$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffa79d38-a6f1-3031-9319-0f58b285b01a.roa File: ffa79d38-a6f1-3031-9319-0f58b285b01a.roa (raw, json) Hash identifier: 1033F99VpN8KpmQ2AQygQlP/HC40hchuMlWfqQRJha8= Subject key identifier: 9E:00:04:03:7B:3E:25:78:D3:F2:06:80:D7:27:8C:BD:86:E4:02:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EAE81A91C55CECBD9F66B28A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffa79d38-a6f1-3031-9319-0f58b285b01a.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 20940 IP address blocks: 23.220.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:a9:1c:55:ce:cb:d9:f6:6b:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=03d1e2be-9fb0-49c9-82d8-81e2ab62646f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:10:d8:34:cf:e4:35:97:8e:06:08:52:52: 01:8c:1a:05:d8:db:40:15:de:b3:78:1e:b6:88:07: c0:ad:04:92:5a:eb:b1:2d:20:af:43:28:c4:f8:0a: 29:09:1e:c7:79:6b:24:75:43:3e:92:6a:24:a4:90: e0:5a:98:76:6f:e0:64:9d:19:d0:1e:1d:c8:f0:61: 79:b8:fc:ad:cb:9a:9e:54:7f:11:13:f9:ec:1a:16: ff:bb:a1:66:cc:94:9b:b7:7b:70:ed:db:03:23:6f: 19:bd:2e:41:81:13:12:d7:48:61:67:31:42:19:b3: 0f:33:38:b3:93:c8:f4:05:94:52:e4:75:01:ce:22: 10:4b:86:0f:7c:9a:b7:a4:3c:1f:1a:3a:41:bd:1b: cf:e6:d1:8e:2b:64:1d:3b:f3:90:cc:d5:86:c3:84: 54:b0:5a:0f:7a:d3:11:90:5e:4c:a7:78:0a:e1:b5: 15:67:85:72:4c:ec:b9:aa:84:bb:8e:9e:20:17:d1: 7f:01:eb:fb:7c:61:e6:78:b4:f4:4e:6c:44:2c:fa: 95:20:36:75:2a:19:d5:30:d5:dd:61:8b:77:7f:ec: b9:77:82:e3:4f:f5:d3:88:51:35:2f:cd:a6:96:b0: 1b:de:d1:01:cf:68:6a:cc:77:ff:36:c6:5f:02:a2: ae:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:00:04:03:7B:3E:25:78:D3:F2:06:80:D7:27:8C:BD:86:E4:02:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffa79d38-a6f1-3031-9319-0f58b285b01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c6:f9:7d:aa:32:d1:3a:79:a9:42:29:75:1c:5b:2d:59:e3: fb:52:aa:4f:05:1b:31:d4:16:eb:b3:99:3b:35:f8:c2:05:06: 24:e7:8d:fe:4a:d0:36:1f:d9:7e:ab:48:4f:b4:86:e5:86:61: f4:37:f5:08:07:6d:b4:ec:50:cc:00:fa:bd:ee:17:21:82:fa: 2f:6c:d6:1d:fe:9e:91:02:61:48:e2:e0:eb:2a:0c:79:6c:aa: 79:6f:39:f9:1b:d5:67:49:47:27:0d:7e:0b:13:8e:6f:86:fc: 90:42:35:dd:82:1b:06:5d:3d:43:65:16:56:96:fd:56:6e:f6: b5:3b:97:7a:f4:73:27:7d:21:8c:ef:e1:58:87:63:24:7f:03: ba:7e:d5:63:df:e4:5b:30:12:9a:56:f3:7b:ba:dd:cf:31:8e: 01:df:1d:15:b3:25:08:ab:7a:e0:fe:0a:1f:15:95:f7:59:65: 1a:1f:c5:41:3e:48:50:b7:f2:22:2b:53:97:c0:c1:78:e4:68: 95:89:61:1c:51:55:3f:67:75:47:3b:d4:c0:ab:70:e3:99:8c: 84:6a:79:d4:02:09:7b:95:18:01:25:a1:22:66:c0:71:d6:1e: 54:a1:41:55:c3:2c:06:27:72:82:28:50:f4:e0:41:06:a2:c2: 7c:6d:7b:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugakcVc7L2fZrKKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk MDNkMWUyYmUtOWZiMC00OWM5LTgyZDgtODFlMmFiNjI2NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTYQ2DTP5DWXjgYIUlIBjBoF2NtAFd6zeB62 iAfArQSSWuuxLSCvQyjE+AopCR7HeWskdUM+kmokpJDgWph2b+BknRnQHh3I8GF5 uPyty5qeVH8RE/nsGhb/u6FmzJSbt3tw7dsDI28ZvS5BgRMS10hhZzFCGbMPMziz k8j0BZRS5HUBziIQS4YPfJq3pDwfGjpBvRvP5tGOK2QdO/OQzNWGw4RUsFoPetMR kF5Mp3gK4bUVZ4VyTOy5qoS7jp4gF9F/Aev7fGHmeLT0TmxELPqVIDZ1KhnVMNXd YYt3f+y5d4LjT/XTiFE1L82mlrAb3tEBz2hqzHf/NsZfAqKu9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4ABAN7PiV40/IGgNcnjL2G5AK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmZhNzlkMzgtYTZmMS0z MDMxLTkzMTktMGY1OGIyODViMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7G+X2qMtE6ealCKXUcWy1Z4/tSqk8FGzHUFuuzmTs1+MIFBiTnjf5K 0DYf2X6rSE+0huWGYfQ39QgHbbTsUMwA+r3uFyGC+i9s1h3+npECYUji4OsqDHls qnlvOfkb1WdJRycNfgsTjm+G/JBCNd2CGwZdPUNlFlaW/VZu9rU7l3r0cyd9IYzv 4ViHYyR/A7p+1WPf5FswEppW83u63c8xjgHfHRWzJQireuD+Ch8VlfdZZRofxUE+ SFC38iIrU5fAwXjkaJWJYRxRVT9ndUc71MCrcOOZjIRqedQCCXuVGAEloSJmwHHW HlShQVXDLAYncoIoUPTgQQaiwnxte9k= -----END CERTIFICATE-----Generated at Sat Sep 5 01:27:02 2026 by rpki-client