$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6453c9a3-6fa9-3047-ac18-72b625b362d7.roa File: 6453c9a3-6fa9-3047-ac18-72b625b362d7.roa (raw, json) Hash identifier: dPsB9V8p9gEtfVgpUc+AhY2lIbUBQhMr+EQo20D7e6E= Subject key identifier: 76:89:69:41:0F:E0:C9:AA:86:2F:D4:63:86:7D:33:F6:B4:05:C3:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F82ADB833FEE9D53031C1BF40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6453c9a3-6fa9-3047-ac18-72b625b362d7.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 23.213.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:b8:33:fe:e9:d5:30:31:c1:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=028fdb31-ba1d-40f9-ba26-b4579507b055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:18:33:58:4e:e3:8f:d7:06:a1:c7:59:7a:51: 76:53:6d:ef:4e:ab:8e:88:3b:fa:3b:ea:fb:c5:be: 40:ed:46:18:76:98:7f:a9:2b:68:b7:9f:6e:1e:79: 6d:84:33:d6:c6:80:13:9a:5c:8f:7c:53:73:d3:b0: b2:97:85:44:ed:29:13:b6:81:30:5b:a2:b8:25:30: ed:12:0e:28:ef:9b:d3:9a:b2:26:c2:45:7c:6b:4d: 92:bf:f5:d6:75:42:59:6c:31:fd:f6:d2:e7:fd:c4: fd:13:3d:0d:a8:47:8d:2c:8f:04:fc:f1:c0:a4:88: 39:8a:05:a6:14:cd:42:3f:f9:3c:9e:4e:f5:26:00: 26:6a:1c:92:5b:55:cb:83:bc:9e:14:95:8a:cb:3e: 16:8f:4f:1c:60:27:5a:dc:cb:5e:e2:ef:13:2b:d4: 40:03:51:23:52:a9:62:70:7f:e8:4e:88:f1:ed:3f: 92:a5:30:ec:bc:02:29:c9:a0:59:a8:21:95:1b:4d: 33:54:ea:2f:ec:c2:eb:64:40:d2:fb:73:4d:1f:14: 1c:b0:4f:e2:4a:da:41:9f:2c:bc:0c:20:17:cd:1e: ed:22:50:e1:1c:26:d4:90:10:ea:ee:14:68:4f:71: c7:12:28:5d:3b:c0:52:e0:47:e5:6e:6c:2c:ad:2e: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:89:69:41:0F:E0:C9:AA:86:2F:D4:63:86:7D:33:F6:B4:05:C3:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6453c9a3-6fa9-3047-ac18-72b625b362d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:74:bf:eb:4b:06:27:ab:16:85:b6:e8:97:33:ef:88:2d:65: 0b:35:d7:78:75:97:b7:80:a9:8a:46:5a:fb:36:3f:83:9d:00: 15:cb:2e:5a:de:bd:80:4e:51:03:64:69:6e:ca:6b:18:55:0a: e7:2a:84:70:cb:d0:7e:f0:87:04:f5:2a:9b:46:b6:48:92:15: ba:a1:f3:ae:cb:90:d4:af:63:6d:b8:98:30:4f:4c:e3:e4:55: c6:18:3a:47:44:88:73:88:8c:cb:62:68:47:d5:75:fb:30:26: 42:be:8b:3c:dc:e1:4c:62:0e:08:5a:27:62:af:04:2c:30:d5: 14:f1:82:7a:0b:a6:46:22:45:25:53:89:ca:ff:dd:3a:f0:1b: d5:4a:bf:46:f6:c8:de:12:57:a3:0f:af:79:47:a9:bb:a8:73: 5a:52:f5:f8:16:52:6c:af:06:8d:86:ca:df:16:f4:35:f8:61: cd:a0:56:ac:a8:06:43:c9:b2:52:b7:7b:52:e2:e5:74:71:03: a6:42:f2:cc:8f:3e:68:f8:01:b4:32:42:76:b0:47:02:da:f1: 5d:f9:1b:f7:3c:f7:4e:99:5f:95:1c:2a:fd:81:46:49:c2:4d: f4:a2:30:ec:2e:e4:6d:25:2e:28:73:3b:ad:9a:34:61:56:d1: fa:f5:fe:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Crbgz/unVMDHBv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk MDI4ZmRiMzEtYmExZC00MGY5LWJhMjYtYjQ1Nzk1MDdiMDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBgzWE7jj9cGocdZelF2U23vTquOiDv6O+r7 xb5A7UYYdph/qStot59uHnlthDPWxoATmlyPfFNz07Cyl4VE7SkTtoEwW6K4JTDt Eg4o75vTmrImwkV8a02Sv/XWdUJZbDH99tLn/cT9Ez0NqEeNLI8E/PHApIg5igWm FM1CP/k8nk71JgAmahySW1XLg7yeFJWKyz4Wj08cYCda3Mte4u8TK9RAA1EjUqli cH/oTojx7T+SpTDsvAIpyaBZqCGVG00zVOov7MLrZEDS+3NNHxQcsE/iStpBnyy8 DCAXzR7tIlDhHCbUkBDq7hRoT3HHEihdO8BS4EflbmwsrS6GUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaJaUEP4Mmqhi/UY4Z9M/a0BcOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQ1M2M5YTMtNmZhOS0z MDQ3LWFjMTgtNzJiNjI1YjM2MmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV0v+tLBierFoW26Jcz74gtZQs113h1l7eAqYpGWvs2P4OdABXLLlre vYBOUQNkaW7KaxhVCucqhHDL0H7whwT1KptGtkiSFbqh867LkNSvY224mDBPTOPk VcYYOkdEiHOIjMtiaEfVdfswJkK+izzc4UxiDghaJ2KvBCww1RTxgnoLpkYiRSVT icr/3TrwG9VKv0b2yN4SV6MPr3lHqbuoc1pS9fgWUmyvBo2Gyt8W9DX4Yc2gVqyo BkPJslK3e1Li5XRxA6ZC8syPPmj4AbQyQnawRwLa8V35G/c8906ZX5UcKv2BRknC TfSiMOwu5G0lLihzO62aNGFW0fr1/po= -----END CERTIFICATE-----Generated at Tue Oct 27 18:16:54 2026 by rpki-client