$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a6ad1d-f5e1-39bd-a4e8-04f2ff22f1d9.roa File: 21a6ad1d-f5e1-39bd-a4e8-04f2ff22f1d9.roa (raw, json) Hash identifier: eXkcteI02ZNQ1Yh3su8/K2w9LSaah0wanbCrB6ZD53c= Subject key identifier: DD:34:F9:2C:4F:A3:5D:00:61:51:CA:1C:87:37:1D:B2:46:09:31:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985E3DED40D3F5D39A0E400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a6ad1d-f5e1-39bd-a4e8-04f2ff22f1d9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.209.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:e3:de:d4:0d:3f:5d:39:a0:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ab60f86-8cd4-4e2a-927b-d8ab07eb5e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:a6:14:60:1a:56:ba:36:08:d2:f4:88:5d: ed:61:ee:b6:51:26:5d:32:fb:b0:5e:0a:ac:04:02: 28:f0:0d:d7:70:ed:64:83:72:29:34:c5:ff:67:f9: e7:98:fe:48:57:4b:be:80:00:99:7a:75:9b:d0:6f: db:a4:22:91:1a:ee:9a:27:14:fd:ed:ac:46:21:e2: 68:0e:9a:c1:ee:23:35:e7:34:c2:d4:3f:43:38:e4: ce:e5:9d:20:25:2c:fd:93:92:09:32:f5:96:49:88: 84:4e:94:16:d2:17:a1:ff:d5:e6:fe:da:64:64:cc: b0:e1:42:e3:18:06:10:01:0e:99:f2:84:f6:bf:dc: 56:87:0f:67:9f:46:e2:2b:ef:71:aa:fd:ad:6d:d8: 9a:2f:8d:81:dc:e5:7b:28:5b:86:a6:54:37:d6:a1: e9:e9:48:8e:fe:9e:00:8b:5f:a0:d5:d9:85:d5:96: 24:14:a0:3b:9f:04:b2:e1:8d:a4:3d:32:19:02:5d: 29:18:64:69:31:9d:46:29:c5:00:22:db:ed:e3:d5: 62:3a:71:71:07:87:00:8e:f3:de:63:cf:0d:b3:ce: 51:b6:ea:ab:c2:83:a7:9d:cd:59:76:7d:f9:d5:2f: b0:0f:0b:88:b0:7e:1f:f1:19:44:3d:c6:c1:7b:bf: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:34:F9:2C:4F:A3:5D:00:61:51:CA:1C:87:37:1D:B2:46:09:31:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21a6ad1d-f5e1-39bd-a4e8-04f2ff22f1d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:14:5b:c7:08:4d:b8:18:05:8a:cc:2d:99:4d:2e:6c:e9:c7: 44:c0:d8:71:99:78:5e:e6:ba:d6:9f:ce:48:61:85:ab:2f:cd: 3b:49:0f:39:15:00:bd:33:78:82:87:b3:0d:75:80:5f:2c:92: 63:14:76:cd:f9:a3:28:37:f0:64:44:26:11:99:d5:65:ff:44: 74:9a:b9:79:5a:7b:3e:c6:37:bc:14:d2:90:04:58:8c:2e:00: 35:ff:d4:b6:75:8c:27:b0:87:b7:ca:38:da:7b:7c:cd:1b:c9: 08:88:2e:57:3b:f0:8f:9e:17:f0:75:28:3c:4e:a2:24:c6:66: ac:56:f6:45:d2:66:ea:78:d9:d3:5e:04:a9:52:72:b0:1a:27: 41:8b:b6:cb:94:df:16:46:ff:45:c1:57:5a:f8:9d:06:9c:1f: d4:af:7d:ca:69:0a:fe:b7:ae:a9:85:f9:cb:3d:2f:76:58:fa: ca:11:1b:5b:6a:95:c1:0f:b0:a7:51:70:39:db:65:c6:6b:8a: db:a0:bb:6d:d9:21:ac:0a:50:ee:c4:72:32:ab:1a:b9:89:ff: 89:99:39:f1:cf:38:1d:b5:28:61:08:c3:eb:f0:63:32:f9:3b: f8:f6:5e:24:56:02:6a:5e:21:18:02:b6:63:6b:8f:70:80:fe: aa:30:24:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhePe1A0/XTmg5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWFiNjBmODYtOGNkNC00ZTJhLTkyN2ItZDhhYjA3ZWI1ZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9KmFGAaVro2CNL0iF3tYe62USZdMvuwXgqs BAIo8A3XcO1kg3IpNMX/Z/nnmP5IV0u+gACZenWb0G/bpCKRGu6aJxT97axGIeJo DprB7iM15zTC1D9DOOTO5Z0gJSz9k5IJMvWWSYiETpQW0heh/9Xm/tpkZMyw4ULj GAYQAQ6Z8oT2v9xWhw9nn0biK+9xqv2tbdiaL42B3OV7KFuGplQ31qHp6UiO/p4A i1+g1dmF1ZYkFKA7nwSy4Y2kPTIZAl0pGGRpMZ1GKcUAItvt49ViOnFxB4cAjvPe Y88Ns85RtuqrwoOnnc1Zdn351S+wDwuIsH4f8RlEPcbBe7+sBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN00+SxPo10AYVHKHIc3HbJGCTGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFhNmFkMWQtZjVlMS0z OWJkLWE0ZTgtMDRmMmZmMjJmMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9EIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkUW8cITbgYBYrMLZlNLmzpx0TA2HGZeF7mutafzkhhhasvzTtJDzkV AL0zeIKHsw11gF8skmMUds35oyg38GREJhGZ1WX/RHSauXlaez7GN7wU0pAEWIwu ADX/1LZ1jCewh7fKONp7fM0byQiILlc78I+eF/B1KDxOoiTGZqxW9kXSZup42dNe BKlScrAaJ0GLtsuU3xZG/0XBV1r4nQacH9SvfcppCv63rqmF+cs9L3ZY+soRG1tq lcEPsKdRcDnbZcZritugu23ZIawKUO7EcjKrGrmJ/4mZOfHPOB21KGEIw+vwYzL5 O/j2XiRWAmpeIRgCtmNrj3CA/qowJLQ= -----END CERTIFICATE-----Generated at Sun Oct 25 03:09:46 2026 by rpki-client