$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2e8407-9c18-331a-9944-1a25d83f4792.roa File: 5c2e8407-9c18-331a-9944-1a25d83f4792.roa (raw, json) Hash identifier: INHOTUMFAGVY1T3KV9QMI6VR3u8lHW0b7Bv46sKsviU= Subject key identifier: 00:BA:60:50:40:01:6A:4F:DB:08:62:10:6A:6D:C0:82:17:DF:53:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB2E25740A5B5D47591BDC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2e8407-9c18-331a-9944-1a25d83f4792.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 20940 IP address blocks: 23.216.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:e2:57:40:a5:b5:d4:75:91:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=2aff1417-a2af-44a2-b288-81e4f5987774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:46:72:4c:8e:a4:62:3d:77:43:af:2a:c2:74: 91:4b:b3:f5:d8:18:a0:7f:e1:8b:92:8f:45:38:86: df:d1:15:fd:82:f4:af:5c:fa:8d:cd:c4:8f:74:5c: 01:bc:34:fc:45:24:43:9c:18:88:5c:80:fc:6b:10: 8c:53:61:f8:fb:8b:3c:55:2a:1a:22:e4:0a:d7:6c: ed:a3:d9:d0:ed:fc:ab:d9:2d:35:24:42:ba:34:96: 0f:2a:a7:48:40:02:d1:a8:0b:71:e3:b2:93:54:98: 84:04:03:af:86:57:16:ca:ef:f1:73:d2:b4:a2:49: eb:5a:75:0e:2e:32:99:df:68:fa:6c:c2:32:b0:bd: a8:0e:43:85:62:56:a7:ac:14:72:c0:d1:7d:0c:4c: 91:fa:c0:1b:c8:73:f5:3d:a9:7d:9c:61:92:54:31: f7:65:8e:69:1e:41:f0:3f:31:34:4c:1c:2a:54:47: 0f:e9:8e:24:41:56:92:20:36:32:6d:2c:81:04:39: ba:b4:29:19:e2:d4:7d:9e:09:87:ee:69:da:c7:8c: 93:45:d3:1f:19:af:c9:96:04:39:58:ab:86:c1:1e: 57:5b:f9:29:72:66:67:9f:93:d1:a3:e9:ec:12:6f: ad:d8:14:48:28:85:b0:e9:cc:2c:17:75:c0:b9:a7: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BA:60:50:40:01:6A:4F:DB:08:62:10:6A:6D:C0:82:17:DF:53:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c2e8407-9c18-331a-9944-1a25d83f4792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a9:c2:18:6f:8e:a1:30:1a:ff:3f:26:0a:a4:21:62:1a:5b: d7:fe:2e:27:40:8b:f2:ce:20:f4:db:60:32:4a:b6:10:7c:52: 7d:91:38:41:7d:d2:33:e2:9f:7c:0d:89:eb:02:af:1d:12:ce: 98:0b:4c:82:d5:25:b5:b7:e0:fc:9d:29:60:f3:4b:d5:6c:dd: 26:9e:d9:2e:6c:72:a3:2d:86:1d:db:34:84:fb:21:dd:ea:4e: 79:db:59:46:2a:1b:c5:3b:15:14:b5:f7:f0:53:39:3b:c7:87: b2:aa:c1:77:95:40:d8:72:a3:56:f4:68:d9:53:01:c1:92:a2: 13:ca:45:51:3b:88:32:5a:9c:76:74:fd:b0:c6:a0:ca:68:95: 97:83:51:f2:07:f2:7c:da:01:ee:ad:2e:72:4d:43:c9:06:4d: a1:c2:4e:b4:d1:4a:f9:d7:3d:2c:50:ec:d6:94:c4:ca:42:e1: 3b:98:d7:f1:7c:68:47:10:ef:45:67:b8:17:df:ab:cb:72:aa: 03:91:c2:f3:6c:5a:47:18:92:25:8d:e6:9b:b3:73:11:ef:6c: 38:6a:54:09:ea:54:e5:cd:9d:f4:99:86:33:1c:68:11:66:91: 0f:60:17:aa:42:64:ad:6a:47:39:df:a9:39:31:65:c9:7e:f4: 55:50:65:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97suJXQKW11HWRvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MmFmZjE0MTctYTJhZi00NGEyLWIyODgtODFlNGY1OTg3Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkZyTI6kYj13Q68qwnSRS7P12Bigf+GLko9F OIbf0RX9gvSvXPqNzcSPdFwBvDT8RSRDnBiIXID8axCMU2H4+4s8VSoaIuQK12zt o9nQ7fyr2S01JEK6NJYPKqdIQALRqAtx47KTVJiEBAOvhlcWyu/xc9K0oknrWnUO LjKZ32j6bMIysL2oDkOFYlanrBRywNF9DEyR+sAbyHP1Pal9nGGSVDH3ZY5pHkHw PzE0TBwqVEcP6Y4kQVaSIDYybSyBBDm6tCkZ4tR9ngmH7mnax4yTRdMfGa/JlgQ5 WKuGwR5XW/kpcmZnn5PRo+nsEm+t2BRIKIWw6cwsF3XAuacrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAC6YFBAAWpP2whiEGptwIIX31OsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWMyZTg0MDctOWMxOC0z MzFhLTk5NDQtMWEyNWQ4M2Y0NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+pwhhvjqEwGv8/JgqkIWIaW9f+LidAi/LOIPTbYDJKthB8Un2ROEF9 0jPin3wNiesCrx0SzpgLTILVJbW34PydKWDzS9Vs3Sae2S5scqMthh3bNIT7Id3q TnnbWUYqG8U7FRS19/BTOTvHh7KqwXeVQNhyo1b0aNlTAcGSohPKRVE7iDJanHZ0 /bDGoMpolZeDUfIH8nzaAe6tLnJNQ8kGTaHCTrTRSvnXPSxQ7NaUxMpC4TuY1/F8 aEcQ70VnuBffq8tyqgORwvNsWkcYkiWN5puzcxHvbDhqVAnqVOXNnfSZhjMcaBFm kQ9gF6pCZK1qRznfqTkxZcl+9FVQZcs= -----END CERTIFICATE-----Generated at Tue Oct 20 22:09:46 2026 by rpki-client