$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa File: 3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa (raw, json) Hash identifier: fjjNMEyaPvi+eSOykbtTYwF/UGZP0ZfoDcaRvANwEHY= Subject key identifier: 18:77:A0:81:54:E1:81:BC:47:FB:D1:28:8E:71:08:80:38:C6:BC:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D584BE192E9B7FD2601C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.220.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:58:4b:e1:92:e9:b7:fd:26:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=da14ba47-37df-4090-adf3-24a3be78976f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ad:93:24:44:76:d9:35:60:d4:40:14:06:40: 80:3f:39:38:63:9f:dd:fe:23:65:b3:f0:e1:db:e6: c2:4a:c9:76:25:80:2d:ca:4c:b7:b3:d2:bd:80:64: 5e:bf:65:87:75:4a:c1:f4:41:c9:0a:53:59:74:3e: 96:07:65:f8:48:5b:6e:2b:d5:43:ab:28:0d:e9:0c: a9:50:b4:53:72:32:c2:6a:f1:6b:0d:8e:49:c7:0d: 15:74:51:99:a9:7c:72:f4:49:0c:d8:18:c8:62:69: ef:6b:4e:8e:13:08:5e:5d:3f:0d:2b:d5:e9:b5:92: 61:ea:f1:26:c2:26:0a:bc:a5:3c:b0:bb:09:eb:fd: 36:3d:a8:f4:3f:d6:53:a2:91:1a:62:67:4b:c2:04: 69:34:02:f8:85:73:ec:26:b2:3f:7c:5b:fd:b3:d1: 4c:6c:7e:22:39:fd:1a:35:38:e6:63:2a:e7:8c:38: 3a:6a:32:30:31:7f:be:fc:d2:82:54:ef:76:d0:03: da:d8:05:d8:0f:64:41:95:1f:38:1e:13:4b:cf:f9: 7d:b5:e1:87:38:3c:01:8e:f1:91:79:95:7d:ce:54: b8:0f:a1:93:97:1b:d0:17:6c:54:f5:5e:71:58:77: 38:79:54:a2:66:e9:98:f1:05:47:81:a5:ac:f2:c9: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:77:A0:81:54:E1:81:BC:47:FB:D1:28:8E:71:08:80:38:C6:BC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d9ec3e3-4511-3b7d-b607-291e0255ff7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:93:88:6e:d7:7d:45:57:37:89:58:a4:a6:3b:ed:cc:20:f9: 44:92:2d:45:97:a0:14:19:4e:25:63:21:ac:86:cb:e6:5a:d6: 1f:e0:d3:21:89:1e:46:be:97:85:ba:ac:67:41:bc:86:44:19: 72:bc:d5:65:95:52:1c:6e:68:d9:fc:5b:c9:72:9e:1e:6b:c6: 67:16:17:89:d6:8b:ec:64:0d:a4:06:18:1e:03:c4:db:e7:05: aa:f8:ad:d0:ec:5d:85:57:b2:f3:94:66:a0:8d:a4:0d:23:1a: 32:38:e5:0d:23:2a:52:56:dc:d1:e2:66:f4:97:66:ad:45:e5: 67:3d:da:60:7e:13:d4:3e:34:86:69:ab:37:46:f0:73:88:71: b4:13:4a:0a:0b:37:8c:46:3d:15:b0:48:6b:91:06:38:22:0c: 4c:74:f9:b3:38:cc:16:61:78:9e:b2:17:f6:21:a2:32:6f:8c: 15:4e:65:d4:61:4d:98:bd:74:5a:64:a6:7e:8f:82:20:18:ce: a3:6d:98:ca:88:ae:3d:b7:0b:61:96:cc:69:c2:13:e3:90:9e: 2b:54:87:aa:f8:36:c2:40:09:49:13:c0:e2:dc:62:a0:b0:d7: 0c:21:b8:49:40:97:01:be:79:b5:a1:a2:35:8a:11:8b:cb:5f: 66:bd:4b:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVhL4ZLpt/0mAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGExNGJhNDctMzdkZi00MDkwLWFkZjMtMjRhM2JlNzg5NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK2TJER22TVg1EAUBkCAPzk4Y5/d/iNls/Dh 2+bCSsl2JYAtyky3s9K9gGRev2WHdUrB9EHJClNZdD6WB2X4SFtuK9VDqygN6Qyp ULRTcjLCavFrDY5Jxw0VdFGZqXxy9EkM2BjIYmnva06OEwheXT8NK9XptZJh6vEm wiYKvKU8sLsJ6/02Paj0P9ZTopEaYmdLwgRpNAL4hXPsJrI/fFv9s9FMbH4iOf0a NTjmYyrnjDg6ajIwMX++/NKCVO920APa2AXYD2RBlR84HhNLz/l9teGHODwBjvGR eZV9zlS4D6GTlxvQF2xU9V5xWHc4eVSiZumY8QVHgaWs8skjOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh3oIFU4YG8R/vRKI5xCIA4xryGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Q5ZWMzZTMtNDUxMS0z YjdkLWI2MDctMjkxZTAyNTVmZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2TiG7XfUVXN4lYpKY77cwg+USSLUWXoBQZTiVjIayGy+Za1h/g0yGJ Hka+l4W6rGdBvIZEGXK81WWVUhxuaNn8W8lynh5rxmcWF4nWi+xkDaQGGB4DxNvn Bar4rdDsXYVXsvOUZqCNpA0jGjI45Q0jKlJW3NHiZvSXZq1F5Wc92mB+E9Q+NIZp qzdG8HOIcbQTSgoLN4xGPRWwSGuRBjgiDEx0+bM4zBZheJ6yF/YhojJvjBVOZdRh TZi9dFpkpn6PgiAYzqNtmMqIrj23C2GWzGnCE+OQnitUh6r4NsJACUkTwOLcYqCw 1wwhuElAlwG+ebWhojWKEYvLX2a9S8w= -----END CERTIFICATE-----Generated at Wed Oct 21 12:18:57 2026 by rpki-client