$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/deecf598-4a1c-346c-85ae-9e839d39666c.roa File: deecf598-4a1c-346c-85ae-9e839d39666c.roa (raw, json) Hash identifier: proXsfMBNr1d8Wzty6ujFqO2OA8RO4aTy0Nmj01ZtLk= Subject key identifier: 5B:A2:0E:C2:91:5E:52:6E:D5:10:E7:59:8E:86:0A:FA:90:A9:D7:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7982999FF66814D34BCA7C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/deecf598-4a1c-346c-85ae-9e839d39666c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.206.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:29:99:ff:66:81:4d:34:bc:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=996e7de3-26c4-46c4-898a-4bdf6581272a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f1:61:56:fd:8d:36:89:4f:dc:97:51:f1:15: 77:4a:9c:37:25:09:4a:fb:72:b2:cd:e4:30:7d:33: 95:8f:c6:29:17:76:f6:0a:e8:da:73:fd:e8:d5:fa: e9:65:2f:24:53:08:8e:6b:30:65:21:1c:2c:4b:8a: fd:bf:8d:22:bf:22:15:5b:2a:04:10:fc:85:4e:fe: 1a:ff:88:93:48:79:d1:6a:52:df:48:0e:8e:95:5e: 16:f3:a0:7e:2e:08:20:21:87:79:09:94:17:7a:8e: 86:7e:8d:bb:df:fb:1d:54:12:1f:95:fc:1e:66:16: 45:f9:84:c5:52:bb:50:4f:8c:3a:af:c6:37:f6:33: ba:a5:32:b7:ba:a5:71:8f:9b:24:55:9a:81:ee:41: ec:07:c6:1b:41:09:8a:08:3b:44:bd:29:91:39:e1: d0:a8:5e:0e:b0:94:85:4c:8b:d5:f1:7a:59:8b:02: 04:ad:9f:ee:3f:a5:80:ac:6f:c6:03:5e:16:cf:15: e3:9a:63:c3:4a:f0:10:fb:27:0e:53:2f:b6:b0:66: ec:99:8a:76:06:eb:e8:b6:17:00:3d:11:f6:3b:c2: c0:38:33:0c:46:82:84:4a:78:42:f4:f3:50:cb:90: d4:05:92:5b:67:a2:e9:b7:38:e9:2c:4d:b7:d1:aa: 16:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A2:0E:C2:91:5E:52:6E:D5:10:E7:59:8E:86:0A:FA:90:A9:D7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/deecf598-4a1c-346c-85ae-9e839d39666c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:88:45:58:fd:99:e5:16:db:95:44:d0:0b:8b:6d:62:87:5e: 1f:68:f1:f1:66:eb:7f:a7:78:37:6e:b7:2b:0b:f3:b3:c0:a0: 73:75:59:1e:c2:a7:3b:7b:f3:86:1c:81:f2:2a:ca:e7:74:ba: c8:7e:46:74:ab:6e:68:d9:c1:fa:fb:e4:03:87:c1:16:57:63: b6:0c:bd:de:0b:df:b2:16:60:18:92:a6:c5:1b:5d:fb:f1:35: df:7a:5d:a2:4e:0d:22:c7:4b:33:bb:c6:43:49:9d:9c:d7:f9: 4b:93:48:7a:0b:f8:b9:07:3b:97:1f:83:22:70:d9:e3:c0:ca: 1a:11:3d:45:37:03:06:7e:51:c7:ac:1c:96:29:a7:57:b3:7b: 67:d8:dc:08:ac:21:b9:69:2e:82:9b:a2:e8:0f:ea:88:5b:83: f5:1f:9d:67:c2:7f:c3:f7:6f:25:43:94:88:65:0c:8c:51:0e: 34:a8:37:b1:93:12:63:ff:3b:56:18:04:44:2d:f4:c2:34:f5: a1:ad:37:6d:43:52:e0:a5:58:e2:4e:66:c0:15:5e:43:74:6c: d8:cb:19:f6:cd:06:5a:37:a4:5a:f1:91:90:21:0a:2a:0d:79: fa:d9:62:24:b5:00:1a:2f:ca:7c:fa:cc:b8:ec:6d:d0:f3:36: 23:e8:91:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmCmZ/2aBTTS8p8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTk2ZTdkZTMtMjZjNC00NmM0LTg5OGEtNGJkZjY1ODEyNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/FhVv2NNolP3JdR8RV3Spw3JQlK+3KyzeQw fTOVj8YpF3b2Cujac/3o1frpZS8kUwiOazBlIRwsS4r9v40ivyIVWyoEEPyFTv4a /4iTSHnRalLfSA6OlV4W86B+LgggIYd5CZQXeo6Gfo273/sdVBIflfweZhZF+YTF UrtQT4w6r8Y39jO6pTK3uqVxj5skVZqB7kHsB8YbQQmKCDtEvSmROeHQqF4OsJSF TIvV8XpZiwIErZ/uP6WArG/GA14WzxXjmmPDSvAQ+ycOUy+2sGbsmYp2BuvothcA PRH2O8LAODMMRoKESnhC9PNQy5DUBZJbZ6LptzjpLE230aoWHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuiDsKRXlJu1RDnWY6GCvqQqdfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGVlY2Y1OTgtNGExYy0z NDZjLTg1YWUtOWU4MzlkMzk2NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF86qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaIRVj9meUW25VE0AuLbWKHXh9o8fFm63+neDdutysL87PAoHN1WR7C pzt784YcgfIqyud0ush+RnSrbmjZwfr75AOHwRZXY7YMvd4L37IWYBiSpsUbXfvx Nd96XaJODSLHSzO7xkNJnZzX+UuTSHoL+LkHO5cfgyJw2ePAyhoRPUU3AwZ+Uces HJYpp1eze2fY3AisIblpLoKbougP6ohbg/UfnWfCf8P3byVDlIhlDIxRDjSoN7GT EmP/O1YYBEQt9MI09aGtN21DUuClWOJOZsAVXkN0bNjLGfbNBlo3pFrxkZAhCioN efrZYiS1ABovynz6zLjsbdDzNiPokY0= -----END CERTIFICATE-----Generated at Sat Sep 5 06:12:38 2026 by rpki-client