$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dff9e4f2-45c5-34c0-8bf2-48dd00f9adb0.roa File: dff9e4f2-45c5-34c0-8bf2-48dd00f9adb0.roa (raw, json) Hash identifier: Fm+VGfPLqRxc0cfjMnPCnR+DAoj2W+gLflYAjtrvcPc= Subject key identifier: D8:B1:91:54:F2:9D:89:6C:F7:39:ED:0F:9A:22:EB:3D:91:1F:C5:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA798F5490F9350536ACC0A20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dff9e4f2-45c5-34c0-8bf2-48dd00f9adb0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.210.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:f5:49:0f:93:50:53:6a:cc:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3c876a8d-6cca-46ab-be6c-7a23888f2b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:a3:96:ff:e1:c0:82:24:c6:ad:78:95:5d: b0:72:d9:c4:b5:34:f7:8e:87:de:62:51:04:5e:fc: f8:fb:7d:6b:04:61:c6:3b:12:60:20:81:c8:75:c7: 25:f1:b2:61:ff:60:fb:b3:7b:7a:fb:e0:f9:ba:71: 88:19:25:70:8a:ab:ec:20:df:57:9f:03:af:9b:47: a0:c8:7a:63:ab:4f:9b:eb:40:66:6a:5d:6f:b2:68: 97:59:58:3e:7b:e3:58:8f:b9:f6:c2:08:b3:96:06: 7f:65:1e:73:a2:b7:e8:55:f1:2f:1e:36:4f:40:5d: cb:30:d2:b1:ae:b0:9d:ac:78:f3:71:d9:f3:db:93: d3:59:6f:ca:13:64:7b:61:6e:3c:3d:1b:5e:cc:10: 6a:79:7b:24:ee:d5:46:9c:90:7f:32:38:7e:55:64: 89:58:ac:c5:99:70:61:be:15:bb:01:9f:2b:46:75: f4:97:89:26:ce:97:98:42:7e:4b:56:8e:e6:c4:f2: 28:dc:e8:93:81:6f:02:a0:95:02:b9:43:18:e0:a7: 0a:29:76:b9:c5:10:bd:b5:ed:16:3c:fe:d7:21:f3: c4:7e:80:63:24:59:4d:27:23:76:2b:0b:da:9c:58: a8:7c:f7:da:2c:3f:59:84:a7:85:c3:51:90:cc:72: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B1:91:54:F2:9D:89:6C:F7:39:ED:0F:9A:22:EB:3D:91:1F:C5:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dff9e4f2-45c5-34c0-8bf2-48dd00f9adb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:d6:93:84:ff:09:7f:11:9f:a1:06:b4:15:09:ab:8f:70:5f: a5:53:d6:a8:10:01:bb:f7:fc:66:96:67:54:6e:89:0a:44:20: 0b:7e:ce:fa:05:5f:e0:af:d1:fe:4d:fb:19:bd:d9:d6:c0:87: 51:b4:74:2e:8c:73:98:4d:07:83:93:15:1b:08:69:49:a4:c5: 54:57:68:a8:74:2b:90:0f:62:e4:f9:7c:83:4d:7f:c9:51:f0: 7a:77:90:b7:af:d7:5d:70:40:30:2f:df:c7:d1:3b:f1:d8:8f: 8d:2c:45:ee:66:57:75:0f:50:ff:bb:cb:ef:e2:ab:f0:ed:d8: fc:f6:de:57:24:8f:f5:dc:26:2f:4d:d1:f8:79:f2:bf:24:0b: b6:33:70:94:91:e3:49:a5:d5:58:ea:de:04:2c:6d:02:49:32: 2d:45:92:6d:9c:c9:44:8c:64:3e:90:4a:43:a9:c9:9a:60:ff: d5:79:e6:cb:bd:40:f5:54:74:7b:bf:76:04:7a:4e:a2:fa:fb: 8a:2b:c0:1e:b1:aa:f8:7e:83:4a:bf:c4:d1:83:2f:e0:c0:81: ec:b6:d8:3d:ec:20:b3:bd:e6:82:70:81:6e:9c:36:f4:c5:9a: 2d:02:30:21:6e:b5:45:4b:d2:41:ff:60:dd:c1:a7:d5:64:f4: 1f:6c:6c:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmPVJD5NQU2rMCiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2M4NzZhOGQtNmNjYS00NmFiLWJlNmMtN2EyMzg4OGYyYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd6jlv/hwIIkxq14lV2wctnEtTT3jofeYlEE Xvz4+31rBGHGOxJgIIHIdccl8bJh/2D7s3t6++D5unGIGSVwiqvsIN9XnwOvm0eg yHpjq0+b60Bmal1vsmiXWVg+e+NYj7n2wgizlgZ/ZR5zorfoVfEvHjZPQF3LMNKx rrCdrHjzcdnz25PTWW/KE2R7YW48PRtezBBqeXsk7tVGnJB/Mjh+VWSJWKzFmXBh vhW7AZ8rRnX0l4kmzpeYQn5LVo7mxPIo3OiTgW8CoJUCuUMY4KcKKXa5xRC9te0W PP7XIfPEfoBjJFlNJyN2KwvanFiofPfaLD9ZhKeFw1GQzHL/xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNixkVTynYls9zntD5oi6z2RH8WwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZmOWU0ZjItNDVjNS0z NGMwLThiZjItNDhkZDAwZjlhZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9IEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjWk4T/CX8Rn6EGtBUJq49wX6VT1qgQAbv3/GaWZ1RuiQpEIAt+zvoF X+Cv0f5N+xm92dbAh1G0dC6Mc5hNB4OTFRsIaUmkxVRXaKh0K5APYuT5fINNf8lR 8Hp3kLev111wQDAv38fRO/HYj40sRe5mV3UPUP+7y+/iq/Dt2Pz23lckj/XcJi9N 0fh58r8kC7YzcJSR40ml1Vjq3gQsbQJJMi1Fkm2cyUSMZD6QSkOpyZpg/9V55su9 QPVUdHu/dgR6TqL6+4orwB6xqvh+g0q/xNGDL+DAgey22D3sILO95oJwgW6cNvTF mi0CMCFutUVL0kH/YN3Bp9Vk9B9sbPo= -----END CERTIFICATE-----Generated at Fri Sep 4 22:45:29 2026 by rpki-client