$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e95564e-487a-31bd-88e0-286a528331bd.roa File: 6e95564e-487a-31bd-88e0-286a528331bd.roa (raw, json) Hash identifier: V8e6MhwIphVz5fNtwKda/nbEUGMUrH5yeYULHNgDiAc= Subject key identifier: D1:17:D5:76:F7:5A:8D:6C:0A:90:AC:CF:3B:A6:60:57:14:44:57:F4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F549D8C23A98C89433A86B350 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e95564e-487a-31bd-88e0-286a528331bd.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.59.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8c:23:a9:8c:89:43:3a:86:b3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=716c1a62-06e9-44d8-9603-09f366e17a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:59:d5:e8:ef:18:84:f9:99:bd:df:73:13: 42:d9:9d:d2:ae:05:13:2e:40:01:6e:ee:6d:90:a7: 3f:0b:ad:7a:fc:62:31:bd:99:ff:4b:67:64:c3:ae: c3:23:22:44:c2:7e:11:a2:98:7d:31:a5:ed:14:83: d9:13:ba:8f:e0:86:12:93:fd:04:35:13:a7:c2:41: 1e:20:f3:ec:1c:dd:ba:7f:07:e6:a3:a9:7a:72:f7: ce:a3:9f:43:25:94:fd:47:5d:a5:6e:6b:c5:0c:8d: 3e:03:e9:a8:0f:af:2e:df:74:60:6c:f8:55:ee:d1: e1:cd:2c:13:89:6d:56:01:31:a8:1d:26:6c:8d:b4: ec:1e:23:51:c8:62:e1:1f:6f:1c:53:e4:d4:eb:09: cc:f3:c4:36:b5:2e:0c:64:26:a3:4a:ca:40:7b:e1: 13:70:1d:80:38:40:a8:71:95:76:e6:73:6a:ed:9a: 0b:10:53:74:c4:dc:4d:46:cb:21:c8:ec:f8:7d:21: 71:ed:95:a6:00:80:02:b6:2e:ff:e5:93:a5:f6:a9: 78:cf:db:93:1b:9e:15:7b:dd:37:c3:12:94:43:1c: 96:2e:50:76:97:6c:97:c7:6c:2b:b6:1a:9a:99:86: d7:4a:90:5a:84:a1:a1:57:0d:f8:7e:41:15:4a:8d: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:17:D5:76:F7:5A:8D:6C:0A:90:AC:CF:3B:A6:60:57:14:44:57:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e95564e-487a-31bd-88e0-286a528331bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ae:2e:ab:c2:5f:fb:4f:7e:00:79:ce:34:39:40:30:5f:9c: 42:ad:d6:a9:da:2c:fd:05:13:30:b9:1c:a0:74:a6:18:19:6e: 21:a8:02:2d:b3:7d:82:08:18:6b:d1:d4:2f:38:fd:b6:bc:15: 79:31:e6:55:77:87:37:3f:d8:b6:fb:8d:74:42:32:26:74:0a: c6:ab:3f:85:9c:29:bd:ef:6e:f2:ef:37:74:7f:32:d6:48:ab: 21:2d:b1:96:6c:b6:cc:4d:9d:45:d5:04:03:d1:2f:af:83:58: 7e:46:34:e1:99:f5:32:b7:5c:b6:1c:cc:32:f1:2f:ad:7f:d6: 11:46:9c:dd:c5:eb:4a:4d:a7:08:83:a6:f0:a0:d5:f8:42:ba: 24:aa:85:9b:45:1e:30:f4:82:8e:83:19:9f:31:58:2c:fa:7f: 29:57:c7:10:d3:26:b9:e3:56:2c:b5:29:93:c1:21:24:a6:f2: e3:c2:52:06:4a:08:31:b2:9a:ea:03:54:cb:89:ae:34:0e:e3: 62:ea:3a:0c:65:bf:7a:b8:8f:54:d2:e9:b2:90:16:14:8d:de: 76:5c:23:eb:66:5e:e1:70:24:6f:5a:61:80:14:1d:69:8e:f8: 29:24:b2:c7:4c:49:85:b8:e9:ec:90:c9:1d:62:d6:47:9f:d6: 4a:cd:3d:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnYwjqYyJQzqGs1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NzE2YzFhNjItMDZlOS00NGQ4LTk2MDMtMDlmMzY2ZTE3YTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UJZ1ejvGIT5mb3fcxNC2Z3SrgUTLkABbu5t kKc/C616/GIxvZn/S2dkw67DIyJEwn4Roph9MaXtFIPZE7qP4IYSk/0ENROnwkEe IPPsHN26fwfmo6l6cvfOo59DJZT9R12lbmvFDI0+A+moD68u33RgbPhV7tHhzSwT iW1WATGoHSZsjbTsHiNRyGLhH28cU+TU6wnM88Q2tS4MZCajSspAe+ETcB2AOECo cZV25nNq7ZoLEFN0xNxNRsshyOz4fSFx7ZWmAIACti7/5ZOl9ql4z9uTG54Ve903 wxKUQxyWLlB2l2yXx2wrthqamYbXSpBahKGhVw34fkEVSo1UPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEX1Xb3Wo1sCpCszzumYFcURFf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmU5NTU2NGUtNDg3YS0z MWJkLTg4ZTAtMjg2YTUyODMzMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyuLqvCX/tPfgB5zjQ5QDBfnEKt1qnaLP0FEzC5HKB0phgZbiGoAi2z fYIIGGvR1C84/ba8FXkx5lV3hzc/2Lb7jXRCMiZ0CsarP4WcKb3vbvLvN3R/MtZI qyEtsZZstsxNnUXVBAPRL6+DWH5GNOGZ9TK3XLYczDLxL61/1hFGnN3F60pNpwiD pvCg1fhCuiSqhZtFHjD0go6DGZ8xWCz6fylXxxDTJrnjViy1KZPBISSm8uPCUgZK CDGymuoDVMuJrjQO42LqOgxlv3q4j1TS6bKQFhSN3nZcI+tmXuFwJG9aYYAUHWmO +CkkssdMSYW46eyQyR1i1kef1krNPcQ= -----END CERTIFICATE-----Generated at Thu Oct 22 10:34:49 2026 by rpki-client