$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa File: 2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa (raw, json) Hash identifier: 9nyZ0g+CUw0n3HqKgPUR2ssAfYI2xGCrPc7Zfnr6LE0= Subject key identifier: 6F:97:57:D7:2E:50:80:6E:FF:B9:18:B8:88:CC:43:49:93:CB:AC:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F96386A45DA8D5DF711CE3580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 173.223.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:6a:45:da:8d:5d:f7:11:ce:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=7c4ebcfc-5861-4958-87c7-de6740212834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:60:9a:19:b3:f0:50:1f:1e:08:dc:10:6b: ff:52:36:15:84:54:c8:15:c7:55:d1:21:8f:c1:0e: 3b:7c:40:ba:b5:b2:b1:1c:26:67:fd:7f:bd:33:ea: d2:ec:a6:fc:84:89:47:19:06:a8:df:5b:1a:24:4c: 65:e4:5f:74:6f:e3:3e:e1:a3:e2:8a:0a:f2:d8:94: f5:89:83:32:40:b8:92:01:16:0b:6b:44:0d:f1:b9: c9:70:d1:09:e4:cb:da:a1:87:fb:c3:6a:44:6b:42: e1:99:aa:c9:df:35:a1:4d:94:a8:1d:b5:4a:47:dd: c3:46:49:c3:5c:4d:36:ea:8c:e1:78:59:ef:38:27: 88:e5:c8:0f:c8:54:32:42:10:0b:e9:6a:ff:c0:59: df:75:d2:0a:4e:fa:98:e4:32:79:ff:a4:41:c6:51: bd:af:aa:ad:7f:2b:ec:47:00:63:12:37:dc:25:e9: 9b:de:cb:bb:11:cb:a2:ca:34:75:bb:04:81:23:45: b5:fc:2c:ac:16:f7:af:7a:4e:f3:4a:3c:f9:49:c1: 21:d1:29:91:36:88:b8:5e:2e:ef:28:ee:d3:6d:37: 44:3a:64:f9:24:08:19:1c:29:78:50:55:81:98:80: 8f:6c:a0:22:6c:5f:7f:8e:cc:7f:bd:d7:48:ae:97: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:97:57:D7:2E:50:80:6E:FF:B9:18:B8:88:CC:43:49:93:CB:AC:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cde9d4b-59c4-33b4-8d1d-591f13f7f0d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b0:09:6f:99:0a:e4:2f:62:5c:27:d1:7c:f8:5c:48:47:7d: 60:38:75:96:1c:21:95:25:35:55:42:93:ef:bf:26:5c:43:01: 8a:7c:df:4c:4b:84:d5:dc:d5:c3:90:fc:da:dc:8b:68:42:eb: 65:f6:3f:23:ea:07:b0:a7:f3:76:24:e2:b0:65:95:6c:52:e9: 2b:5f:d9:51:51:d2:9d:ec:bf:3e:33:12:3e:cd:73:55:25:19: 66:1e:d7:d5:1b:0b:e6:81:c7:3d:24:91:df:d1:eb:a2:6d:fe: 94:25:d9:89:da:c7:a0:ff:a2:d0:26:db:82:94:17:b0:17:5a: 35:8a:52:3d:67:00:e0:fc:2a:98:49:d0:da:8c:d6:5d:8b:de: 45:a3:24:7d:6b:58:b9:1a:44:8f:7b:bc:5a:af:08:bd:df:7f: d4:ea:ad:81:83:49:c4:15:fc:ec:12:ae:b9:50:94:24:a3:e9: 66:10:0f:be:72:a9:b3:6d:56:30:04:fd:29:74:df:60:25:b7: 9f:f3:dd:c6:a9:ad:75:ed:46:8d:3c:59:f6:a7:eb:34:da:7f: db:db:d4:30:7e:3b:2d:06:0e:c8:7b:7b:ae:e0:b4:6a:d3:24: 19:31:60:01:f9:d5:d3:20:ac:ca:80:f6:eb:94:c4:97:cb:99: 39:89:4b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOGpF2o1d9xHONYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk N2M0ZWJjZmMtNTg2MS00OTU4LTg3YzctZGU2NzQwMjEyODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodBgmhmz8FAfHgjcEGv/UjYVhFTIFcdV0SGP wQ47fEC6tbKxHCZn/X+9M+rS7Kb8hIlHGQao31saJExl5F90b+M+4aPiigry2JT1 iYMyQLiSARYLa0QN8bnJcNEJ5MvaoYf7w2pEa0LhmarJ3zWhTZSoHbVKR93DRknD XE026ozheFnvOCeI5cgPyFQyQhAL6Wr/wFnfddIKTvqY5DJ5/6RBxlG9r6qtfyvs RwBjEjfcJemb3su7EcuiyjR1uwSBI0W1/CysFvevek7zSjz5ScEh0SmRNoi4Xi7v KO7TbTdEOmT5JAgZHCl4UFWBmICPbKAibF9/jsx/vddIrpfZgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+XV9cuUIBu/7kYuIjMQ0mTy6wKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmNkZTlkNGItNTljNC0z M2I0LThkMWQtNTkxZjEzZjdmMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACawCW+ZCuQvYlwn0Xz4XEhHfWA4dZYcIZUlNVVCk++/JlxDAYp830xL hNXc1cOQ/Nrci2hC62X2PyPqB7Cn83Yk4rBllWxS6Stf2VFR0p3svz4zEj7Nc1Ul GWYe19UbC+aBxz0kkd/R66Jt/pQl2Ynax6D/otAm24KUF7AXWjWKUj1nAOD8KphJ 0NqM1l2L3kWjJH1rWLkaRI97vFqvCL3ff9TqrYGDScQV/OwSrrlQlCSj6WYQD75y qbNtVjAE/Sl032Alt5/z3caprXXtRo08Wfan6zTaf9vb1DB+Oy0GDsh7e67gtGrT JBkxYAH51dMgrMqA9uuUxJfLmTmJSzQ= -----END CERTIFICATE-----Generated at Fri Oct 23 20:40:17 2026 by rpki-client