$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300e763f-0233-35dc-b470-8df68cdea131.roa File: 300e763f-0233-35dc-b470-8df68cdea131.roa (raw, json) Hash identifier: Vf2Jd7rHHEHMuKJGerlV3qshrPoXfxcdQ7vkA2CVsrA= Subject key identifier: D8:7F:8F:60:C7:CB:CD:97:28:85:6D:B1:C5:D3:9C:E1:2B:F6:3B:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F9BCDDBD88A21D2B96E4D8800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300e763f-0233-35dc-b470-8df68cdea131.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 20940 IP address blocks: 23.66.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:db:d8:8a:21:d2:b9:6e:4d:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=30abeb6d-7f63-4b3a-97f8-8f25c10ebad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a7:4f:3f:f8:da:c0:ef:a9:25:68:e0:cc:0c: f0:73:53:5a:0e:09:bf:a4:31:02:1b:d3:22:b0:e0: 1a:40:a5:fc:19:5b:f8:28:1f:af:c5:d7:af:a6:ca: 9a:b2:b3:db:1b:ea:bd:95:e4:b1:fa:68:9b:54:08: 2c:9e:88:a2:79:af:2c:21:1e:d9:ca:e2:58:37:d8: 96:5a:90:9e:ae:c5:0d:b5:26:48:b4:86:c5:20:3f: f1:6b:14:98:1a:72:f9:bf:b9:cc:99:0c:92:20:7b: 47:c3:cf:f4:40:58:8f:0d:d3:1a:1d:29:b2:2d:a8: b4:cd:6c:fb:b8:2f:f6:de:07:2b:3a:85:e5:7e:26: dc:8f:54:f2:68:e9:e5:a5:e4:f8:8b:38:37:5e:6f: 95:a0:26:7f:75:da:53:b0:d0:97:6a:e6:a3:2b:55: 50:9d:d5:e6:e3:b4:b6:a6:5b:d1:e9:f5:ae:ad:98: 9e:b9:08:bc:28:29:82:7d:a3:c2:43:32:26:5b:e4: b8:19:7e:37:4a:72:8a:cd:98:d6:91:ea:40:c1:3e: a6:10:3c:03:26:cb:9d:e3:25:43:5a:6f:74:10:e0: da:f2:e7:a0:88:57:17:ae:bc:4c:34:8e:a2:fd:63: 14:19:fe:46:b5:e2:15:ac:32:68:09:84:18:58:be: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7F:8F:60:C7:CB:CD:97:28:85:6D:B1:C5:D3:9C:E1:2B:F6:3B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/300e763f-0233-35dc-b470-8df68cdea131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:f8:48:dd:48:3b:eb:18:1e:95:85:ba:83:1d:23:01:e4:29: 4e:3a:61:70:fe:51:63:c7:f3:51:01:e5:eb:ff:9b:b9:f8:cc: e9:09:4a:bb:70:3e:d7:ab:5f:b2:b9:b1:92:66:36:fd:a4:6b: a7:bc:e9:44:11:6e:85:99:1d:ac:59:db:8c:a0:74:fe:b6:9c: 5c:33:8a:2c:d1:be:46:8f:38:29:c5:01:5a:fa:31:e4:f1:63: d3:18:51:a4:35:f3:ea:4f:2f:c2:47:8a:e6:40:13:bd:b0:64: e9:3b:56:0a:05:91:65:ee:97:c5:3f:49:68:24:d4:44:e7:82: ca:d1:63:01:e6:cd:68:62:14:52:09:71:06:35:2e:af:fe:93: 36:94:24:a6:99:8b:7a:6a:fc:37:47:be:7c:5a:08:17:ca:2c: 09:a5:16:a7:84:28:29:32:0d:b8:0f:6b:5e:17:06:69:eb:4b: 33:24:1b:4a:4b:af:22:7e:9b:19:f0:d5:96:64:f4:26:38:e6: fd:3d:76:6f:2a:b7:fd:8f:05:4b:8b:9a:b7:72:c0:8e:e2:87: c3:24:d1:0b:17:63:fd:39:f7:d8:57:08:d8:a6:fe:25:b5:5c: fa:f3:cc:fe:bc:04:92:c2:ff:26:18:30:77:97:73:e1:43:28: ed:36:83:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzdvYiiHSuW5NiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MzBhYmViNmQtN2Y2My00YjNhLTk3ZjgtOGYyNWMxMGViYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqdPP/jawO+pJWjgzAzwc1NaDgm/pDECG9Mi sOAaQKX8GVv4KB+vxdevpsqasrPbG+q9leSx+mibVAgsnoiiea8sIR7ZyuJYN9iW WpCersUNtSZItIbFID/xaxSYGnL5v7nMmQySIHtHw8/0QFiPDdMaHSmyLai0zWz7 uC/23gcrOoXlfibcj1TyaOnlpeT4izg3Xm+VoCZ/ddpTsNCXauajK1VQndXm47S2 plvR6fWurZieuQi8KCmCfaPCQzImW+S4GX43SnKKzZjWkepAwT6mEDwDJsud4yVD Wm90EODa8uegiFcXrrxMNI6i/WMUGf5GteIVrDJoCYQYWL48fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh/j2DHy82XKIVtscXTnOEr9jsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzAwZTc2M2YtMDIzMy0z NWRjLWI0NzAtOGRmNjhjZGVhMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0LpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv4SN1IO+sYHpWFuoMdIwHkKU46YXD+UWPH81EB5ev/m7n4zOkJSrtw PterX7K5sZJmNv2ka6e86UQRboWZHaxZ24ygdP62nFwziizRvkaPOCnFAVr6MeTx Y9MYUaQ18+pPL8JHiuZAE72wZOk7VgoFkWXul8U/SWgk1ETngsrRYwHmzWhiFFIJ cQY1Lq/+kzaUJKaZi3pq/DdHvnxaCBfKLAmlFqeEKCkyDbgPa14XBmnrSzMkG0pL ryJ+mxnw1ZZk9CY45v09dm8qt/2PBUuLmrdywI7ih8Mk0QsXY/0599hXCNim/iW1 XPrzzP68BJLC/yYYMHeXc+FDKO02g+Q= -----END CERTIFICATE-----Generated at Mon Oct 26 03:54:29 2026 by rpki-client