$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa File: 32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa (raw, json) Hash identifier: qgZU9LKQjPRQ0zp4AaeyR/GYRT0ABFh0zpZau2yLO+g= Subject key identifier: 24:D5:A0:2C:9B:C7:D1:19:1F:1D:30:47:77:5F:20:E3:B1:4C:E9:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E4EE467AD8884C7AE7440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9498 IP address blocks: 23.206.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:4e:e4:67:ad:88:84:c7:ae:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e782b760-5662-49f3-9b32-4610fa04da60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:20:50:a1:fe:ac:8f:08:17:b1:9a:f9:90: 0b:0e:0c:f7:86:44:91:7b:f1:90:86:a4:46:ba:7b: fc:cb:b1:31:c8:79:b1:64:30:f1:73:38:89:a6:b3: 91:b9:21:b1:96:d8:c4:0f:68:b5:3d:b1:e2:38:59: 0e:b0:d8:a9:24:45:4c:73:da:11:31:a9:05:f7:1b: ef:d4:57:44:7d:69:f5:61:fd:3d:3c:cb:b5:97:6c: b1:17:66:1e:e0:88:b2:50:a8:ed:74:b6:0c:ab:b2: 61:3c:97:f0:a0:73:07:24:58:9c:aa:10:87:04:86: 80:54:0e:91:aa:f1:3d:c7:58:23:23:ce:22:84:e3: 9c:fd:33:72:bc:ae:2d:ec:dd:0a:ee:9e:fe:f9:64: fa:a3:f0:44:3a:2c:31:e7:c8:01:e6:23:13:b8:af: b6:65:7a:b1:ff:e8:16:80:5c:dd:90:66:4d:3a:8d: a4:a6:8d:fb:ef:21:70:c5:ed:1e:bd:a0:5c:3c:6a: fb:81:d9:08:48:0a:ff:bf:0e:41:9c:b1:5b:64:26: c4:42:0a:83:e6:3d:fe:d5:af:ae:82:65:26:e6:ef: ac:85:8f:67:b3:fe:8f:52:b1:4b:af:2d:94:dd:ff: a6:7c:95:3b:c3:31:60:ec:43:cc:9b:da:92:bf:22: c3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D5:A0:2C:9B:C7:D1:19:1F:1D:30:47:77:5F:20:E3:B1:4C:E9:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32e28cf4-8b69-33c5-949b-4a1b3ac71d19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ec:7f:24:08:ed:d1:98:b1:55:2a:6f:c5:c0:f4:f2:f9:d5: 10:43:f8:12:02:44:10:af:b5:09:66:2f:67:46:da:2e:69:c4: 48:3e:17:92:01:a4:e3:1c:e1:77:ca:72:21:30:77:ff:71:22: 25:f7:2c:a5:70:e1:c7:db:83:68:f2:2c:7d:46:c4:72:08:b1: 68:f8:c7:b2:68:83:3f:17:8e:24:a8:36:fa:ce:61:31:cb:c8: db:43:d8:6e:3c:a9:49:c5:f9:e6:10:eb:db:cc:0f:7e:5e:b4: b1:ef:9c:e5:cc:0f:e4:d5:33:19:af:9e:67:f1:27:c5:b6:cb: ed:c5:10:ee:e5:b5:1e:4e:35:d2:7a:7e:47:21:10:25:4f:fd: 79:c9:73:fd:0e:42:75:01:d7:eb:47:8e:a8:72:06:9d:17:43: 89:e6:11:89:74:7d:2e:ef:c0:02:9a:19:5c:04:be:b4:de:00: 17:95:7c:d5:83:bc:8e:7a:50:8b:f7:a0:ff:15:9e:5a:cf:0a: e9:4f:5a:cc:22:fe:5c:50:c4:0f:bd:f5:3f:77:f9:ff:36:38: 5b:69:bd:8d:a5:a6:99:f9:2a:31:70:54:33:b6:c6:4c:2c:4e: 15:a0:ed:3c:04:81:8f:8e:06:ad:03:7b:38:79:44:e7:af:04: b1:66:7d:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfk7kZ62IhMeudEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTc4MmI3NjAtNTY2Mi00OWYzLTliMzItNDYxMGZhMDRkYTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ8gUKH+rI8IF7Ga+ZALDgz3hkSRe/GQhqRG unv8y7ExyHmxZDDxcziJprORuSGxltjED2i1PbHiOFkOsNipJEVMc9oRMakF9xvv 1FdEfWn1Yf09PMu1l2yxF2Ye4IiyUKjtdLYMq7JhPJfwoHMHJFicqhCHBIaAVA6R qvE9x1gjI84ihOOc/TNyvK4t7N0K7p7++WT6o/BEOiwx58gB5iMTuK+2ZXqx/+gW gFzdkGZNOo2kpo377yFwxe0evaBcPGr7gdkISAr/vw5BnLFbZCbEQgqD5j3+1a+u gmUm5u+shY9ns/6PUrFLry2U3f+mfJU7wzFg7EPMm9qSvyLD/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTVoCybx9EZHx0wR3dfIOOxTOkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzJlMjhjZjQtOGI2OS0z M2M1LTk0OWItNGExYjNhYzcxZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF869MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbsfyQI7dGYsVUqb8XA9PL51RBD+BICRBCvtQlmL2dG2i5pxEg+F5IB pOMc4XfKciEwd/9xIiX3LKVw4cfbg2jyLH1GxHIIsWj4x7Jogz8XjiSoNvrOYTHL yNtD2G48qUnF+eYQ69vMD35etLHvnOXMD+TVMxmvnmfxJ8W2y+3FEO7ltR5ONdJ6 fkchECVP/XnJc/0OQnUB1+tHjqhyBp0XQ4nmEYl0fS7vwAKaGVwEvrTeABeVfNWD vI56UIv3oP8VnlrPCulPWswi/lxQxA+99T93+f82OFtpvY2lppn5KjFwVDO2xkws ThWg7TwEgY+OBq0Dezh5ROevBLFmfdo= -----END CERTIFICATE-----Generated at Wed Oct 28 04:29:16 2026 by rpki-client