$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa File: 0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa (raw, json) Hash identifier: kMIg+cUYA85H5D69nPl9WrhWNa26E/Cfih4gfworCGU= Subject key identifier: 85:DA:A8:69:E6:29:69:24:04:5A:39:6D:77:10:4E:AC:65:CF:B3:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5F3F9C7E2DE5A09277C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 4788 IP address blocks: 23.220.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5f:3f:9c:7e:2d:e5:a0:92:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=4fdcfbe0-dde6-4d29-bceb-75c3ebfcdfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:31:ba:92:9e:c9:a7:c6:c1:54:ba:2f:54:bf: 1f:20:77:b2:db:36:be:68:cc:a8:5a:72:c2:e2:bc: 93:ec:0e:90:f9:b5:cb:ca:59:15:f3:37:15:d5:94: c6:23:78:d1:04:e2:5a:07:70:30:14:85:40:ab:d8: 3b:1e:c9:fa:8a:0a:e7:df:2a:b3:40:a7:d2:4c:23: 41:3c:0a:ed:05:58:15:ee:ae:1f:6c:97:dd:15:9a: 3d:55:0f:1f:27:48:84:ef:ce:ab:39:37:de:36:e1: b2:ac:9e:b2:82:71:32:a9:3f:a1:3e:4d:cc:26:f8: e3:86:c2:0c:d5:c8:00:37:71:2e:73:ce:67:33:5f: 61:b8:bb:6c:07:74:c5:d0:ff:00:93:95:98:5a:08: be:e8:2d:37:19:92:52:de:c0:2e:a6:af:37:74:45: 03:ac:94:13:69:d9:6e:40:02:2a:b9:c1:42:ae:c9: 9e:4c:0f:8d:f0:db:ec:f1:95:20:fa:e9:f4:03:18: 85:0f:d7:ba:21:80:46:74:ea:34:a6:2e:1b:24:84: b6:17:fe:aa:19:a0:eb:6c:aa:f5:9b:10:cc:08:4e: 04:87:2b:dc:73:06:07:10:45:ca:80:3d:66:c3:60: 06:01:11:74:d7:e8:63:89:e9:52:2b:f5:64:89:6c: 31:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DA:A8:69:E6:29:69:24:04:5A:39:6D:77:10:4E:AC:65:CF:B3:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0542d4d1-a8fd-3e03-a8d1-84bce1a167f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:94:e4:16:74:9d:a3:16:89:a7:36:d0:11:13:14:26:96:ba: a8:33:53:a9:27:71:c4:4d:74:4d:84:8c:c1:e5:35:68:88:25: a1:8b:ff:c5:c7:4c:76:f9:80:6b:41:7e:06:c6:9d:45:6e:7b: 1e:77:4b:7c:81:f7:75:a7:db:05:93:02:43:0f:26:7b:30:73: 98:17:22:58:57:18:de:e6:ef:55:a5:68:bb:41:f6:b8:cd:cf: 03:97:be:84:0b:6b:42:6b:e3:60:33:d5:36:a2:62:44:b4:98: 33:79:ed:ac:ff:0d:20:f7:47:15:6c:c4:cb:ea:4f:b0:d5:bb: 3e:ad:0f:cb:f0:87:6f:1c:f0:20:6f:b7:3e:15:8b:db:39:88: 09:82:8e:db:00:27:ac:1d:b0:c1:e6:fd:bf:d7:0f:90:a2:13: 4d:ee:63:54:62:e7:43:39:a4:cf:1f:0b:61:54:00:ed:a2:04: d7:f9:1f:f0:a0:a6:7c:92:a6:b7:12:4e:c6:87:59:bb:74:7c: 0e:b5:43:db:8f:1b:d5:04:69:25:d2:cd:93:53:70:8a:4b:51: e1:b9:55:05:f6:4b:c4:fa:4c:8c:5c:3a:69:6c:78:e6:73:26: 5f:05:10:ae:5f:80:3c:73:08:12:f0:9d:a5:73:dc:61:cf:1e: 4f:81:71:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbV8/nH4t5aCSd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NGZkY2ZiZTAtZGRlNi00ZDI5LWJjZWItNzVjM2ViZmNkZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDG6kp7Jp8bBVLovVL8fIHey2za+aMyoWnLC 4ryT7A6Q+bXLylkV8zcV1ZTGI3jRBOJaB3AwFIVAq9g7Hsn6igrn3yqzQKfSTCNB PArtBVgV7q4fbJfdFZo9VQ8fJ0iE786rOTfeNuGyrJ6ygnEyqT+hPk3MJvjjhsIM 1cgAN3Euc85nM19huLtsB3TF0P8Ak5WYWgi+6C03GZJS3sAupq83dEUDrJQTadlu QAIqucFCrsmeTA+N8Nvs8ZUg+un0AxiFD9e6IYBGdOo0pi4bJIS2F/6qGaDrbKr1 mxDMCE4EhyvccwYHEEXKgD1mw2AGARF01+hjielSK/VkiWwxJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXaqGnmKWkkBFo5bXcQTqxlz7NgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDU0MmQ0ZDEtYThmZC0z ZTAzLWE4ZDEtODRiY2UxYTE2N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2U5BZ0naMWiac20BETFCaWuqgzU6knccRNdE2EjMHlNWiIJaGL/8XH THb5gGtBfgbGnUVuex53S3yB93Wn2wWTAkMPJnswc5gXIlhXGN7m71WlaLtB9rjN zwOXvoQLa0Jr42Az1TaiYkS0mDN57az/DSD3RxVsxMvqT7DVuz6tD8vwh28c8CBv tz4Vi9s5iAmCjtsAJ6wdsMHm/b/XD5CiE03uY1Ri50M5pM8fC2FUAO2iBNf5H/Cg pnySprcSTsaHWbt0fA61Q9uPG9UEaSXSzZNTcIpLUeG5VQX2S8T6TIxcOmlseOZz Jl8FEK5fgDxzCBLwnaVz3GHPHk+BcUE= -----END CERTIFICATE-----Generated at Fri Oct 23 01:26:00 2026 by rpki-client