$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28cab7b9-b0ce-3907-8f93-e75dfd3eacc4.roa File: 28cab7b9-b0ce-3907-8f93-e75dfd3eacc4.roa (raw, json) Hash identifier: 3GGJzMyLkJax2iFRY0b2ISQqaj9Pz0wwDJBrhea2luc= Subject key identifier: A1:79:C7:1F:85:4F:78:8D:51:63:78:D0:F8:08:CE:42:99:7C:18:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D3E5DDEB9BFCF85C57F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28cab7b9-b0ce-3907-8f93-e75dfd3eacc4.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 24319 IP address blocks: 23.52.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:3e:5d:de:b9:bf:cf:85:c5:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=2d45e8a7-4388-4f02-8be9-840d640c0325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:78:ca:c7:e0:43:6a:21:f7:af:47:92:61: 91:3a:78:ee:75:eb:cd:ff:8c:54:61:dc:62:bb:f1: 04:2b:fd:8c:26:27:89:7b:27:9b:2b:7f:22:cc:0e: 42:ff:a9:ee:4c:3b:a0:84:a5:b2:65:7e:32:9d:9d: 8b:3a:76:36:6a:66:1c:d2:0f:37:8f:7d:b6:00:db: 88:25:99:f8:02:e4:25:6c:8f:a2:dd:a3:d2:d4:7d: c8:0f:75:e0:a5:0a:4f:4b:7d:da:20:81:9f:a0:0a: cf:02:6d:bc:a3:f5:e2:da:ee:ae:67:01:5e:3b:e8: 15:7a:6e:1e:c9:de:ac:7d:30:e7:5a:de:07:39:9d: c3:e3:a3:0d:60:6f:d9:59:cf:d0:95:90:fb:08:02: 36:73:cc:42:c9:97:c6:ab:99:f7:fb:37:49:84:d3: 90:43:b0:28:cc:c9:76:45:a3:76:a7:ee:a2:4a:36: b4:fe:e3:c2:b3:b6:59:fc:29:bd:6b:e5:76:32:aa: 8e:a2:4e:71:cf:83:02:e7:86:7d:ce:91:a4:21:ba: 08:da:fc:02:b4:82:a3:6b:39:85:7e:dc:2e:0c:49: 6b:e6:73:b8:2d:dd:3f:a4:5b:37:d5:dc:9a:48:a2: a7:7d:f9:be:21:95:5e:89:5d:d3:6c:7e:cf:4c:49: ad:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:79:C7:1F:85:4F:78:8D:51:63:78:D0:F8:08:CE:42:99:7C:18:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28cab7b9-b0ce-3907-8f93-e75dfd3eacc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:99:28:e8:c3:b4:03:90:8d:94:a4:4b:93:da:87:66:23:d6: 45:37:1e:c0:6c:86:ec:57:4c:c8:39:26:f1:d0:68:3e:6b:67: 37:fa:07:69:73:e8:0d:69:67:7c:b8:39:c0:b3:fd:20:53:6d: 99:70:e7:16:23:d5:70:75:6b:bd:c7:45:1e:66:91:a4:8c:85: ce:01:00:29:1b:75:41:de:52:82:e8:34:93:36:cc:02:bb:f4: ca:ee:b7:58:d3:b3:4d:a4:79:04:6a:dd:ae:cf:05:42:59:92: 68:58:70:bc:1f:3c:34:57:0d:5c:f9:f4:73:f1:12:89:f5:45: c7:ce:46:82:9a:24:5e:7d:82:8a:4e:91:7b:fe:a3:8f:55:13: 96:a6:2f:40:85:ae:1e:6e:5b:3a:ac:b1:b2:ff:e0:40:d3:84: 9e:40:1a:8f:f3:d0:47:83:e6:15:84:bf:ac:1c:3b:d9:0d:27: 4d:f1:c1:33:78:63:1b:0b:31:01:00:21:42:a6:ed:9a:53:2f: af:fb:0a:01:fd:d2:21:f9:8b:e2:41:76:57:13:a0:17:9e:69: e9:eb:c8:cd:6b:c0:93:1f:e0:25:cf:7a:71:69:44:9e:80:c4: 79:47:33:8e:b5:9c:1c:aa:c3:59:60:c6:54:7e:d2:e0:cf:cd: 2d:10:15:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbT5d3rm/z4XFfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MmQ0NWU4YTctNDM4OC00ZjAyLThiZTktODQwZDY0MGMwMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4x4ysfgQ2oh969HkmGROnjudevN/4xUYdxi u/EEK/2MJieJeyebK38izA5C/6nuTDughKWyZX4ynZ2LOnY2amYc0g83j322ANuI JZn4AuQlbI+i3aPS1H3ID3XgpQpPS33aIIGfoArPAm28o/Xi2u6uZwFeO+gVem4e yd6sfTDnWt4HOZ3D46MNYG/ZWc/QlZD7CAI2c8xCyZfGq5n3+zdJhNOQQ7AozMl2 RaN2p+6iSja0/uPCs7ZZ/Cm9a+V2MqqOok5xz4MC54Z9zpGkIboI2vwCtIKjazmF ftwuDElr5nO4Ld0/pFs31dyaSKKnffm+IZVeiV3TbH7PTEmtHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF5xx+FT3iNUWN40PgIzkKZfBg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhjYWI3YjktYjBjZS0z OTA3LThmOTMtZTc1ZGZkM2VhY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+ZKOjDtAOQjZSkS5Pah2Yj1kU3HsBshuxXTMg5JvHQaD5rZzf6B2lz 6A1pZ3y4OcCz/SBTbZlw5xYj1XB1a73HRR5mkaSMhc4BACkbdUHeUoLoNJM2zAK7 9Mrut1jTs02keQRq3a7PBUJZkmhYcLwfPDRXDVz59HPxEon1RcfORoKaJF59gopO kXv+o49VE5amL0CFrh5uWzqssbL/4EDThJ5AGo/z0EeD5hWEv6wcO9kNJ03xwTN4 YxsLMQEAIUKm7ZpTL6/7CgH90iH5i+JBdlcToBeeaenryM1rwJMf4CXPenFpRJ6A xHlHM461nByqw1lgxlR+0uDPzS0QFVc= -----END CERTIFICATE-----Generated at Wed Oct 21 09:24:15 2026 by rpki-client