$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e83eca-de51-3b6c-b5a0-bbd1b76c888f.roa File: 23e83eca-de51-3b6c-b5a0-bbd1b76c888f.roa (raw, json) Hash identifier: TE0MeWhp4l54FMZRjskfqUoqfdfAt6kVTiFquGt/V7k= Subject key identifier: 56:BB:67:CF:07:E8:E9:35:B2:75:4D:5D:44:CC:2B:9B:CA:17:AE:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E5662EB5FCAB4A0565D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e83eca-de51-3b6c-b5a0-bbd1b76c888f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.209.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:56:62:eb:5f:ca:b4:a0:56:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b1c610c2-2a08-4f11-a671-04f1b48f6e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:50:38:1d:3b:e5:c7:07:18:68:b7:dd:b0:5f: c1:2b:4c:9d:26:be:ae:55:92:e2:ed:55:af:18:40: 85:7c:48:05:38:dd:19:ff:89:98:e1:48:ab:c6:11: 9e:49:c3:5c:35:54:3a:c5:1c:ca:14:1e:fb:24:c1: 5e:4b:8f:64:da:83:4f:17:e0:58:95:9e:ec:f9:22: 05:5a:27:29:e7:52:d0:29:5f:c1:d3:be:6e:d1:72: 86:43:81:6a:22:a2:b5:3a:33:4b:bd:cd:3a:fc:77: c5:29:9e:f0:a0:12:ea:c9:66:18:74:8c:db:b8:64: d2:4a:2b:c2:b5:42:06:95:8c:2c:03:7c:97:97:b0: de:75:7d:4c:02:12:26:b1:95:c2:0f:2e:ab:57:cd: 4f:b5:34:bb:39:53:e9:9a:e9:1d:07:3a:9a:bf:6f: 7f:29:b0:7b:82:29:75:4d:8e:58:24:23:4c:30:1a: 76:8e:a9:ff:70:94:51:49:07:04:14:96:74:1d:90: 24:e4:4e:c7:20:b4:d3:c7:9d:7c:d8:e7:54:bd:4b: 16:f0:a8:b4:f5:71:36:b2:d9:5b:76:31:c1:ab:5e: fd:20:60:e4:6d:f9:3e:f9:5e:44:e6:e0:30:9c:a0: 97:f4:9c:30:d3:df:c8:39:84:35:57:b1:e1:23:4c: d0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BB:67:CF:07:E8:E9:35:B2:75:4D:5D:44:CC:2B:9B:CA:17:AE:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e83eca-de51-3b6c-b5a0-bbd1b76c888f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:1e:4f:82:d9:55:7d:00:31:c7:c3:c6:26:56:e2:c0:58:ba: 56:52:a1:eb:be:68:b1:e8:84:da:1f:6c:39:b6:91:b3:b0:65: 8e:2d:1b:ff:2d:8c:a4:9e:cb:d1:1e:4f:b8:b2:99:26:f8:54: dc:a3:f0:b1:61:f3:3a:82:92:6c:b4:b7:7f:3f:53:9e:bc:f3: 83:dd:fd:eb:43:27:af:ae:f5:20:fb:2a:fb:94:80:de:fb:e0: 1f:7c:20:13:9c:d8:e8:d5:9d:2b:a3:c1:4a:3c:c9:82:e9:26: 6c:63:50:06:43:58:3c:6b:a1:70:67:41:4b:12:e3:80:bc:d6: 22:5c:80:4a:4f:10:c0:7b:11:50:41:63:e2:a2:6c:da:6a:d3: ce:da:df:64:37:64:63:11:77:09:6b:ee:16:e5:a7:9f:b3:a1: 6d:19:f2:09:e4:97:6c:d1:86:bf:a5:09:78:cc:29:08:44:46: 44:4e:9e:93:f9:4b:af:a8:e2:63:33:26:ab:17:90:3f:15:16: 59:df:54:f8:1e:a2:e8:bb:f5:a4:b8:9a:6b:78:ca:e0:f9:9b: bd:ee:3b:30:f6:71:67:08:0f:1b:9b:f4:5d:54:6f:71:4c:f6: 56:34:a8:f6:51:a4:fd:c2:de:87:4d:6a:5d:c3:99:9a:78:ee: 78:31:4d:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JflZi61/KtKBWXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjFjNjEwYzItMmEwOC00ZjExLWE2NzEtMDRmMWI0OGY2ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1A4HTvlxwcYaLfdsF/BK0ydJr6uVZLi7VWv GECFfEgFON0Z/4mY4UirxhGeScNcNVQ6xRzKFB77JMFeS49k2oNPF+BYlZ7s+SIF Wicp51LQKV/B075u0XKGQ4FqIqK1OjNLvc06/HfFKZ7woBLqyWYYdIzbuGTSSivC tUIGlYwsA3yXl7DedX1MAhImsZXCDy6rV81PtTS7OVPpmukdBzqav29/KbB7gil1 TY5YJCNMMBp2jqn/cJRRSQcEFJZ0HZAk5E7HILTTx5182OdUvUsW8Ki09XE2stlb djHBq179IGDkbfk++V5E5uAwnKCX9Jww09/IOYQ1V7HhI0zQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFa7Z88H6Ok1snVNXUTMK5vKF669MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlODNlY2EtZGU1MS0z YjZjLWI1YTAtYmJkMWI3NmM4ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0eT4LZVX0AMcfDxiZW4sBYulZSoeu+aLHohNofbDm2kbOwZY4tG/8t jKSey9EeT7iymSb4VNyj8LFh8zqCkmy0t38/U56884Pd/etDJ6+u9SD7KvuUgN77 4B98IBOc2OjVnSujwUo8yYLpJmxjUAZDWDxroXBnQUsS44C81iJcgEpPEMB7EVBB Y+KibNpq087a32Q3ZGMRdwlr7hblp5+zoW0Z8gnkl2zRhr+lCXjMKQhERkROnpP5 S6+o4mMzJqsXkD8VFlnfVPgeoui79aS4mmt4yuD5m73uOzD2cWcIDxub9F1Ub3FM 9lY0qPZRpP3C3odNal3DmZp47ngxTZw= -----END CERTIFICATE-----Generated at Wed Oct 21 05:06:31 2026 by rpki-client