$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/87c56411-a115-366c-b881-794a7033caac.roa File: 87c56411-a115-366c-b881-794a7033caac.roa (raw, json) Hash identifier: cfEbJ4/g7OA4+bj5zad8WKzHdhRL0GsKtlJ9L7GmR8g= Subject key identifier: F2:4F:79:32:EF:04:33:F9:6A:74:D6:17:F4:73:70:A9:90:CC:EE:8D Certificate issuer: /CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5 Certificate serial: 010D0C9F4328584EF2E78649F83ED4B34A61A780 Authority key identifier: 05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/87c56411-a115-366c-b881-794a7033caac.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 31898 IP address blocks: 23.91.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:86:49:f8:3e:d4:b3:4a:61:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=e35b2c77-449e-49b2-b965-39e659203dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:71:50:10:68:3b:a8:3c:7e:6f:08:34:c3: c1:e6:92:57:1d:42:84:e7:81:f7:64:22:7b:45:a2: cf:bf:c6:1b:0c:9c:7b:fc:16:53:57:e7:5b:50:e7: 52:aa:cf:35:d3:7c:05:9b:9e:2b:92:61:84:c0:0a: a1:0c:3e:d5:6d:64:46:b3:c8:a5:bf:6d:26:7f:25: 04:2c:1f:2e:49:e0:70:79:f4:d0:59:2a:c0:52:2d: fa:a0:52:00:05:66:47:b4:31:b7:95:02:30:93:32: 7c:aa:26:4c:23:fe:d7:cd:5a:3d:a2:74:58:aa:83: 7f:91:c8:00:c1:11:27:77:e6:54:0f:f5:2e:09:0f: bf:26:70:9e:8e:49:cc:84:de:2f:f2:12:01:a1:1a: 34:97:35:71:df:21:22:89:ac:1a:6d:a2:4e:e5:e4: dd:78:f7:b9:f4:ef:6f:9c:ff:a8:64:b0:cc:22:1b: aa:62:b2:a3:82:5b:d0:50:8e:a8:e2:d4:68:53:7f: 0e:2a:9f:a1:25:60:46:34:6f:ca:73:15:47:8b:32: 5a:b5:e6:df:d0:fe:89:10:3a:14:a2:fe:0a:7d:ea: 2e:4b:b6:f0:52:f6:75:05:0b:2b:a7:a5:02:e1:04: 14:c6:58:9c:96:fa:35:b0:e1:be:48:87:62:c8:47: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4F:79:32:EF:04:33:F9:6A:74:D6:17:F4:73:70:A9:90:CC:EE:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/87c56411-a115-366c-b881-794a7033caac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl X509v3 Authority Key Identifier: keyid:05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer sbgp-ipAddrBlock: critical IPv4: 23.91.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0f:d8:8f:6d:77:8d:cb:6d:15:c5:1b:33:27:58:d5:1b:15: ae:9f:1a:7e:3c:81:0b:57:48:d0:12:da:08:64:d4:36:48:f0: f2:19:6a:37:20:f9:84:85:ec:62:74:37:3a:a1:d1:05:78:9c: 9e:bc:2f:49:a9:65:e7:81:5b:8c:cf:13:f6:47:40:db:73:e4: 30:be:78:37:44:75:d7:a5:34:26:a7:49:32:4d:72:8a:73:6e: ea:f6:f1:35:83:96:3a:92:70:84:26:36:fe:c2:90:d5:22:c4: 49:83:99:9a:3a:ac:db:e0:e3:5f:29:c3:a8:03:6a:30:e6:63: 26:a3:ac:d2:e6:f2:d9:e4:2b:d9:72:91:a8:26:49:23:88:29: 0b:54:b4:63:3a:30:d8:f4:e0:77:c2:97:59:9e:0d:cf:df:b5: 90:3b:81:79:3f:d6:5e:23:a4:b2:1a:bf:3c:c0:e6:78:72:90: 0b:f6:97:f4:86:64:8f:90:11:d7:04:4d:0f:13:a6:8b:6a:1c: 4f:c4:8d:a9:d9:25:ab:ba:eb:92:e0:f8:a8:40:1b:9a:e5:16: 02:57:f9:82:59:6a:d7:18:ab:2a:e4:5c:bf:87:46:31:57:27: f6:37:6e:2e:32:6b:34:07:56:c1:57:ca:f2:39:86:a9:03:22: bd:87:68:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y54ZJ+D7Us0php4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdjMWFiMzUtZDNmMi00NGRhLThhNDEtNzE3YjUzOGFi N2U1MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTM1YjJjNzctNDQ5ZS00OWIyLWI5NjUtMzllNjU5MjAzZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjepxUBBoO6g8fm8INMPB5pJXHUKE54H3ZCJ7 RaLPv8YbDJx7/BZTV+dbUOdSqs8103wFm54rkmGEwAqhDD7VbWRGs8ilv20mfyUE LB8uSeBwefTQWSrAUi36oFIABWZHtDG3lQIwkzJ8qiZMI/7XzVo9onRYqoN/kcgA wREnd+ZUD/UuCQ+/JnCejknMhN4v8hIBoRo0lzVx3yEiiawabaJO5eTdePe59O9v nP+oZLDMIhuqYrKjglvQUI6o4tRoU38OKp+hJWBGNG/KcxVHizJatebf0P6JEDoU ov4KfeouS7bwUvZ1BQsrp6UC4QQUxliclvo1sOG+SIdiyEf4ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJPeTLvBDP5anTWF/RzcKmQzO6NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iN2Mx YWIzNS1kM2YyLTQ0ZGEtOGE0MS03MTdiNTM4YWI3ZTUvODdjNTY0MTEtYTExNS0z NjZjLWI4ODEtNzk0YTcwMzNjYWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjdjMWFiMzUtZDNmMi00NGRhLThh NDEtNzE3YjUzOGFiN2U1L2I3YzFhYjM1LWQzZjItNDRkYS04YTQxLTcxN2I1Mzhh YjdlNS5jcmwwHwYDVR0jBBgwFoAUBaHcmqc56koY4P+Hav9DRKkEriIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iN2MxYWIzNS1kM2YyLTQ0ZGEtOGE0MS03MTdi NTM4YWI3ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF1tAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8P2I9td43LbRXFGzMnWNUbFa6fGn48gQtXSNAS2ghk1DZI8PIZajcg +YSF7GJ0Nzqh0QV4nJ68L0mpZeeBW4zPE/ZHQNtz5DC+eDdEddelNCanSTJNcopz bur28TWDljqScIQmNv7CkNUixEmDmZo6rNvg418pw6gDajDmYyajrNLm8tnkK9ly kagmSSOIKQtUtGM6MNj04HfCl1meDc/ftZA7gXk/1l4jpLIavzzA5nhykAv2l/SG ZI+QEdcETQ8TpotqHE/EjanZJau665Lg+KhAG5rlFgJX+YJZatcYqyrkXL+HRjFX J/Y3bi4yazQHVsFXyvI5hqkDIr2HaD0= -----END CERTIFICATE-----Generated at Tue Sep 22 15:07:58 2026 by rpki-client