$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa File: bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa (raw, json) Hash identifier: LzIz4aarFhEJ5oU6vzFuj36iGWvD5QG7I0Kmsb+kMfM= Subject key identifier: 65:77:E8:F4:BF:DB:28:F8:E7:16:75:A6:C4:F7:50:58:E9:D2:EB:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F02423A934E15B6DA154EE8C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 16625 IP address blocks: 23.206.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:3a:93:4e:15:b6:da:15:4e:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=623e2a8c-0aec-4eca-b064-6dac8bd6d36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:dd:09:42:54:51:28:72:b1:13:c0:6e:b6: 59:5b:5f:2e:57:e9:8f:51:dc:9d:b8:75:89:6b:7f: df:79:58:0a:0c:cb:5c:b3:15:91:b9:76:6a:1f:f8: 7c:a5:e2:e4:39:18:c6:70:4e:95:00:99:6f:1a:a1: 4f:b3:99:54:32:61:0c:03:67:4f:ec:c3:ce:18:a9: df:26:48:c5:c9:61:a3:a6:97:47:99:b8:8c:ae:47: 40:dc:b7:6b:18:d8:74:c6:e7:34:c0:ef:ec:56:03: 48:0e:3b:e7:48:b6:01:52:07:72:70:61:5f:d0:d4: d4:83:54:00:2f:73:8d:13:bb:f4:68:f1:1b:f0:55: b6:5d:3e:3c:47:f2:33:14:a5:ba:5d:64:ed:26:76: da:ba:72:27:26:b6:0a:54:8a:79:3c:54:5e:e9:72: d9:12:84:36:20:8e:af:6d:ac:10:a8:61:02:45:79: 2b:7e:93:00:2d:8e:df:48:29:e6:f4:43:e2:ce:0e: b5:27:87:ee:a1:0b:0e:55:ef:f1:4e:a0:14:1b:5f: 49:2a:2f:7b:4b:69:b2:79:28:37:6d:1b:bc:a9:f8: 3d:44:28:ca:b3:38:da:ea:df:dc:47:7c:fe:17:16: 1b:ed:8d:d1:4a:06:2f:03:10:8b:f4:bb:eb:c7:da: 9e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:77:E8:F4:BF:DB:28:F8:E7:16:75:A6:C4:F7:50:58:E9:D2:EB:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf1f79b3-8b6d-3e89-88e9-d0be1f20666c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:bd:82:5c:8d:61:20:b4:1c:a8:14:13:5c:ea:e2:2c:3c:55: db:90:a0:2d:e2:94:ea:26:4e:21:f1:7c:32:89:16:11:a3:3c: 3f:b5:57:41:55:58:5d:f3:96:67:a3:3e:df:c1:48:14:49:56: 9d:78:6f:fe:da:b2:68:b3:a6:2b:03:a0:e0:b6:d2:40:2f:4c: 21:d0:84:04:45:70:ac:5f:33:e8:ec:d1:af:02:60:f1:62:3e: 0d:d2:72:09:1d:bf:02:52:2b:92:ed:23:13:f1:72:c4:8b:e4: 11:fe:29:84:56:af:17:68:37:37:21:bf:ac:39:c9:56:ea:1b: 4a:cd:8e:3c:c1:fc:e5:08:9e:ec:1a:63:c8:7a:34:f3:c2:a5: f1:8e:51:15:6d:ab:2f:ee:2c:d5:e2:54:1e:1d:02:19:d9:ce: e5:3b:eb:8a:9f:a1:0a:74:f1:07:9e:eb:99:87:a4:63:73:6e: 1f:2b:c5:96:69:97:c5:90:a4:1d:d2:cf:25:52:61:65:c9:f8: df:91:75:96:75:a8:dd:2d:f5:4c:b2:6f:fb:78:d7:d9:d0:fa: 37:c4:2f:e7:55:bb:e7:71:db:e7:9a:bc:24:75:02:54:b3:a2: 69:6d:dd:0e:38:47:56:95:ac:e6:ed:d2:f8:49:b2:b8:75:33: 21:31:09:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjqTThW22hVO6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NjIzZTJhOGMtMGFlYy00ZWNhLWIwNjQtNmRhYzhiZDZkMzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN7dCUJUUShysRPAbrZZW18uV+mPUdyduHWJ a3/feVgKDMtcsxWRuXZqH/h8peLkORjGcE6VAJlvGqFPs5lUMmEMA2dP7MPOGKnf JkjFyWGjppdHmbiMrkdA3LdrGNh0xuc0wO/sVgNIDjvnSLYBUgdycGFf0NTUg1QA L3ONE7v0aPEb8FW2XT48R/IzFKW6XWTtJnbaunInJrYKVIp5PFRe6XLZEoQ2II6v bawQqGECRXkrfpMALY7fSCnm9EPizg61J4fuoQsOVe/xTqAUG19JKi97S2myeSg3 bRu8qfg9RCjKszja6t/cR3z+FxYb7Y3RSgYvAxCL9Lvrx9qeLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV36PS/2yj45xZ1psT3UFjp0uuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmYxZjc5YjMtOGI2ZC0z ZTg5LTg4ZTktZDBiZTFmMjA2NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF85YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi9glyNYSC0HKgUE1zq4iw8VduQoC3ilOomTiHxfDKJFhGjPD+1V0FV WF3zlmejPt/BSBRJVp14b/7asmizpisDoOC20kAvTCHQhARFcKxfM+js0a8CYPFi Pg3ScgkdvwJSK5LtIxPxcsSL5BH+KYRWrxdoNzchv6w5yVbqG0rNjjzB/OUInuwa Y8h6NPPCpfGOURVtqy/uLNXiVB4dAhnZzuU764qfoQp08Qee65mHpGNzbh8rxZZp l8WQpB3SzyVSYWXJ+N+RdZZ1qN0t9Uyyb/t419nQ+jfEL+dVu+dx2+eavCR1AlSz omlt3Q44R1aVrObt0vhJsrh1MyExCR4= -----END CERTIFICATE-----Generated at Wed Sep 23 20:33:03 2026 by rpki-client