$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d1d5ff8c-c308-3e54-bb76-645fe428e6a4.roa File: d1d5ff8c-c308-3e54-bb76-645fe428e6a4.roa (raw, json) Hash identifier: Y4/G6qId7iFGN6rmQAvzxirdW7ayRKuO8DwYyDfbiGE= Subject key identifier: 94:F4:91:5A:B8:1C:04:B5:CF:50:C1:0C:47:A0:B6:95:AA:9A:99:FC Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EF53B887B17BEA4718BB2C910 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d1d5ff8c-c308-3e54-bb76-645fe428e6a4.roa Signing time: Tue 25 Aug 2026 21:01:31 +0000 ROA not before: Tue 25 Aug 2026 21:01:31 +0000 ROA not after: Mon 23 Nov 2026 22:01:31 +0000 asID: 40244 IP address blocks: 64.208.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:3b:88:7b:17:be:a4:71:8b:b2:c9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 25 21:01:31 2026 GMT Not After : Nov 23 22:01:31 2026 GMT Subject: CN=dcfbf5e0-e65e-4fef-acf4-9007a5f08512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dd:1c:f5:97:08:61:66:e5:f2:ca:25:52:86: e5:48:d8:72:04:44:d4:2a:ed:f1:24:20:e2:1f:c7: c4:d8:e3:dd:b6:15:bb:e5:28:f3:48:a6:46:89:be: 7c:3d:96:98:fd:42:92:eb:c2:74:ff:23:45:08:81: c0:4f:0f:6e:dd:1d:01:fd:f8:6f:a7:1a:5c:31:30: cc:84:cd:d1:21:15:d1:4b:57:80:b3:14:a6:ce:ec: 92:aa:3a:3f:9b:07:db:64:5e:f4:3e:51:c7:0e:e3: ed:ee:b5:b2:48:91:30:f9:79:8a:f6:da:d1:41:e5: a5:a0:e5:9b:62:15:e7:cb:82:79:fa:f8:16:8b:1b: 56:dc:66:07:5e:53:68:a4:06:00:3b:0f:23:57:49: 37:3b:3e:85:4b:7f:d2:26:10:af:91:5a:84:30:b8: 55:85:b1:ab:1d:42:0f:c6:92:5a:14:96:8f:34:86: dd:47:9f:e3:26:5a:e3:bb:e3:18:b9:b0:67:bd:ed: 8a:e7:93:53:84:ae:dc:3c:d2:5b:dc:eb:ed:d0:b7: 31:1c:86:19:3e:ee:89:b4:40:b1:96:e6:d4:69:04: 2c:e6:73:e5:19:df:f2:b1:6c:c6:e9:bd:34:15:11: a7:ee:57:b2:36:50:ae:04:54:25:d6:e6:81:86:87: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F4:91:5A:B8:1C:04:B5:CF:50:C1:0C:47:A0:B6:95:AA:9A:99:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d1d5ff8c-c308-3e54-bb76-645fe428e6a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.208.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6b:c5:b3:a0:ca:eb:12:fd:db:cc:10:d9:3a:28:47:22:32: 3d:cf:79:51:84:0d:9e:6b:12:a9:5f:55:7b:f8:5c:61:39:f1: a1:b3:1e:c2:82:d0:03:b4:32:aa:82:19:07:6e:20:a4:19:a8: 0f:43:f4:19:54:e5:a0:0d:4b:ac:fc:10:58:12:5e:db:c1:d1: 56:22:62:09:87:ee:e7:35:9c:2a:7f:dd:73:23:35:cb:63:6b: 49:b2:c0:37:c5:ce:3f:67:a0:e4:c3:f5:17:e5:5c:ee:eb:8f: 1a:a7:28:bd:75:e8:4f:6c:bf:5f:a8:33:df:3a:05:bb:6b:c7: 1e:81:af:10:9b:9d:32:05:4e:62:5a:df:19:0f:2d:2d:e2:e1: 0b:f5:81:5d:1d:32:a1:58:df:fb:6b:19:b4:94:e1:d7:3a:8a: be:21:1b:fe:c3:91:89:d8:db:ff:5a:6e:61:af:63:43:9d:5d: f5:5c:53:c6:78:4c:3a:dd:f0:40:9e:24:10:57:4a:10:f3:0c: 1e:71:3a:f9:87:aa:fc:b2:dd:0d:74:83:3c:ba:7b:bf:b7:a9: 61:fb:7a:c1:87:93:7a:5e:bc:53:1c:1c:ee:df:f7:28:c4:d6: 94:5c:87:76:f2:20:51:32:60:a3:f2:d8:bb:be:a2:ef:d2:70: d1:e7:96:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71O4h7F76kcYuyyRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyNTIxMDEzMVoXDTI2MTEyMzIyMDEzMVowLzEtMCsGA1UEAxMk ZGNmYmY1ZTAtZTY1ZS00ZmVmLWFjZjQtOTAwN2E1ZjA4NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg90c9ZcIYWbl8solUoblSNhyBETUKu3xJCDi H8fE2OPdthW75SjzSKZGib58PZaY/UKS68J0/yNFCIHATw9u3R0B/fhvpxpcMTDM hM3RIRXRS1eAsxSmzuySqjo/mwfbZF70PlHHDuPt7rWySJEw+XmK9trRQeWloOWb YhXny4J5+vgWixtW3GYHXlNopAYAOw8jV0k3Oz6FS3/SJhCvkVqEMLhVhbGrHUIP xpJaFJaPNIbdR5/jJlrju+MYubBnve2K55NThK7cPNJb3Ovt0LcxHIYZPu6JtECx lubUaQQs5nPlGd/ysWzG6b00FRGn7leyNlCuBFQl1uaBhoetsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT0kVq4HAS1z1DBDEegtpWqmpn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZDFkNWZmOGMtYzMwOC0z ZTU0LWJiNzYtNjQ1ZmU0MjhlNmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQNA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtrxbOgyusS/dvMENk6KEciMj3PeVGEDZ5rEqlfVXv4XGE58aGzHsKC 0AO0MqqCGQduIKQZqA9D9BlU5aANS6z8EFgSXtvB0VYiYgmH7uc1nCp/3XMjNctj a0mywDfFzj9noOTD9RflXO7rjxqnKL116E9sv1+oM986Bbtrxx6BrxCbnTIFTmJa 3xkPLS3i4Qv1gV0dMqFY3/trGbSU4dc6ir4hG/7DkYnY2/9abmGvY0OdXfVcU8Z4 TDrd8ECeJBBXShDzDB5xOvmHqvyy3Q10gzy6e7+3qWH7esGHk3pevFMcHO7f9yjE 1pRch3byIFEyYKPy2Lu+ou/ScNHnlrE= -----END CERTIFICATE-----Generated at Fri Sep 11 01:09:30 2026 by rpki-client