$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3aafe85-c8b6-3789-be4c-594350312c1d.roa File: e3aafe85-c8b6-3789-be4c-594350312c1d.roa (raw, json) Hash identifier: LRH8ofYwTjxg9TEs4jWItFkosbVliNUEokke0juAzRQ= Subject key identifier: 7E:2D:81:5E:13:5F:1A:F5:41:05:E9:8D:50:2D:31:58:6E:5C:74:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA788135454BDCBD3CBEEC880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3aafe85-c8b6-3789-be4c-594350312c1d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 34164 IP address blocks: 23.214.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:13:54:54:bd:cb:d3:cb:ee:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bbd7dfe1-a3aa-4ae0-a649-1a12e60cf4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:83:29:ba:89:bd:41:30:85:83:89:2e:14:c9: 5c:37:60:f0:b7:d5:0d:f6:2a:35:01:8f:eb:c4:d2: bd:59:72:58:8d:aa:92:4d:15:e6:f4:8d:53:58:bb: ae:7a:73:7e:ca:68:ac:9b:cf:0d:a5:70:50:ed:be: 2a:1f:dc:8f:52:65:a0:97:51:8e:5e:86:04:f7:c2: 12:59:8c:08:ab:87:1a:5d:c3:bc:2a:2a:6d:01:c7: f3:8d:12:90:d5:f3:b1:b1:06:f8:5f:47:29:e7:c9: aa:e1:6b:17:26:9d:3f:61:9a:81:3f:eb:c1:9e:20: 0d:e6:8e:20:e6:99:38:f3:54:54:5f:c6:4e:bc:80: 3d:1d:1f:69:37:da:59:3e:f3:c9:65:ee:f1:9b:f2: 09:7f:2c:9f:9f:29:ba:df:68:02:e1:d6:31:6a:6b: 12:de:19:54:bd:82:55:ce:1a:5e:7e:81:62:c1:3b: 29:b8:84:6f:5b:2d:b2:e6:0a:ac:48:b2:42:0d:17: 61:a2:f1:0e:74:4a:c6:e3:9f:5d:fd:cf:39:93:d7: f2:c0:84:28:92:0b:34:d3:53:f1:59:15:63:6e:4f: 7e:79:b6:b8:dd:73:59:d8:dc:69:b1:93:e8:68:99: 8f:94:41:bc:41:a2:98:15:95:94:dc:f9:e6:00:c8: 59:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2D:81:5E:13:5F:1A:F5:41:05:E9:8D:50:2D:31:58:6E:5C:74:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3aafe85-c8b6-3789-be4c-594350312c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:80:8e:4b:8d:9a:9f:93:3c:a2:26:4a:8c:2f:89:6e:e2:be: 65:6f:a3:3c:da:ee:ce:81:e3:5a:32:c0:43:56:8f:f3:cf:30: ea:35:9f:50:8b:ad:1c:75:2e:fe:80:0b:b6:ee:eb:93:57:f8: 3d:7a:03:43:1a:be:6d:2f:b1:2e:34:5e:d8:7a:81:83:76:24: af:12:b8:26:33:36:08:27:4c:8b:50:8e:a5:d7:ca:0e:3d:45: c5:c9:4f:0c:d5:ae:c8:76:42:bc:cc:c2:39:1b:26:e6:43:15: fc:20:c7:55:a1:de:16:b6:a0:f7:c1:e3:71:34:3c:ff:1e:e7: c4:a4:26:c7:e0:b0:2a:b8:00:c0:85:bc:4c:5b:6e:c0:ec:e9: 23:4b:39:3c:dd:4b:b9:2e:82:ca:b7:cc:ac:42:ea:7b:e7:33: ad:30:bd:f0:ff:e4:6d:0b:ac:39:06:79:b6:04:96:1d:6d:28: d8:ad:55:33:b1:d1:ca:f0:de:1c:c8:c4:5d:72:c4:de:e1:47: 49:d0:81:46:94:8b:9d:db:8c:dc:04:96:5f:4a:93:a6:37:10: 5e:a5:08:a8:42:07:ce:84:5d:a4:42:38:5c:5b:0f:94:78:1a: 24:78:ca:9b:3c:9e:7a:c3:6d:68:92:92:d4:5b:6c:7d:ef:94: 33:66:0a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niBNUVL3L08vuyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmJkN2RmZTEtYTNhYS00YWUwLWE2NDktMWExMmU2MGNmNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloMpuom9QTCFg4kuFMlcN2Dwt9UN9io1AY/r xNK9WXJYjaqSTRXm9I1TWLuuenN+ymism88NpXBQ7b4qH9yPUmWgl1GOXoYE98IS WYwIq4caXcO8KiptAcfzjRKQ1fOxsQb4X0cp58mq4WsXJp0/YZqBP+vBniAN5o4g 5pk481RUX8ZOvIA9HR9pN9pZPvPJZe7xm/IJfyyfnym632gC4dYxamsS3hlUvYJV zhpefoFiwTspuIRvWy2y5gqsSLJCDRdhovEOdErG459d/c85k9fywIQokgs001Px WRVjbk9+eba43XNZ2NxpsZPoaJmPlEG8QaKYFZWU3PnmAMhZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4tgV4TXxr1QQXpjVAtMVhuXHRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTNhYWZlODUtYzhiNi0z Nzg5LWJlNGMtNTk0MzUwMzEyYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGAjkuNmp+TPKImSowviW7ivmVvozza7s6B41oywENWj/PPMOo1n1CL rRx1Lv6AC7bu65NX+D16A0Mavm0vsS40Xth6gYN2JK8SuCYzNggnTItQjqXXyg49 RcXJTwzVrsh2QrzMwjkbJuZDFfwgx1Wh3ha2oPfB43E0PP8e58SkJsfgsCq4AMCF vExbbsDs6SNLOTzdS7kugsq3zKxC6nvnM60wvfD/5G0LrDkGebYElh1tKNitVTOx 0crw3hzIxF1yxN7hR0nQgUaUi53bjNwEll9Kk6Y3EF6lCKhCB86EXaRCOFxbD5R4 GiR4yps8nnrDbWiSktRbbH3vlDNmCss= -----END CERTIFICATE-----Generated at Fri Sep 4 23:56:57 2026 by rpki-client