$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/340e27e5-07b4-3b40-98d1-b9d9a40e8f17.roa File: 340e27e5-07b4-3b40-98d1-b9d9a40e8f17.roa (raw, json) Hash identifier: m84YqZQORsjlKVeGNNH1KUzKRS8ewuqiY1IpBzHxLdY= Subject key identifier: 48:D4:71:EC:56:67:AC:F8:B7:9D:7B:E3:1F:C5:A2:0B:A5:BC:C4:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49857F6DDA5C0DB6715E8AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/340e27e5-07b4-3b40-98d1-b9d9a40e8f17.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 34164 IP address blocks: 23.213.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:7f:6d:da:5c:0d:b6:71:5e:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=414cd90c-6588-4021-846b-09b7c5641a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:d9:55:d8:fe:f6:e8:10:bd:60:68:bf:e6: d7:6c:8c:bc:c8:38:2d:c6:eb:1b:20:ab:76:85:86: f1:1a:8d:38:12:43:f8:80:eb:12:5e:40:ea:43:a0: c8:68:4b:7e:e2:52:33:ae:14:a2:e3:01:e5:f0:6c: bd:36:98:33:4e:23:cc:08:d8:f4:cd:87:bf:b5:96: ed:bf:84:f2:7c:fb:22:0a:b2:a2:eb:06:03:4b:3b: 1f:cf:3b:ac:50:93:bd:77:76:b3:c1:25:e1:ba:24: d0:b8:32:f1:49:f7:0f:23:42:2e:98:77:48:83:49: 10:cc:92:e8:e7:d4:92:80:be:41:72:99:b2:c6:d7: 52:20:91:63:83:4e:89:b0:13:aa:62:93:a2:93:5f: 19:82:b1:d1:10:a0:7e:36:00:50:7d:bb:6a:6a:0b: 2f:bc:94:0c:01:e8:8e:2b:b8:7d:2f:f5:37:ea:3a: fa:91:4a:da:d1:56:9c:4d:97:43:6d:ef:60:88:d9: 6f:52:c4:1f:71:78:b6:ce:f3:89:d2:43:e2:8f:b7: 24:f1:4a:32:f1:21:c8:5f:bd:d1:8f:9f:90:0a:6d: 61:38:51:59:68:8b:5c:08:6e:62:87:68:82:3e:8a: 48:b8:49:e9:10:dc:de:e9:c2:eb:eb:7c:e5:a4:16: eb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D4:71:EC:56:67:AC:F8:B7:9D:7B:E3:1F:C5:A2:0B:A5:BC:C4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/340e27e5-07b4-3b40-98d1-b9d9a40e8f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:11:5e:c4:7e:4a:81:7d:30:1d:54:bd:33:f8:24:1e:be:4e: 9c:8c:2f:f6:1d:b0:42:75:c2:cf:b1:5a:e1:ed:00:58:b6:c4: 51:51:4f:ee:0c:a9:86:08:e6:19:ee:4f:ee:be:3a:d5:4f:29: 60:5d:c7:b0:90:69:76:d5:b3:65:99:47:69:09:b1:6e:f9:90: 06:93:e6:65:57:ac:dc:14:2a:d7:a2:d2:ab:39:8d:ad:58:5b: 46:a1:b9:00:80:b9:ae:60:7b:c3:3d:01:ed:85:f1:ab:61:2b: 11:25:9b:83:c1:b0:89:bd:21:72:9c:e0:7e:16:5e:e5:1e:9c: 6a:8d:2d:a6:0b:40:c9:86:d6:05:11:88:50:7e:5d:1b:fa:ca: bc:e6:53:e7:d4:63:91:92:05:3c:bc:89:f6:84:d1:52:3a:66: 19:dc:7c:4a:d6:23:48:34:49:64:1a:ff:15:b9:f9:1f:a2:46: cf:9e:dd:ae:ed:49:ba:26:c3:cb:d9:ae:99:4d:14:65:de:20: 34:f2:72:9f:2a:ae:7e:4b:63:0b:ff:3c:8b:3b:8a:be:d4:d8: 62:90:94:6d:fa:e5:bd:7e:b2:9a:91:5f:fb:6d:4c:2d:20:09: 0b:71:83:41:cd:5f:76:70:f2:0d:f8:ad:da:6d:a4:59:89:48: cb:ed:36:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhX9t2lwNtnFeisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDE0Y2Q5MGMtNjU4OC00MDIxLTg0NmItMDliN2M1NjQxYTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCjZVdj+9ugQvWBov+bXbIy8yDgtxusbIKt2 hYbxGo04EkP4gOsSXkDqQ6DIaEt+4lIzrhSi4wHl8Gy9NpgzTiPMCNj0zYe/tZbt v4TyfPsiCrKi6wYDSzsfzzusUJO9d3azwSXhuiTQuDLxSfcPI0IumHdIg0kQzJLo 59SSgL5BcpmyxtdSIJFjg06JsBOqYpOik18ZgrHREKB+NgBQfbtqagsvvJQMAeiO K7h9L/U36jr6kUra0VacTZdDbe9giNlvUsQfcXi2zvOJ0kPij7ck8Uoy8SHIX73R j5+QCm1hOFFZaItcCG5ih2iCPopIuEnpENze6cLr63zlpBbr6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjUcexWZ6z4t5174x/FogulvMSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQwZTI3ZTUtMDdiNC0z YjQwLTk4ZDEtYjlkOWE0MGU4ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYRXsR+SoF9MB1UvTP4JB6+TpyML/YdsEJ1ws+xWuHtAFi2xFFRT+4M qYYI5hnuT+6+OtVPKWBdx7CQaXbVs2WZR2kJsW75kAaT5mVXrNwUKtei0qs5ja1Y W0ahuQCAua5ge8M9Ae2F8athKxElm4PBsIm9IXKc4H4WXuUenGqNLaYLQMmG1gUR iFB+XRv6yrzmU+fUY5GSBTy8ifaE0VI6ZhncfErWI0g0SWQa/xW5+R+iRs+e3a7t Sbomw8vZrplNFGXeIDTycp8qrn5LYwv/PIs7ir7U2GKQlG365b1+spqRX/ttTC0g CQtxg0HNX3Zw8g34rdptpFmJSMvtNsI= -----END CERTIFICATE-----Generated at Wed Oct 21 11:10:00 2026 by rpki-client