$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61e21cc-7889-3df1-a7c2-dda770336f0e.roa File: f61e21cc-7889-3df1-a7c2-dda770336f0e.roa (raw, json) Hash identifier: r/3cxK7HdMMk2J9rZpRY+BxgZZ7ry05yCUe9am8FWV4= Subject key identifier: E7:83:F6:1C:16:97:01:CE:67:D1:9B:59:F5:15:2F:0C:C3:9A:EB:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7982F6277E9185DB5E164C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61e21cc-7889-3df1-a7c2-dda770336f0e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.207.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:2f:62:77:e9:18:5d:b5:e1:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=457334d4-96af-4abb-a6d3-898e722b474b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:b5:52:73:3f:86:b5:eb:ac:19:5b:c4:25: 1f:11:37:24:fc:1f:06:2b:cc:a9:16:0e:91:b1:da: ed:6c:72:65:3b:ab:55:35:ce:52:56:da:11:f8:00: e8:53:3d:dd:86:8a:b6:c1:84:fb:8a:9b:91:c7:d2: 97:20:bb:ff:4f:e3:57:3b:b5:ac:d0:a1:62:14:42: 8c:05:ac:71:b5:3e:40:6e:54:99:f2:19:81:34:49: 7d:6d:b2:1b:6d:11:ce:d4:e3:22:1c:4a:c5:72:80: 5a:5f:68:4e:ce:f8:e2:4b:1a:4b:ab:73:79:e9:92: c3:56:d3:89:de:ca:16:da:13:e8:cc:16:94:56:9f: af:70:85:4f:58:37:2f:d3:66:e0:f8:8a:85:fa:2f: d9:d7:16:d9:7c:12:14:f6:02:ab:d3:7b:05:f3:63: 7d:c4:51:23:94:29:03:56:6d:58:1b:f1:91:b1:94: 90:57:fb:94:e5:ea:ae:62:e2:68:b1:34:7c:a9:39: ef:64:e8:ba:63:ab:94:49:da:d5:ed:9b:7c:c7:07: 3c:af:db:a0:d6:8b:28:2e:dd:09:1d:cf:db:59:39: 05:77:3e:51:64:c9:27:0b:6e:ae:1b:fb:5f:83:c6: c5:62:fb:63:a7:e6:0d:c9:9d:a9:f5:90:8c:67:86: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:83:F6:1C:16:97:01:CE:67:D1:9B:59:F5:15:2F:0C:C3:9A:EB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f61e21cc-7889-3df1-a7c2-dda770336f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:0a:01:f7:20:d7:9d:e2:d8:03:18:44:bd:93:f2:39:17:95: 21:dc:20:92:c8:12:9f:ef:5d:61:5e:a1:1f:2a:5c:1e:df:9c: db:3f:59:26:e6:30:5d:ff:7e:cc:30:f2:ce:22:94:25:6f:ef: 75:cd:86:90:34:9f:eb:39:0c:42:43:02:01:c5:6d:3a:21:ff: f4:fb:c7:6d:ab:08:b1:5a:7e:18:15:72:fe:4e:85:ff:25:ae: fd:7e:8b:9a:d8:4c:50:30:6b:57:87:3c:97:38:cd:61:36:00: e3:4f:5a:63:10:9e:5f:a9:0e:7b:3b:90:84:7f:24:a8:88:ce: e8:61:dd:8c:c7:84:8d:b2:89:06:ec:c4:f2:79:ad:17:8f:b5: b9:82:33:42:9f:c6:45:e0:b9:9e:9a:d9:45:74:35:97:82:d7: 6a:e2:e5:85:d0:9b:ee:d8:d4:7d:fd:d5:77:88:c8:19:53:6b: 05:43:67:0d:ae:24:80:9c:20:9d:ff:a0:65:93:3b:17:d5:70: 91:7c:bb:a7:f7:7a:f7:e7:7d:95:37:75:3a:e0:ee:43:0e:3f: bc:d7:66:17:53:74:da:6d:a9:3f:5d:3c:ca:bf:63:a6:e9:3f: 7d:bd:3f:a8:8d:47:a1:c8:08:e7:c1:73:97:6d:a8:40:f4:a7: 86:b4:3f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmC9id+kYXbXhZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDU3MzM0ZDQtOTZhZi00YWJiLWE2ZDMtODk4ZTcyMmI0NzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuq1UnM/hrXrrBlbxCUfETck/B8GK8ypFg6R sdrtbHJlO6tVNc5SVtoR+ADoUz3dhoq2wYT7ipuRx9KXILv/T+NXO7Ws0KFiFEKM BaxxtT5AblSZ8hmBNEl9bbIbbRHO1OMiHErFcoBaX2hOzvjiSxpLq3N56ZLDVtOJ 3soW2hPozBaUVp+vcIVPWDcv02bg+IqF+i/Z1xbZfBIU9gKr03sF82N9xFEjlCkD Vm1YG/GRsZSQV/uU5equYuJosTR8qTnvZOi6Y6uUSdrV7Zt8xwc8r9ug1osoLt0J Hc/bWTkFdz5RZMknC26uG/tfg8bFYvtjp+YNyZ2p9ZCMZ4ZoGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeD9hwWlwHOZ9GbWfUVLwzDmus2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjYxZTIxY2MtNzg4OS0z ZGYxLWE3YzItZGRhNzcwMzM2ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAKAfcg153i2AMYRL2T8jkXlSHcIJLIEp/vXWFeoR8qXB7fnNs/WSbm MF3/fsww8s4ilCVv73XNhpA0n+s5DEJDAgHFbToh//T7x22rCLFafhgVcv5Ohf8l rv1+i5rYTFAwa1eHPJc4zWE2AONPWmMQnl+pDns7kIR/JKiIzuhh3YzHhI2yiQbs xPJ5rRePtbmCM0KfxkXguZ6a2UV0NZeC12ri5YXQm+7Y1H391XeIyBlTawVDZw2u JICcIJ3/oGWTOxfVcJF8u6f3evfnfZU3dTrg7kMOP7zXZhdTdNptqT9dPMq/Y6bp P329P6iNR6HICOfBc5dtqED0p4a0Pxo= -----END CERTIFICATE-----Generated at Sat Sep 5 01:23:38 2026 by rpki-client