$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa File: 5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa (raw, json) Hash identifier: k9F+71qIHRQV2M6piLa5DMpolpVSu9XqZHN5ZR9ByLU= Subject key identifier: 86:8F:5E:29:FC:30:A3:72:EA:B8:FC:80:27:09:AB:9F:A7:13:15:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584FA593A3C49E0111E658A0A200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 9498 IP address blocks: 23.208.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:a3:c4:9e:01:11:e6:58:a0:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=b9bea00e-2f8f-4976-a461-bb7b63b261d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:26:86:be:38:ed:dc:1e:16:f2:4b:23:f6: 58:5f:6d:b7:d7:20:e7:e5:69:4d:dd:7f:db:33:2b: a7:49:47:d6:f9:bc:6f:57:5a:7e:f8:4c:44:50:97: 03:84:90:5c:70:75:53:0f:87:d5:0b:ad:dd:df:66: 26:4a:ed:9f:29:33:4d:34:c3:2b:c7:56:00:9b:46: 10:98:f4:0a:dd:d2:e5:90:17:bd:33:6c:b6:2e:42: 2d:3b:fa:c9:49:bb:ad:2a:68:71:e0:e7:84:b6:f1: 0a:25:5d:5d:2f:b9:dc:f7:92:bf:cd:3e:d3:3b:ec: c1:e9:d3:f3:c4:bc:0a:06:44:20:1b:6a:63:86:06: 72:c2:61:4c:86:38:c4:7a:fb:b9:3a:56:f4:e7:9f: 05:b2:e1:f1:8f:2d:ca:af:5a:da:cc:7a:3a:90:4f: 34:ff:ff:ed:52:96:ce:41:82:77:63:6b:60:a5:9e: a6:80:26:19:73:1d:c8:48:5e:75:4c:56:d9:29:5d: 02:c6:f5:51:13:1e:81:ba:fd:26:5d:72:f0:eb:34: 90:6e:d5:7e:e9:62:47:9d:65:8d:16:72:3b:49:98: 23:1e:71:3e:ec:4b:38:b0:af:52:78:5e:d7:de:40: 1a:d7:91:27:07:80:01:e5:95:50:90:38:05:aa:fc: 36:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8F:5E:29:FC:30:A3:72:EA:B8:FC:80:27:09:AB:9F:A7:13:15:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a8:04:5d:7d:36:4e:b6:36:07:b0:cb:e5:0d:4a:88:e4:c0: 99:6b:80:fc:4b:0f:b8:b7:02:3c:bf:64:b4:41:db:86:f4:60: 2d:0d:40:cc:ad:31:0f:da:c9:bd:b5:9e:a2:76:1b:44:57:9f: 54:f8:70:5f:7a:86:fb:ca:76:0f:b7:e5:9a:f3:20:f0:b6:89: 57:d5:2d:2e:5f:56:de:18:87:b0:e5:9d:8c:12:df:01:1a:e9: cd:be:de:80:88:53:48:25:04:30:dc:55:46:b7:41:7e:69:c4: 8a:e3:18:e1:22:28:32:91:04:83:52:fb:db:74:4f:24:02:12: 71:60:eb:77:7e:75:fa:72:be:ba:a2:38:5b:d9:04:80:07:af: c5:ed:ae:85:aa:a9:42:c1:f7:5c:9e:b8:d7:2c:d8:e9:02:83: 0a:cd:33:41:ec:cc:ad:7a:c8:ae:16:10:5e:96:ef:ca:97:83: 36:7f:fe:4b:26:13:6d:10:c5:61:8e:f0:63:59:13:6e:f9:d8: e2:01:65:d7:34:73:df:e4:de:14:aa:48:5e:4e:fd:c3:66:fe: 5c:2d:99:5f:0e:aa:4a:58:87:04:d9:93:ac:79:4e:fd:2f:08: fb:a6:26:34:81:c0:9e:4d:c2:5c:03:71:23:54:1a:15:85:72: 13:69:2f:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lk6PEngER5ligogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk YjliZWEwMGUtMmY4Zi00OTc2LWE0NjEtYmI3YjYzYjI2MWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Qmhr447dweFvJLI/ZYX2231yDn5WlN3X/b MyunSUfW+bxvV1p++ExEUJcDhJBccHVTD4fVC63d32YmSu2fKTNNNMMrx1YAm0YQ mPQK3dLlkBe9M2y2LkItO/rJSbutKmhx4OeEtvEKJV1dL7nc95K/zT7TO+zB6dPz xLwKBkQgG2pjhgZywmFMhjjEevu5Olb0558FsuHxjy3Kr1razHo6kE80///tUpbO QYJ3Y2tgpZ6mgCYZcx3ISF51TFbZKV0CxvVREx6Buv0mXXLw6zSQbtV+6WJHnWWN FnI7SZgjHnE+7Es4sK9SeF7X3kAa15EnB4AB5ZVQkDgFqvw2BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaPXin8MKNy6rj8gCcJq5+nExUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWViZjk3ZDQtNWQzOS0z ZWRhLTliZmYtNDVlMTJlNTEyYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyoBF19Nk62Ngewy+UNSojkwJlrgPxLD7i3Ajy/ZLRB24b0YC0NQMyt MQ/ayb21nqJ2G0RXn1T4cF96hvvKdg+35ZrzIPC2iVfVLS5fVt4Yh7DlnYwS3wEa 6c2+3oCIU0glBDDcVUa3QX5pxIrjGOEiKDKRBINS+9t0TyQCEnFg63d+dfpyvrqi OFvZBIAHr8XtroWqqULB91yeuNcs2OkCgwrNM0HszK16yK4WEF6W78qXgzZ//ksm E20QxWGO8GNZE2752OIBZdc0c9/k3hSqSF5O/cNm/lwtmV8OqkpYhwTZk6x5Tv0v CPumJjSBwJ5NwlwDcSNUGhWFchNpLwA= -----END CERTIFICATE-----Generated at Wed Oct 28 11:36:43 2026 by rpki-client