$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e1de3a2-0e18-3fe5-a99d-e819aad1044e.roa File: 4e1de3a2-0e18-3fe5-a99d-e819aad1044e.roa (raw, json) Hash identifier: AOQNNnyhH3fDeCj1syVlQuslMzDEgPztBcUlPLvY9pM= Subject key identifier: E4:CA:88:78:4B:48:DC:BC:61:4B:11:F9:B8:44:4C:43:F4:88:B6:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E6017E003EC32BE6FDB10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e1de3a2-0e18-3fe5-a99d-e819aad1044e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.212.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:60:17:e0:03:ec:32:be:6f:db:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=61681915-7285-417e-abc8-7597fadaf49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:57:a9:82:f1:a3:d2:76:65:e8:d4:01:23: 43:6e:d2:c1:28:c1:c8:1c:ca:2c:44:11:ce:5a:77: 14:5b:8d:45:58:b4:64:e5:32:37:d8:3d:09:30:15: d1:c1:3e:5a:3b:b3:5f:62:a7:f3:ed:a1:0e:ca:49: ba:48:fa:16:62:dd:bc:83:d3:2e:53:22:ee:42:cf: 73:38:2d:62:40:d1:49:6d:10:b7:67:3e:6d:b7:f0: 72:69:35:26:32:50:80:ed:88:2f:e3:f7:30:9c:b1: 97:f2:41:c6:8f:d8:17:f1:00:49:2e:74:7b:28:20: 08:db:d0:5f:30:ed:e3:fc:c3:84:c4:08:95:c0:85: 5f:2d:1c:7e:40:52:cd:e8:6b:71:d3:aa:77:69:d7: 6e:a4:61:05:b5:d2:db:1f:1a:f0:ea:1b:62:42:01: 1b:ed:40:79:94:7f:8e:30:05:81:39:46:bf:1a:f0: 3b:a9:65:de:e9:b0:6c:83:d9:db:dc:1c:b6:7f:73: f4:d6:18:bc:a7:bc:24:60:29:03:28:01:16:20:38: 72:f2:44:e6:c6:9c:39:6f:13:77:68:58:c3:f2:0b: d0:77:69:86:1b:b5:61:a0:44:7a:e6:c7:80:db:24: 1c:76:72:47:e2:58:15:4e:c3:55:d9:50:df:5a:65: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CA:88:78:4B:48:DC:BC:61:4B:11:F9:B8:44:4C:43:F4:88:B6:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e1de3a2-0e18-3fe5-a99d-e819aad1044e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:60:b9:05:5a:dd:77:64:2c:fd:f4:a7:94:54:e5:fc:24:8d: e7:86:7b:07:50:01:bd:78:4b:a6:91:d6:5d:2e:b3:98:a2:1c: 4b:d5:12:b0:d0:92:59:f2:dc:b8:cb:54:ca:6e:7b:b7:5e:7f: 20:b0:dd:ae:94:ad:ab:17:6e:48:a2:5f:4e:9a:1a:00:7d:e7: b0:d6:3d:c7:88:ea:4c:52:a5:bc:3d:df:98:e3:c2:c6:a1:37: ae:c0:a8:ec:91:ad:db:65:05:57:bb:12:ca:ba:f8:3a:bc:e3: 60:9d:db:56:b7:c2:65:d8:3a:30:79:43:dd:d5:a9:f9:b6:3d: 17:f3:91:4e:43:db:e7:fa:89:8b:2c:80:79:02:1b:19:1a:f6: 30:28:29:44:fb:32:c0:98:4f:8b:09:4e:6d:4e:21:fe:71:82: c2:15:8b:55:26:10:2e:d0:61:d7:2a:d0:92:ab:8b:31:e8:a7: 54:b4:ec:d7:89:51:cc:ae:6b:55:30:36:11:0d:c6:5d:d1:2f: 0f:e3:df:4e:f9:ab:bb:3e:51:06:6a:1f:97:3f:71:4f:9d:18: 1e:27:ec:b4:1f:1b:3e:4f:ea:76:80:97:07:e3:bf:89:22:7e: 20:7e:0f:0d:0f:ac:6a:3e:c6:b3:37:7b:6d:52:44:e2:b8:c4: 16:be:de:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfmAX4APsMr5v2xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjE2ODE5MTUtNzI4NS00MTdlLWFiYzgtNzU5N2ZhZGFmNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/RXqYLxo9J2ZejUASNDbtLBKMHIHMosRBHO WncUW41FWLRk5TI32D0JMBXRwT5aO7NfYqfz7aEOykm6SPoWYt28g9MuUyLuQs9z OC1iQNFJbRC3Zz5tt/ByaTUmMlCA7Ygv4/cwnLGX8kHGj9gX8QBJLnR7KCAI29Bf MO3j/MOExAiVwIVfLRx+QFLN6Gtx06p3addupGEFtdLbHxrw6htiQgEb7UB5lH+O MAWBOUa/GvA7qWXe6bBsg9nb3By2f3P01hi8p7wkYCkDKAEWIDhy8kTmxpw5bxN3 aFjD8gvQd2mGG7VhoER65seA2yQcdnJH4lgVTsNV2VDfWmV96QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTKiHhLSNy8YUsR+bhETEP0iLaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGUxZGUzYTItMGUxOC0z ZmU1LWE5OWQtZTgxOWFhZDEwNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9REMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFguQVa3XdkLP30p5RU5fwkjeeGewdQAb14S6aR1l0us5iiHEvVErDQ klny3LjLVMpue7defyCw3a6UrasXbkiiX06aGgB957DWPceI6kxSpbw935jjwsah N67AqOyRrdtlBVe7Esq6+Dq842Cd21a3wmXYOjB5Q93Vqfm2PRfzkU5D2+f6iYss gHkCGxka9jAoKUT7MsCYT4sJTm1OIf5xgsIVi1UmEC7QYdcq0JKrizHop1S07NeJ Ucyua1UwNhENxl3RLw/j3075q7s+UQZqH5c/cU+dGB4n7LQfGz5P6naAlwfjv4ki fiB+Dw0PrGo+xrM3e21SROK4xBa+3uk= -----END CERTIFICATE-----Generated at Sat Oct 24 06:58:03 2026 by rpki-client