$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f8f250e-84a5-3cef-8bc6-875320b27539.roa File: 3f8f250e-84a5-3cef-8bc6-875320b27539.roa (raw, json) Hash identifier: 20X+YaUBMw9UycZeIExB3R7JAz5CkBxqp/haj9XG0r4= Subject key identifier: 88:56:4B:3C:A7:A7:F1:F7:16:7A:8B:D2:58:73:51:F7:93:97:80:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5E17155DEDE8303A6400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f8f250e-84a5-3cef-8bc6-875320b27539.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 852 IP address blocks: 23.220.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5e:17:15:5d:ed:e8:30:3a:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=f629cb43-521d-48b8-95dc-119863fd52cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:ca:aa:75:79:15:15:71:ab:d4:25:ef:ce: 71:b8:07:f9:58:66:0c:e2:28:a4:e0:fa:1e:d6:30: ea:25:39:6a:7b:b6:72:6d:91:d2:97:60:7f:ba:44: 1e:f5:1b:b8:a6:f9:d3:07:a7:db:75:57:cd:77:3b: 98:ac:91:17:76:92:ea:d3:67:67:a6:dd:9a:0a:32: fe:88:d6:f9:5d:58:4e:d9:95:c1:ea:3e:56:97:d1: 3d:47:c3:77:99:46:d6:fa:e9:21:e6:50:7d:9a:b3: 57:8d:a3:9e:f7:76:11:c5:4f:b7:63:a1:41:3d:5e: 5e:94:70:1e:aa:b8:8a:77:0c:81:f8:97:9a:13:12: 8d:39:00:34:48:31:c2:36:a7:e2:54:04:48:66:5b: ab:b0:d9:83:ee:ce:ce:65:88:5f:c5:da:cf:d6:55: 26:7a:78:44:5a:6d:a3:e6:0c:3e:1d:8f:9c:83:d0: 16:72:e2:09:e1:ba:dc:35:f9:4e:79:d2:72:ec:c5: 2e:24:62:92:44:63:ce:3f:dc:37:79:ad:67:38:d7: 23:89:e0:ab:dd:61:5c:26:3e:ac:de:4d:bf:36:42: 70:77:24:21:02:f6:66:30:17:2d:94:5b:d9:e5:c4: 84:cc:ca:f8:26:da:a1:17:ba:54:4d:28:7c:46:18: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:4B:3C:A7:A7:F1:F7:16:7A:8B:D2:58:73:51:F7:93:97:80:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f8f250e-84a5-3cef-8bc6-875320b27539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c1:94:69:3c:db:d8:58:8e:9a:25:6c:60:66:63:3b:5d:d3: f1:02:35:50:09:a8:10:d5:d5:38:3d:b8:ce:94:c0:b7:3b:8d: 57:58:8f:a3:c2:be:81:3e:b4:15:d7:99:d5:f7:39:ea:c7:3d: 3e:c9:bd:10:ab:7c:31:43:14:94:20:a6:17:d2:24:3d:53:d0: 7a:97:a3:7c:77:03:ff:62:77:48:5d:1b:e6:04:b6:50:ab:4e: 7c:3f:ff:af:94:25:98:60:da:59:3a:4e:fd:89:96:29:e8:b3: 7e:6c:93:eb:97:f3:16:c9:7b:a8:af:64:e9:e9:55:2a:12:30: b9:8d:70:ce:c0:2a:3a:26:aa:c2:5f:48:4a:a8:e2:3f:0b:a7: 5c:2e:26:92:ab:f8:6d:90:79:8b:41:31:46:7e:1f:25:d9:01: 7b:a7:09:6a:3d:cf:e4:e8:a5:56:b3:1b:c8:97:0e:64:d3:1d: 2b:94:b9:64:4e:b6:d3:f6:2a:2d:cd:e4:2f:aa:b0:c3:57:32: 68:09:1e:f7:6d:6c:58:65:ed:6c:a8:52:0c:17:68:cb:7c:b3: d7:39:e9:ea:0d:a0:c1:d7:0a:e1:5e:a4:ec:48:15:34:e1:91: 1b:20:10:14:97:1d:69:93:9e:55:ea:55:8b:a5:e7:f3:a4:b1: 6d:75:eb:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbV4XFV3t6DA6ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjYyOWNiNDMtNTIxZC00OGI4LTk1ZGMtMTE5ODYzZmQ1MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWnKqnV5FRVxq9Ql785xuAf5WGYM4iik4Poe 1jDqJTlqe7ZybZHSl2B/ukQe9Ru4pvnTB6fbdVfNdzuYrJEXdpLq02dnpt2aCjL+ iNb5XVhO2ZXB6j5Wl9E9R8N3mUbW+ukh5lB9mrNXjaOe93YRxU+3Y6FBPV5elHAe qriKdwyB+JeaExKNOQA0SDHCNqfiVARIZlursNmD7s7OZYhfxdrP1lUmenhEWm2j 5gw+HY+cg9AWcuIJ4brcNflOedJy7MUuJGKSRGPOP9w3ea1nONcjieCr3WFcJj6s 3k2/NkJwdyQhAvZmMBctlFvZ5cSEzMr4JtqhF7pUTSh8RhgcgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhWSzynp/H3FnqL0lhzUfeTl4D1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y4ZjI1MGUtODRhNS0z Y2VmLThiYzYtODc1MzIwYjI3NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9xcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7BlGk829hYjpolbGBmYztd0/ECNVAJqBDV1Tg9uM6UwLc7jVdYj6PC voE+tBXXmdX3OerHPT7JvRCrfDFDFJQgphfSJD1T0HqXo3x3A/9id0hdG+YEtlCr Tnw//6+UJZhg2lk6Tv2Jlinos35sk+uX8xbJe6ivZOnpVSoSMLmNcM7AKjomqsJf SEqo4j8Lp1wuJpKr+G2QeYtBMUZ+HyXZAXunCWo9z+TopVazG8iXDmTTHSuUuWRO ttP2Ki3N5C+qsMNXMmgJHvdtbFhl7WyoUgwXaMt8s9c56eoNoMHXCuFepOxIFTTh kRsgEBSXHWmTnlXqVYul5/OksW1168M= -----END CERTIFICATE-----Generated at Sat Oct 24 17:46:28 2026 by rpki-client