$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5f2c05fd-bb98-3c04-a840-8717db8334b6.roa File: 5f2c05fd-bb98-3c04-a840-8717db8334b6.roa (raw, json) Hash identifier: YSJ9OiymUcGa5PpKOKRMMrl2t1KvdLNEm/0hA6Sg3U8= Subject key identifier: 40:24:E2:80:07:8D:A3:17:59:E9:EA:3D:BA:C6:DA:AF:A9:E2:A4:D6 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F0FAAE8D4204BD1E3E6245680 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5f2c05fd-bb98-3c04-a840-8717db8334b6.roa Signing time: Fri 04 Sep 2026 08:16:56 +0000 ROA not before: Fri 04 Sep 2026 08:16:56 +0000 ROA not after: Thu 03 Dec 2026 09:16:56 +0000 asID: 30633 IP address blocks: 23.111.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:aa:e8:d4:20:4b:d1:e3:e6:24:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Sep 4 08:16:56 2026 GMT Not After : Dec 3 09:16:56 2026 GMT Subject: CN=86af7c61-076a-4b9f-8927-9ff71776e07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e4:34:1f:22:66:f2:48:06:ec:b4:5c:ab:b0: 8e:3e:56:d9:a8:6a:9b:29:05:10:f1:4f:87:13:d4: 49:2f:4f:4c:5b:fd:5e:45:bc:02:bf:b4:ef:9d:d5: 4b:6f:45:eb:2a:4b:95:35:6b:08:8a:29:27:a1:bd: 49:96:2c:50:04:3b:7c:1c:1b:87:aa:5e:49:2a:c3: 78:3b:d0:ae:ea:b4:ed:d8:e8:66:bb:6a:3a:9c:5f: 69:22:be:e9:94:b0:09:72:10:cc:f9:fb:7b:d1:1e: be:28:ab:11:68:ba:20:89:13:df:14:a4:5e:fc:f0: b5:44:69:61:0c:07:56:80:f4:2a:9a:7e:88:f0:bf: 96:ef:d3:fe:5e:19:1d:95:3d:cc:25:fb:a8:c8:03: 6a:86:c7:48:fb:39:a1:6b:f6:f5:ce:9d:7b:70:06: d3:94:29:b9:46:08:d9:95:34:0d:e3:fe:e9:72:d7: 4f:27:1e:5d:93:5c:9c:2b:0d:f0:ff:15:f9:e1:84: 9e:1f:6e:b3:dd:4d:84:54:0d:d2:29:2b:ae:4d:fe: bf:f6:cd:ec:1b:30:82:75:bb:c6:f6:76:df:aa:24: 25:eb:42:72:47:86:78:f2:3b:65:1e:4e:20:da:e3: 1a:2e:13:d2:1f:37:0c:cc:89:23:ec:8a:18:a3:eb: 5a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:24:E2:80:07:8D:A3:17:59:E9:EA:3D:BA:C6:DA:AF:A9:E2:A4:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5f2c05fd-bb98-3c04-a840-8717db8334b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.111.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:12:9e:f3:c4:50:15:a5:75:1d:4c:da:5c:f0:c5:23:d8:6c: 8b:a3:b1:3d:77:c3:d1:47:c0:74:53:e5:3b:29:f2:86:47:71: da:3b:73:08:aa:ed:11:cf:ad:fa:10:98:ac:6b:22:4c:18:2e: 1e:28:46:05:fa:2a:2b:9e:74:65:4e:ef:88:6e:db:3c:fd:3c: 1e:37:9d:45:5a:10:5f:62:1e:9a:ea:4f:be:bb:1a:72:6e:fd: 55:1c:77:8d:ed:41:de:c5:f1:ac:0c:03:e9:1d:6b:72:1b:38: 22:e8:a7:cb:1e:53:68:b5:52:08:31:86:52:44:32:5f:d3:2e: 75:5a:50:f3:a8:fd:f4:be:5d:0d:bc:92:46:64:87:77:da:a9: 28:83:78:8c:cd:b0:ee:57:48:63:07:59:28:55:f4:62:87:f4: 45:c4:42:09:4a:64:10:f3:b0:ab:74:ad:c7:80:3b:fd:84:dc: 90:09:ac:38:58:f8:96:ef:b5:84:a7:46:59:17:80:12:d9:53: 4c:ff:37:cc:16:fb:1c:0a:86:ed:20:a2:fe:c4:cc:b6:c8:8c: 5e:db:81:0d:43:96:b3:a4:0d:80:76:63:9e:d9:8b:62:de:10: 7b:b8:4b:cd:c9:31:a2:56:9c:8f:a4:ca:d7:02:cd:95:1b:3c: 70:54:9c:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PqujUIEvR4+YkVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MDkwNDA4MTY1NloXDTI2MTIwMzA5MTY1NlowLzEtMCsGA1UEAxMk ODZhZjdjNjEtMDc2YS00YjlmLTg5MjctOWZmNzE3NzZlMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuQ0HyJm8kgG7LRcq7COPlbZqGqbKQUQ8U+H E9RJL09MW/1eRbwCv7TvndVLb0XrKkuVNWsIiiknob1JlixQBDt8HBuHql5JKsN4 O9Cu6rTt2Ohmu2o6nF9pIr7plLAJchDM+ft70R6+KKsRaLogiRPfFKRe/PC1RGlh DAdWgPQqmn6I8L+W79P+XhkdlT3MJfuoyANqhsdI+zmha/b1zp17cAbTlCm5RgjZ lTQN4/7pctdPJx5dk1ycKw3w/xX54YSeH26z3U2EVA3SKSuuTf6/9s3sGzCCdbvG 9nbfqiQl60JyR4Z48jtlHk4g2uMaLhPSHzcMzIkj7IoYo+taOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAk4oAHjaMXWenqPbrG2q+p4qTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNWYyYzA1ZmQtYmI5OC0z YzA0LWE4NDAtODcxN2RiODMzNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF2/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQSnvPEUBWldR1M2lzwxSPYbIujsT13w9FHwHRT5Tsp8oZHcdo7cwiq 7RHPrfoQmKxrIkwYLh4oRgX6KiuedGVO74hu2zz9PB43nUVaEF9iHprqT767GnJu /VUcd43tQd7F8awMA+kda3IbOCLop8seU2i1UggxhlJEMl/TLnVaUPOo/fS+XQ28 kkZkh3faqSiDeIzNsO5XSGMHWShV9GKH9EXEQglKZBDzsKt0rceAO/2E3JAJrDhY +JbvtYSnRlkXgBLZU0z/N8wW+xwKhu0gov7EzLbIjF7bgQ1DlrOkDYB2Y57Zi2Le EHu4S83JMaJWnI+kytcCzZUbPHBUnPU= -----END CERTIFICATE-----Generated at Sat Sep 5 00:44:48 2026 by rpki-client