$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689e7f90-0ec8-3337-aab3-9aa9af3598bf.roa File: 689e7f90-0ec8-3337-aab3-9aa9af3598bf.roa (raw, json) Hash identifier: EsSF6rufFBehHo7sMqr1diFw44TM2SIBcQGuJyD6Fdk= Subject key identifier: F6:58:D0:CE:88:4D:65:C7:49:25:F4:2A:01:DC:16:E9:8D:CB:80:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985DA0EB54AB584FDDFE380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689e7f90-0ec8-3337-aab3-9aa9af3598bf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.206.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:da:0e:b5:4a:b5:84:fd:df:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=25dfe98c-4438-450e-b0d6-6ed37d2bc8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:86:c5:03:7c:00:cf:1e:f1:8f:b7:7e:09: 72:cc:4d:c4:e5:2b:9a:5d:eb:bd:6a:69:c1:a4:2b: b0:27:71:98:73:57:d1:e3:84:2d:70:aa:9b:2a:e5: 75:08:6f:24:7a:be:4f:df:71:8d:82:c9:ff:c2:6c: 84:af:12:b4:19:e8:d9:15:9f:26:c9:35:da:ce:21: bb:61:66:31:34:0a:25:78:a6:df:d8:4a:34:6e:1b: 98:c7:e0:76:58:c1:e5:af:91:d3:b3:e4:a9:de:a0: b2:3a:06:9f:51:2a:fd:b9:d7:fb:4e:c9:52:82:f0: 9a:d8:8e:71:df:af:8c:49:bf:95:0b:70:83:b0:dd: a9:76:42:9f:b6:0e:f3:4e:a9:29:9d:8e:66:af:cc: 6f:48:5a:8a:89:4d:a5:42:5e:4e:28:89:c2:71:8b: 0f:ba:08:5c:e4:0f:e9:d9:d2:75:42:9d:66:7d:b5: e3:c1:ea:a5:a0:ec:c8:12:e6:b4:86:07:b7:da:b3: 15:db:30:ac:a9:da:54:07:d1:97:b1:06:d3:bf:fc: db:85:5c:1b:8c:7a:5d:0b:7e:a1:3e:e0:84:5e:86: b1:64:a2:93:fe:45:91:8c:44:a9:37:7a:ea:b4:c0: b7:30:0d:58:a9:43:2d:2f:44:c5:e5:3b:e5:72:70: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:58:D0:CE:88:4D:65:C7:49:25:F4:2A:01:DC:16:E9:8D:CB:80:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689e7f90-0ec8-3337-aab3-9aa9af3598bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f7:c2:b4:75:e2:0a:93:bc:8f:2b:b9:99:06:e3:a9:a9:f8: 28:85:b4:51:fd:28:b0:b8:16:b3:6c:e4:6c:87:81:06:a8:34: 00:2e:ed:8e:55:6c:12:8a:9c:75:24:3c:a6:47:4c:46:41:77: c9:d3:ce:9a:ac:65:e1:78:d3:7c:dc:89:e9:e0:cf:64:8e:2d: 5d:ce:41:d9:8f:ca:95:d9:88:4f:f8:c4:fd:31:28:c0:dd:5f: b2:db:d5:51:03:86:eb:18:8e:8d:a2:9c:87:34:96:c6:23:79: 05:a5:b7:6a:04:83:fa:8a:6e:6d:10:1e:92:90:fc:39:e0:2a: 63:6d:3f:fd:e2:b6:70:c4:f0:e3:90:f3:d3:f6:73:21:15:23: cc:7a:51:d4:f5:26:4d:f7:a9:15:80:62:ff:0e:fa:b9:e6:21: c3:98:6f:45:48:29:a8:0d:d2:fa:a4:5d:52:d5:51:dc:e0:c3: dc:ff:1e:2a:9e:8f:92:ac:24:4b:c9:64:26:20:51:4d:4a:19: 98:06:2a:7a:ff:77:84:f4:eb:72:ce:fa:d8:b9:29:e6:83:5b: 49:dc:65:14:00:d7:49:77:70:32:60:97:24:54:80:66:fd:7e: c0:e9:96:4f:9c:94:1c:7c:d4:5c:59:c1:f6:1c:e4:50:69:ac: e7:06:fe:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhdoOtUq1hP3f44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjVkZmU5OGMtNDQzOC00NTBlLWIwZDYtNmVkMzdkMmJjOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb6GxQN8AM8e8Y+3fglyzE3E5SuaXeu9amnB pCuwJ3GYc1fR44QtcKqbKuV1CG8ker5P33GNgsn/wmyErxK0GejZFZ8myTXaziG7 YWYxNAoleKbf2Eo0bhuYx+B2WMHlr5HTs+Sp3qCyOgafUSr9udf7TslSgvCa2I5x 36+MSb+VC3CDsN2pdkKftg7zTqkpnY5mr8xvSFqKiU2lQl5OKInCcYsPughc5A/p 2dJ1Qp1mfbXjweqloOzIEua0hge32rMV2zCsqdpUB9GXsQbTv/zbhVwbjHpdC36h PuCEXoaxZKKT/kWRjESpN3rqtMC3MA1YqUMtL0TF5TvlcnC97wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZY0M6ITWXHSSX0KgHcFumNy4DXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjg5ZTdmOTAtMGVjOC0z MzM3LWFhYjMtOWFhOWFmMzU5OGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF87YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT3wrR14gqTvI8ruZkG46mp+CiFtFH9KLC4FrNs5GyHgQaoNAAu7Y5V bBKKnHUkPKZHTEZBd8nTzpqsZeF403zciengz2SOLV3OQdmPypXZiE/4xP0xKMDd X7Lb1VEDhusYjo2inIc0lsYjeQWlt2oEg/qKbm0QHpKQ/DngKmNtP/3itnDE8OOQ 89P2cyEVI8x6UdT1Jk33qRWAYv8O+rnmIcOYb0VIKagN0vqkXVLVUdzgw9z/Hiqe j5KsJEvJZCYgUU1KGZgGKnr/d4T063LO+ti5KeaDW0ncZRQA10l3cDJglyRUgGb9 fsDplk+clBx81FxZwfYc5FBprOcG/sE= -----END CERTIFICATE-----Generated at Wed Oct 21 14:19:11 2026 by rpki-client