$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa81f07f-8a36-3729-b71e-355d06b1bcda.roa File: aa81f07f-8a36-3729-b71e-355d06b1bcda.roa (raw, json) Hash identifier: xoeY+Mj89OnmQgFDMZSdKoUJc2raIzoxjCjeFadLoZ0= Subject key identifier: 8B:90:F3:C6:5C:78:E4:16:E1:CA:DF:3A:7E:19:59:95:F8:A2:70:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED9C76802885F9128EB4D6E20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa81f07f-8a36-3729-b71e-355d06b1bcda.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 16625 IP address blocks: 23.214.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:68:02:88:5f:91:28:eb:4d:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=db181d13-945b-41e4-bb25-d46ae56ade1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:75:90:7b:72:57:6d:4c:d6:e9:5a:99:a7:88: 2c:a3:16:bb:5f:09:f4:ec:a9:a2:68:cb:54:ee:2d: e8:f5:45:63:cc:74:d0:c5:8d:1b:be:3b:09:00:26: ce:b8:7d:d9:f7:b4:b9:ae:88:9d:2f:8e:ed:ef:aa: 82:25:16:12:9b:66:3f:c8:30:ad:af:5f:8c:1b:61: 7b:14:cb:8d:24:66:3e:94:34:4f:f7:fd:e5:dc:23: 1b:0c:b0:4b:3b:80:1b:fb:e4:13:bb:06:05:3d:38: a3:67:e1:45:8c:f4:56:95:72:05:a3:4d:64:46:a9: 78:63:a4:48:ae:fb:9a:22:8f:0b:87:0b:c6:c4:29: ca:f1:e2:e8:84:aa:53:b7:86:fd:ad:b0:35:a8:07: c3:fb:ee:79:45:ac:f4:4d:b4:1a:39:43:32:65:84: bc:22:45:ca:85:31:ee:0b:69:d7:19:9d:75:d2:58: 87:c7:e1:26:7c:aa:f1:ec:f0:e3:74:66:95:95:f9: 51:e8:2d:6f:25:5b:bf:3e:f8:3a:f1:49:0f:c8:68: b3:32:78:59:71:82:47:c2:f9:d1:58:07:8a:05:66: ec:9d:91:80:58:8d:5c:f8:df:f5:fa:7d:11:ff:02: 7c:6c:4f:c8:2f:f5:82:53:a6:5e:d6:af:4e:55:f6: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:90:F3:C6:5C:78:E4:16:E1:CA:DF:3A:7E:19:59:95:F8:A2:70:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa81f07f-8a36-3729-b71e-355d06b1bcda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:7a:8a:9f:24:5e:8d:95:af:3d:d1:df:69:87:9a:6e:6a:9e: 86:4d:6b:56:55:1d:9a:80:33:a9:3b:df:92:e8:e6:45:1a:91: af:f4:ff:26:2d:a7:f3:8f:6d:72:62:fb:36:34:7f:e0:a6:c1: 54:1d:31:09:08:48:8f:32:fe:49:b5:25:d0:47:87:46:23:2f: 20:bb:9c:a1:b1:b0:78:ea:eb:5b:9c:ed:d9:f4:09:70:60:07: 24:94:11:ad:76:c1:71:a4:e0:07:f2:99:4a:8e:33:72:c9:42: 45:41:8c:8d:3a:35:7c:32:3a:c9:99:fd:b8:bb:89:20:ee:e3: 65:f6:44:ae:44:d7:a5:c1:41:ae:8e:a7:f0:dd:99:6c:94:e9: 04:04:bf:7b:ea:72:1a:3b:f8:3a:e3:d5:14:02:a7:fb:16:d3: 07:b6:1b:f4:d7:00:e8:bb:7a:42:74:5b:3d:3d:30:16:4e:b5: b5:64:39:a6:ed:8f:8b:85:bd:05:f2:7f:55:7d:b0:49:8b:a0: de:55:06:d8:22:d4:16:43:ef:b7:dc:4e:3f:d2:64:91:25:8a: 5f:28:77:32:0e:48:17:a6:56:4d:43:55:fe:d1:35:da:0b:a2: 55:15:4a:28:83:ab:ac:e0:c6:a3:35:6a:45:67:d6:04:95:e1: bb:68:78:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2gCiF+RKOtNbiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZGIxODFkMTMtOTQ1Yi00MWU0LWJiMjUtZDQ2YWU1NmFkZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXWQe3JXbUzW6VqZp4gsoxa7Xwn07KmiaMtU 7i3o9UVjzHTQxY0bvjsJACbOuH3Z97S5roidL47t76qCJRYSm2Y/yDCtr1+MG2F7 FMuNJGY+lDRP9/3l3CMbDLBLO4Ab++QTuwYFPTijZ+FFjPRWlXIFo01kRql4Y6RI rvuaIo8LhwvGxCnK8eLohKpTt4b9rbA1qAfD++55Raz0TbQaOUMyZYS8IkXKhTHu C2nXGZ110liHx+EmfKrx7PDjdGaVlflR6C1vJVu/Pvg68UkPyGizMnhZcYJHwvnR WAeKBWbsnZGAWI1c+N/1+n0R/wJ8bE/IL/WCU6Ze1q9OVfYmywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuQ88ZceOQW4crfOn4ZWZX4onAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE4MWYwN2YtOGEzNi0z NzI5LWI3MWUtMzU1ZDA2YjFiY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9bYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADF6ip8kXo2Vrz3R32mHmm5qnoZNa1ZVHZqAM6k735Lo5kUaka/0/yYt p/OPbXJi+zY0f+CmwVQdMQkISI8y/km1JdBHh0YjLyC7nKGxsHjq61uc7dn0CXBg BySUEa12wXGk4AfymUqOM3LJQkVBjI06NXwyOsmZ/bi7iSDu42X2RK5E16XBQa6O p/DdmWyU6QQEv3vqcho7+Drj1RQCp/sW0we2G/TXAOi7ekJ0Wz09MBZOtbVkOabt j4uFvQXyf1V9sEmLoN5VBtgi1BZD77fcTj/SZJElil8odzIOSBemVk1DVf7RNdoL olUVSiiDq6zgxqM1akVn1gSV4btoeK8= -----END CERTIFICATE-----Generated at Tue Sep 22 16:31:43 2026 by rpki-client