$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa File: 0209baa9-389a-393c-b685-be2cd86201f7.roa (raw, json) Hash identifier: f4/KegNG2BJBH7X1AP37gO281i3K//QrHOcYCgOjD68= Subject key identifier: CC:CD:FC:41:ED:17:7E:C4:A6:2B:56:90:3A:79:66:47:1F:6D:18:BD Certificate issuer: /CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Certificate serial: 010D0C9F4328584EC7A1D016B61CF1E29D2EB480 Authority key identifier: 68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 398310 IP address blocks: 23.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d0:16:b6:1c:f1:e2:9d:2e:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=17b7b11c-f7a6-4d5c-91a6-1845744c06ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e6:1f:7e:6d:70:4f:13:e5:c6:72:73:a0:0b: 96:a2:b7:38:39:7c:dd:42:bc:fd:96:b1:73:a8:c7: f0:6e:f7:25:a6:24:15:ee:82:73:ea:a1:34:79:31: a2:f7:37:89:4c:66:50:0f:ee:22:b0:36:35:31:80: 62:11:73:94:ce:5e:12:bf:e2:29:c9:98:25:1c:d1: 9a:95:6d:03:75:53:0d:30:ea:5f:39:39:de:89:b1: 75:95:ef:7c:9b:70:c1:ac:5f:b8:76:56:6b:fc:c0: 24:ec:a9:d7:cd:36:46:86:87:23:d0:06:84:de:27: b6:ce:8b:ed:1f:87:d5:a9:be:e0:4e:71:b6:79:73: d6:d6:ab:32:68:3b:55:b6:4b:48:ed:9f:3d:e1:e7: 19:e0:38:b9:3a:52:80:29:88:e6:ee:9b:87:a3:e7: 28:19:f9:b2:c1:1c:8d:09:63:61:b3:f6:45:d8:f6: a2:d6:a3:e5:25:63:06:77:22:aa:9c:9c:e2:a9:c5: 2e:1b:bf:aa:2c:6a:b3:3b:d2:02:5f:c3:63:75:eb: 59:9b:90:33:9a:29:64:1d:a5:2f:5d:8d:07:62:0e: 5a:87:15:09:db:b0:10:62:49:38:83:3b:43:09:6f: a1:4e:20:6f:98:8f:80:b0:00:ae:bb:8b:7a:47:e4: 62:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CD:FC:41:ED:17:7E:C4:A6:2B:56:90:3A:79:66:47:1F:6D:18:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl X509v3 Authority Key Identifier: keyid:68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer sbgp-ipAddrBlock: critical IPv4: 23.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:4c:7b:dd:2f:e1:30:51:23:d0:98:6d:13:d0:09:c4:63:0b: 5f:b6:a4:8d:5b:84:87:e4:62:7a:0a:30:7f:03:64:e3:d8:a0: a3:31:53:e9:17:23:cb:ec:ca:98:ea:1a:39:8f:21:17:92:d7: 3d:4a:cc:3b:79:fd:e9:0d:ff:64:15:7f:b0:c8:bc:80:77:99: 0f:6f:38:ba:7b:d1:0e:87:bc:1a:2a:e1:02:f7:49:25:db:46: 66:6e:64:0a:3d:54:1c:81:03:e2:e2:44:b9:d3:e0:7e:a2:5d: be:43:fa:d1:79:8d:e2:7e:6d:7b:12:92:d2:e7:67:48:2b:77: 48:c1:06:5e:75:19:ba:87:a4:26:19:69:5e:14:1d:69:b1:9a: d9:c3:4e:3c:ff:c5:73:f7:53:6a:61:af:bd:86:4e:e0:a9:e5: 8f:72:84:60:a3:a1:43:67:0c:2e:52:05:16:02:fe:60:3e:bd: 7a:d7:de:f0:7e:82:4a:49:64:99:38:81:9b:e6:3c:8e:14:ba: 02:32:d7:ff:4b:86:9f:d8:0e:d5:cf:ff:d1:f2:2b:91:89:e8: 61:05:3a:9b:e5:8b:0e:48:3d:72:bb:e1:24:0d:15:2b:8c:37: 63:c0:33:1b:40:57:4f:0d:94:6c:20:fa:fd:50:03:87:50:1c: fe:18:a2:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodAWthzx4p0utIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1MjYwZjUtODI2Mi00YTM0LWI0OWMtZTk5M2RiYWRk MWIxMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MTdiN2IxMWMtZjdhNi00ZDVjLTkxYTYtMTg0NTc0NGMwNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuYffm1wTxPlxnJzoAuWorc4OXzdQrz9lrFz qMfwbvclpiQV7oJz6qE0eTGi9zeJTGZQD+4isDY1MYBiEXOUzl4Sv+IpyZglHNGa lW0DdVMNMOpfOTneibF1le98m3DBrF+4dlZr/MAk7KnXzTZGhocj0AaE3ie2zovt H4fVqb7gTnG2eXPW1qsyaDtVtktI7Z894ecZ4Di5OlKAKYjm7puHo+coGfmywRyN CWNhs/ZF2Pai1qPlJWMGdyKqnJziqcUuG7+qLGqzO9ICX8NjdetZm5AzmilkHaUv XY0HYg5ahxUJ27AQYkk4gztDCW+hTiBvmI+AsACuu4t6R+RiYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzN/EHtF37EpitWkDp5ZkcfbRi9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUy NjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkzZGJhZGQxYjEvMDIwOWJhYTktMzg5YS0z OTNjLWI2ODUtYmUyY2Q4NjIwMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWM1MjYwZjUtODI2Mi00YTM0LWI0 OWMtZTk5M2RiYWRkMWIxLzVjNTI2MGY1LTgyNjItNGEzNC1iNDljLWU5OTNkYmFk ZDFiMS5jcmwwHwYDVR0jBBgwFoAUaGFKIbv731uEAPKgQN4kBuPq31MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUyNjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkz ZGJhZGQxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRMe90v4TBRI9CYbRPQCcRjC1+2pI1bhIfkYnoKMH8DZOPYoKMxU+kX I8vsypjqGjmPIReS1z1KzDt5/ekN/2QVf7DIvIB3mQ9vOLp70Q6HvBoq4QL3SSXb RmZuZAo9VByBA+LiRLnT4H6iXb5D+tF5jeJ+bXsSktLnZ0grd0jBBl51GbqHpCYZ aV4UHWmxmtnDTjz/xXP3U2phr72GTuCp5Y9yhGCjoUNnDC5SBRYC/mA+vXrX3vB+ gkpJZJk4gZvmPI4UugIy1/9Lhp/YDtXP/9HyK5GJ6GEFOpvliw5IPXK74SQNFSuM N2PAMxtAV08NlGwg+v1QA4dQHP4YovQ= -----END CERTIFICATE-----Generated at Fri Aug 21 02:04:22 2026 by rpki-client