$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d91a335-8eda-3bf1-aecc-bfcf916d875a.roa File: 1d91a335-8eda-3bf1-aecc-bfcf916d875a.roa (raw, json) Hash identifier: hWhe6ZK9CTutNhXQ7Xa9ru1uG3/a/35UsJO4XCVbF+0= Subject key identifier: AA:D7:EB:5D:22:EC:91:D7:BB:34:18:4F:FF:2E:06:D9:83:4A:4E:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985F791F72042F97C1B0940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d91a335-8eda-3bf1-aecc-bfcf916d875a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.213.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:f7:91:f7:20:42:f9:7c:1b:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=96bc72da-c2d1-42ea-8674-ebb2119ddbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:0e:14:d5:05:2e:83:f9:f7:a3:35:14:cd: 31:6d:35:92:b0:3e:87:26:6e:2c:2e:0b:a7:26:d1: 36:a9:ae:72:6d:7b:69:31:a8:a2:63:6e:d8:85:a9: f5:ba:3e:66:af:7a:a8:a3:cb:d9:55:33:ac:ea:c1: 4a:04:c4:bc:dd:80:eb:8f:f2:90:bf:84:66:0b:7a: 77:b9:30:c9:79:a5:e1:cf:b3:6f:26:91:f8:df:4a: 44:f3:f2:8f:50:f8:7c:f9:2c:c2:13:a1:b0:04:74: 87:c7:e3:0d:c2:7c:9d:0c:88:2c:04:22:f9:78:11: 1c:da:cf:4d:33:2b:73:99:7f:9a:91:af:7e:dc:3b: e6:3c:2b:15:b7:c7:e3:12:e7:41:32:b7:5b:8e:40: f6:63:20:5e:f5:a2:64:05:fb:7b:98:8f:e7:77:d5: 85:bf:d7:43:40:2e:83:8a:82:45:24:44:e3:73:5b: f1:f7:03:3f:77:0f:b8:0e:04:52:b8:06:aa:69:70: ac:a9:43:35:e5:c1:60:76:d7:0f:2a:c0:d4:33:93: 49:33:b1:70:b0:88:db:43:cc:32:db:0f:de:2d:48: a6:da:16:58:51:03:93:4e:b9:68:e7:9b:b4:ff:4e: 81:a4:3b:e4:3e:70:6f:ce:a6:46:39:a8:c5:fc:93: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D7:EB:5D:22:EC:91:D7:BB:34:18:4F:FF:2E:06:D9:83:4A:4E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d91a335-8eda-3bf1-aecc-bfcf916d875a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d8:ad:d6:dc:a8:38:3e:ba:46:2e:ad:b9:ce:78:6a:4c:21: da:d9:98:b9:27:15:e5:b8:48:01:f2:f2:e0:9f:9a:eb:60:13: c5:03:b8:5a:90:55:48:ea:00:62:f9:1d:29:74:2e:35:08:e4: 7f:62:ee:7c:d9:87:af:38:36:b0:34:21:0a:30:3a:70:c2:02: 45:6b:80:fb:3d:02:39:2e:0e:c3:60:59:b1:63:de:94:47:9a: 46:fd:1d:9f:8f:33:32:28:9f:62:96:12:89:11:7a:07:f5:5f: 8e:59:2c:e2:9d:44:a6:00:8c:7f:b8:3d:d0:ab:a4:ac:30:ea: aa:12:5a:d4:cf:4c:6e:e1:52:c1:1c:df:1d:66:a7:02:9c:11: ce:d1:cc:c5:7d:c6:7b:d9:4f:d5:a9:4d:ec:e3:c9:4d:fb:61: 56:c3:d2:ed:de:46:3b:af:0a:29:99:6d:ce:10:fe:0b:f0:a2: 53:3d:61:81:45:17:d9:87:d5:06:80:33:af:41:ec:e7:5d:36: 66:8f:40:21:0b:93:9d:23:17:16:98:74:8f:49:71:46:9f:a4: 21:5d:d2:5a:f7:d4:01:6f:a9:ed:09:3c:46:b9:b1:e4:86:d5: c8:68:04:21:c3:96:e1:9c:59:da:36:04:c1:2b:68:a5:e4:de: 53:be:d1:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhfeR9yBC+XwbCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTZiYzcyZGEtYzJkMS00MmVhLTg2NzQtZWJiMjExOWRkYmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2gOFNUFLoP596M1FM0xbTWSsD6HJm4sLgun JtE2qa5ybXtpMaiiY27Yhan1uj5mr3qoo8vZVTOs6sFKBMS83YDrj/KQv4RmC3p3 uTDJeaXhz7NvJpH430pE8/KPUPh8+SzCE6GwBHSHx+MNwnydDIgsBCL5eBEc2s9N MytzmX+aka9+3DvmPCsVt8fjEudBMrdbjkD2YyBe9aJkBft7mI/nd9WFv9dDQC6D ioJFJETjc1vx9wM/dw+4DgRSuAaqaXCsqUM15cFgdtcPKsDUM5NJM7FwsIjbQ8wy 2w/eLUim2hZYUQOTTrlo55u0/06BpDvkPnBvzqZGOajF/JOBcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrX610i7JHXuzQYT/8uBtmDSk5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQ5MWEzMzUtOGVkYS0z YmYxLWFlY2MtYmZjZjkxNmQ4NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPYrdbcqDg+ukYurbnOeGpMIdrZmLknFeW4SAHy8uCfmutgE8UDuFqQ VUjqAGL5HSl0LjUI5H9i7nzZh684NrA0IQowOnDCAkVrgPs9AjkuDsNgWbFj3pRH mkb9HZ+PMzIon2KWEokRegf1X45ZLOKdRKYAjH+4PdCrpKww6qoSWtTPTG7hUsEc 3x1mpwKcEc7RzMV9xnvZT9WpTezjyU37YVbD0u3eRjuvCimZbc4Q/gvwolM9YYFF F9mH1QaAM69B7OddNmaPQCELk50jFxaYdI9JcUafpCFd0lr31AFvqe0JPEa5seSG 1choBCHDluGcWdo2BMEraKXk3lO+0Qw= -----END CERTIFICATE-----Generated at Wed Oct 21 07:09:53 2026 by rpki-client