$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fef7435-3fcf-3ccf-ab19-92bd62a7902d.roa File: 6fef7435-3fcf-3ccf-ab19-92bd62a7902d.roa (raw, json) Hash identifier: wdlX+YPuYPZoik02lYqfO/+aEeohTVpPmKk6sQwDtRo= Subject key identifier: 2E:A3:E2:A5:4C:E4:B6:EC:6F:1A:11:6B:49:8C:35:4C:23:FC:0F:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F498562CCA8964A6876195280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fef7435-3fcf-3ccf-ab19-92bd62a7902d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.59.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:62:cc:a8:96:4a:68:76:19:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3eb48fd6-6e71-4803-ac5a-29d8cdd940bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:26:f8:a4:ee:f6:77:e3:32:35:a0:f6:c4:20: 8c:db:14:9b:18:57:83:5f:59:1e:c4:90:da:f9:88: 8d:c1:28:83:28:44:15:d4:dc:44:81:4e:f5:37:51: 45:e0:61:61:c6:53:b5:cc:40:13:00:17:48:5c:21: 78:59:64:8a:73:1f:8b:d8:68:54:96:ed:33:f5:8d: fe:fb:20:cd:57:0d:61:7f:ff:60:bf:a0:5a:21:16: 5d:51:5e:e2:36:39:76:da:e3:dd:e0:d8:45:51:79: 56:da:0e:db:29:f0:b0:a5:b0:1a:d7:93:7e:cf:68: 91:2d:76:c9:a5:29:54:39:b1:18:77:a3:90:f7:06: a7:89:de:6f:90:10:0f:09:91:52:70:73:29:f6:78: e9:28:c2:be:bf:40:08:e6:67:8f:cd:94:84:e8:4e: 56:a2:61:18:44:93:7c:e0:23:03:75:a2:1d:01:d1: c7:c7:b2:cc:33:fb:45:9a:0a:88:82:2e:bc:54:8d: ca:dc:1a:7c:f4:92:55:b1:34:5d:77:54:47:bb:d8: 80:4a:fe:ce:70:13:ba:93:74:a2:aa:d3:bb:53:f0: 88:73:de:7c:0d:c0:56:d4:18:3d:8e:99:cf:bb:61: 91:7b:2c:13:d2:86:0a:bc:3c:a7:07:10:40:03:40: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A3:E2:A5:4C:E4:B6:EC:6F:1A:11:6B:49:8C:35:4C:23:FC:0F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fef7435-3fcf-3ccf-ab19-92bd62a7902d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:4c:e6:19:7d:39:3c:05:ec:31:21:08:01:89:d9:27:52:ce: d0:90:a2:4a:0c:28:79:d8:cd:79:6c:29:bd:11:04:e7:74:f0: 96:25:96:cc:9e:16:67:e4:95:16:6f:bf:88:af:75:9e:3c:85: ff:1f:86:0b:c4:16:fd:f3:48:2a:a1:a4:84:66:7f:b8:4b:62: 65:d2:dc:b3:1c:a9:65:89:12:43:bb:69:75:1a:0e:60:fd:15: e3:e6:12:f3:5a:d5:a6:fc:9d:53:09:fa:6e:7b:92:b8:00:63: 99:03:60:26:6e:9e:27:f2:a8:1b:8b:fa:da:9c:d3:c0:6a:0d: ea:e3:46:32:bd:c4:4f:9f:cb:7f:19:e2:f3:b5:24:18:0e:21: 14:f4:fd:2f:da:5a:30:2d:92:d0:5d:75:2e:aa:3a:02:cc:dd: c7:6b:c3:ef:1b:f1:f2:16:db:99:c9:16:20:72:e3:ed:78:3a: 4f:e8:06:f7:79:a8:e5:d2:7a:7d:b7:e3:d8:26:91:9f:75:7b: d5:3a:4d:fb:82:11:25:dd:d4:83:21:fc:da:bf:47:7c:a1:13: b9:08:9f:a8:95:fd:b0:26:0e:55:d7:7d:86:01:25:2f:80:09: 1a:a0:b2:fa:8f:ed:ae:e7:37:32:a3:69:da:4d:8d:ae:18:16: 61:a5:07:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhWLMqJZKaHYZUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ViNDhmZDYtNmU3MS00ODAzLWFjNWEtMjlkOGNkZDk0MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyb4pO72d+MyNaD2xCCM2xSbGFeDX1kexJDa +YiNwSiDKEQV1NxEgU71N1FF4GFhxlO1zEATABdIXCF4WWSKcx+L2GhUlu0z9Y3+ +yDNVw1hf/9gv6BaIRZdUV7iNjl22uPd4NhFUXlW2g7bKfCwpbAa15N+z2iRLXbJ pSlUObEYd6OQ9wanid5vkBAPCZFScHMp9njpKMK+v0AI5mePzZSE6E5WomEYRJN8 4CMDdaIdAdHHx7LMM/tFmgqIgi68VI3K3Bp89JJVsTRdd1RHu9iASv7OcBO6k3Si qtO7U/CIc958DcBW1Bg9jpnPu2GReywT0oYKvDynBxBAA0DSoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6j4qVM5LbsbxoRa0mMNUwj/A9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmZlZjc0MzUtM2ZjZi0z Y2NmLWFiMTktOTJiZDYyYTc5MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzu8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVM5hl9OTwF7DEhCAGJ2SdSztCQokoMKHnYzXlsKb0RBOd08JYllsye FmfklRZvv4ivdZ48hf8fhgvEFv3zSCqhpIRmf7hLYmXS3LMcqWWJEkO7aXUaDmD9 FePmEvNa1ab8nVMJ+m57krgAY5kDYCZunifyqBuL+tqc08BqDerjRjK9xE+fy38Z 4vO1JBgOIRT0/S/aWjAtktBddS6qOgLM3cdrw+8b8fIW25nJFiBy4+14Ok/oBvd5 qOXSen2349gmkZ91e9U6TfuCESXd1IMh/Nq/R3yhE7kIn6iV/bAmDlXXfYYBJS+A CRqgsvqP7a7nNzKjadpNja4YFmGlB1Q= -----END CERTIFICATE-----Generated at Sat Oct 24 10:43:36 2026 by rpki-client