$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa File: 5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa (raw, json) Hash identifier: q4Cj5oG8xYYMtEXH5tKy2rZYFEDxZWKwoL0ZJdOTrns= Subject key identifier: FB:87:6D:C7:E0:CF:1C:A5:66:E2:D2:32:67:36:0D:7C:29:C3:8F:70 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584ED001DDA928D1B03771F99F10 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 7782 IP address blocks: 23.235.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:dd:a9:28:d1:b0:37:71:f9:9f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=b31e1427-6b95-4905-9603-45f31061ca60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:84:a1:51:b9:b1:85:47:74:94:56:82:90: 02:82:68:1e:09:16:fb:c2:4e:b7:59:00:85:da:56: 0b:b7:b9:6d:5d:5c:98:cc:12:d2:ae:17:f6:f1:57: 9d:d5:cf:f1:f0:31:1a:95:d7:e9:46:83:b6:56:98: 94:8f:8d:fa:9c:8f:4e:29:82:a7:eb:0b:3d:a9:41: fc:67:8b:d0:d2:8e:87:61:d3:f2:65:4c:63:75:e5: ce:08:fc:ab:10:32:4c:2e:67:6d:d1:a3:66:91:0a: 0e:73:6e:d3:b5:e9:34:48:e3:46:1f:c8:df:12:08: b2:e8:0d:ef:d4:be:75:15:76:cc:d1:74:83:97:54: 81:7c:bb:b3:23:11:2b:61:49:bd:8d:db:b4:99:2c: f4:d4:0c:db:11:85:cf:c2:59:ec:b5:6e:95:d2:0e: fa:fe:0a:7a:79:ca:85:66:e6:95:45:39:53:f9:75: e2:f6:dc:aa:d9:f9:bd:ef:fe:18:44:e1:fe:6e:00: 2a:30:12:ff:84:8a:04:d8:e0:ef:4a:b1:01:97:f7: 84:9d:94:a1:a8:aa:a7:3d:f7:08:4c:43:87:55:18: a3:44:31:70:64:30:7f:52:15:e0:1f:82:c7:1a:6b: 92:fc:94:b3:d5:6a:fc:7c:63:3b:a6:2f:1c:c2:42: 88:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:87:6D:C7:E0:CF:1C:A5:66:E2:D2:32:67:36:0D:7C:29:C3:8F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 23.235.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d9:0a:e7:ed:c3:f8:73:ba:23:f3:8c:4b:4d:91:a3:57:8c: 4b:2d:0a:9e:90:a8:14:a2:88:4d:8f:55:0c:79:0b:e5:63:79: e6:ad:a5:22:3a:85:d8:8e:c9:21:c5:69:1e:ef:18:79:4a:28: 4b:db:55:4a:b0:b5:b7:a1:71:ef:b4:f1:50:92:c1:4c:08:e9: 23:c6:16:d6:71:4f:16:8f:38:9a:46:94:76:65:1a:19:1f:31: 27:07:fc:f7:6e:f9:89:5b:90:2f:2c:3b:0e:29:d8:b0:cb:c8: 92:31:15:93:ef:ad:5d:8e:ba:00:80:0a:78:43:73:20:15:d7: b2:50:41:9f:13:d0:1d:6e:e3:56:c0:7b:ac:d5:f0:9b:69:91: c6:8d:7c:49:34:02:04:0b:ca:2d:f7:76:2f:56:cf:84:51:ce: 54:10:0a:68:b0:ae:3a:33:42:b7:48:f2:cd:c4:63:90:c3:d2: 36:38:34:70:50:be:ca:8f:dd:54:b8:62:2a:60:ca:db:7f:61: 4c:c1:d3:56:f5:8b:50:ee:15:ef:74:9c:af:f1:c0:2e:7d:d7: 02:fe:1d:15:47:82:e5:17:be:82:50:25:d9:46:e4:9f:cc:3d: 9a:a4:9f:4b:b2:ec:9d:9b:f8:b3:55:c9:7b:9c:4e:ab:ae:18: 55:9c:e6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAd2pKNGwN3H5nxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjMxZTE0MjctNmI5NS00OTA1LTk2MDMtNDVmMzEwNjFjYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYSEoVG5sYVHdJRWgpACgmgeCRb7wk63WQCF 2lYLt7ltXVyYzBLSrhf28Ved1c/x8DEaldfpRoO2VpiUj436nI9OKYKn6ws9qUH8 Z4vQ0o6HYdPyZUxjdeXOCPyrEDJMLmdt0aNmkQoOc27Ttek0SONGH8jfEgiy6A3v 1L51FXbM0XSDl1SBfLuzIxErYUm9jdu0mSz01AzbEYXPwlnstW6V0g76/gp6ecqF ZuaVRTlT+XXi9tyq2fm97/4YROH+bgAqMBL/hIoE2ODvSrEBl/eEnZShqKqnPfcI TEOHVRijRDFwZDB/UhXgH4LHGmuS/JSz1Wr8fGM7pi8cwkKImQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuHbcfgzxylZuLSMmc2DXwpw49wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNWE2YmE2ZjMtNDg5Ny0z MzJiLThjNmItNzZiYTlkYzA0OGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF+tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjZCuftw/hzuiPzjEtNkaNXjEstCp6QqBSiiE2PVQx5C+VjeeatpSI6 hdiOySHFaR7vGHlKKEvbVUqwtbehce+08VCSwUwI6SPGFtZxTxaPOJpGlHZlGhkf MScH/Pdu+YlbkC8sOw4p2LDLyJIxFZPvrV2OugCACnhDcyAV17JQQZ8T0B1u41bA e6zV8JtpkcaNfEk0AgQLyi33di9Wz4RRzlQQCmiwrjozQrdI8s3EY5DD0jY4NHBQ vsqP3VS4Yipgytt/YUzB01b1i1DuFe90nK/xwC591wL+HRVHguUXvoJQJdlG5J/M PZqkn0uy7J2b+LNVyXucTquuGFWc5vQ= -----END CERTIFICATE-----Generated at Sat Sep 19 10:05:40 2026 by rpki-client