$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b15f408-d296-38e4-9b0d-a2d6cb1734b6.roa File: 2b15f408-d296-38e4-9b0d-a2d6cb1734b6.roa (raw, json) Hash identifier: NrejtK5RH9zExrVuWvtVTpuFbrXpXYVRSuimEcQY8Zs= Subject key identifier: 61:5D:90:53:4E:F3:3F:0B:06:90:AE:6D:A3:30:53:E3:1C:70:E9:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F963869E18B25F5CA79DB0980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b15f408-d296-38e4-9b0d-a2d6cb1734b6.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 16625 IP address blocks: 173.223.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:69:e1:8b:25:f5:ca:79:db:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=2ceec5e3-fe4b-4a84-a392-1509a1d74c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:b7:ff:b4:e9:d0:3f:2f:56:96:d1:a5:52: ac:16:ec:5f:c1:a4:1d:e1:87:93:e3:64:0d:b3:f6: f3:1d:01:6d:01:6c:c7:c6:c2:b5:fb:e0:74:dc:76: 49:6e:08:58:d6:c5:3e:83:83:e5:9f:2a:b5:da:fd: 62:c9:62:a6:3f:5f:65:30:d8:01:9d:20:07:59:6c: 12:26:1d:e4:90:58:39:e1:7d:04:48:06:10:8e:a0: 63:60:50:0f:4a:1b:6e:9e:30:e4:11:f3:1b:4c:25: 79:4a:0e:63:c8:95:e3:a0:6b:5e:0f:27:4a:e2:7f: 04:1e:15:ae:f1:6e:41:4b:c7:df:cf:60:57:ba:9e: 6b:97:d6:ee:b9:b1:33:eb:2e:76:77:72:41:05:cf: 14:95:96:49:f6:72:bc:88:08:91:60:b0:e4:aa:ac: 7b:96:62:69:8b:76:e7:0c:29:43:f4:70:eb:46:74: 9c:26:a6:46:fa:77:47:23:b7:ca:86:68:af:20:47: b6:d6:bb:8f:d9:bf:35:a4:aa:20:2d:ba:99:1a:41: 8d:ac:e3:a0:88:7e:e5:bd:d2:79:b9:9c:de:65:2f: e0:cd:59:7d:b9:b0:5e:06:c5:b1:fd:c5:8e:cd:5e: 49:b4:2c:70:e8:25:a2:e0:0a:82:ca:29:d6:4b:7a: d8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5D:90:53:4E:F3:3F:0B:06:90:AE:6D:A3:30:53:E3:1C:70:E9:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b15f408-d296-38e4-9b0d-a2d6cb1734b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7c:a1:b0:3d:04:c2:9b:49:73:98:b4:43:d7:83:92:fc:ce: fc:f6:ca:9d:d3:5d:e9:ad:1a:52:b8:a1:21:46:5b:1e:2d:6e: 84:de:9c:59:72:34:36:22:3c:77:f1:87:59:11:b0:3d:65:0a: c5:3c:53:33:43:4e:65:37:22:3f:7e:5d:f1:29:d7:e2:29:3a: 80:ab:4a:b4:65:c2:5e:78:e8:92:8b:1d:7b:35:be:65:4f:51: 0f:af:aa:64:5a:84:e9:34:d3:c5:87:f3:f6:fd:5f:c1:02:49: 21:dc:43:05:10:af:78:ed:c1:34:84:bf:9a:54:f4:12:21:49: df:bb:35:e0:e0:02:6c:3f:67:bf:ed:1c:02:3e:9a:bb:0f:95: d7:53:1a:94:5f:0b:c6:3c:f9:fe:de:f0:bb:05:08:c7:bc:a1: 97:b3:61:34:70:ae:12:92:1b:2b:35:e7:80:29:5e:94:0b:09: bb:ef:28:44:58:ee:ec:14:29:f4:18:6d:0a:06:7a:62:a8:11: a0:6b:6f:ea:39:c9:ff:4d:bd:65:f7:2f:f3:12:1d:9a:0a:d1: 17:7a:dd:70:b5:5b:80:a4:b8:ef:7b:70:fa:80:3a:6a:ad:92: 63:5a:88:99:e8:da:ba:af:45:ce:02:ea:e9:fd:da:d7:5f:9e: 7e:64:ff:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOGnhiyX1ynnbCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk MmNlZWM1ZTMtZmU0Yi00YTg0LWEzOTItMTUwOWExZDc0YzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5e3/7Tp0D8vVpbRpVKsFuxfwaQd4YeT42QN s/bzHQFtAWzHxsK1++B03HZJbghY1sU+g4Plnyq12v1iyWKmP19lMNgBnSAHWWwS Jh3kkFg54X0ESAYQjqBjYFAPShtunjDkEfMbTCV5Sg5jyJXjoGteDydK4n8EHhWu 8W5BS8ffz2BXup5rl9buubEz6y52d3JBBc8UlZZJ9nK8iAiRYLDkqqx7lmJpi3bn DClD9HDrRnScJqZG+ndHI7fKhmivIEe21ruP2b81pKogLbqZGkGNrOOgiH7lvdJ5 uZzeZS/gzVl9ubBeBsWx/cWOzV5JtCxw6CWi4AqCyinWS3rY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFdkFNO8z8LBpCubaMwU+MccOnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmIxNWY0MDgtZDI5Ni0z OGU0LTliMGQtYTJkNmNiMTczNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN8obA9BMKbSXOYtEPXg5L8zvz2yp3TXemtGlK4oSFGWx4tboTenFly NDYiPHfxh1kRsD1lCsU8UzNDTmU3Ij9+XfEp1+IpOoCrSrRlwl546JKLHXs1vmVP UQ+vqmRahOk008WH8/b9X8ECSSHcQwUQr3jtwTSEv5pU9BIhSd+7NeDgAmw/Z7/t HAI+mrsPlddTGpRfC8Y8+f7e8LsFCMe8oZezYTRwrhKSGys154ApXpQLCbvvKERY 7uwUKfQYbQoGemKoEaBrb+o5yf9NvWX3L/MSHZoK0Rd63XC1W4CkuO97cPqAOmqt kmNaiJno2rqvRc4C6un92tdfnn5k/9Y= -----END CERTIFICATE-----Generated at Fri Oct 23 10:41:48 2026 by rpki-client