVE8G+tYxGzJ58RTA5TvVQ0aUslxfHjX9AY0J1+xQxuMPQBWh8V HbYVKwWmmHccm636in50dmmK9CPbtUGCAnJu2omuruvbYGKEsNKkHFE4Pp7V15da EShifm6L6sdY8+O5UI/CK+WSFW1paZ0K/eSCRPj+d2wvU8KNYNILtGVPVboGewz/ UIK4lU7BFOrBdvkbETEuRX6XfsXZuXgT483nmm3awOjuDdImsswGR9c41LJLmhb4 7I/b9Lkspf9zCsM3RgXOF7RFAIO9SOo= -----END CERTIFICATE-----Generated at Fri Sep 4 22:46:43 2026 by rpki-client