$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70af8ef2-4e52-368a-a50c-aa4fc74ac17e.roa File: 70af8ef2-4e52-368a-a50c-aa4fc74ac17e.roa (raw, json) Hash identifier: wjFLf5clxEDH0qVxNxYTetCAoPhBJCdJBUzlSuYXeMM= Subject key identifier: F1:F4:51:42:91:0C:99:72:58:06:5A:A3:5A:E9:83:D1:B0:19:85:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5B69527C6A0C1FDDCC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70af8ef2-4e52-368a-a50c-aa4fc74ac17e.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.223.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5b:69:52:7c:6a:0c:1f:dd:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=16c93ac4-89e2-4245-9f3b-f9078e7d0a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2c:f3:75:fb:09:e0:41:94:72:84:6a:5c:72: ff:31:5e:1b:a0:71:8c:08:f4:eb:cb:1f:e1:fe:df: d2:ac:06:90:5b:be:ff:ca:6b:a6:82:26:58:ff:a9: ad:5a:a8:ba:fd:88:c9:d5:92:be:bc:9f:80:8a:44: b9:bb:d9:92:db:0a:3a:ec:e5:6f:65:2b:8a:d8:17: 05:61:10:79:4b:39:54:8f:f8:3b:87:a3:d9:86:b9: dc:67:de:99:36:de:66:b9:35:1f:8f:33:13:d0:a7: f2:70:24:be:56:95:87:88:e8:98:1f:8b:2d:dc:81: 42:fa:cf:4d:e3:df:e5:67:13:16:a6:97:b2:58:55: 1f:81:81:78:07:c2:64:df:63:b3:3a:82:6f:27:ab: 15:58:7c:d4:ea:50:5f:55:13:0e:d3:10:32:ce:ec: 8f:98:12:5e:72:8b:84:5c:43:33:54:f2:73:bb:74: 78:17:fc:a7:8c:84:cb:5d:a1:89:bc:0a:8e:24:04: 5e:39:9c:eb:f8:b1:06:fb:a6:4f:15:3c:24:01:27: c9:e0:48:64:07:cd:48:53:a7:b1:e9:17:8f:c3:37: 53:45:f3:c7:b7:9e:fd:eb:81:b8:79:f2:d0:01:c8: 2c:43:49:71:8a:b4:f1:8e:a5:b2:e4:93:bf:11:87: 57:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F4:51:42:91:0C:99:72:58:06:5A:A3:5A:E9:83:D1:B0:19:85:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70af8ef2-4e52-368a-a50c-aa4fc74ac17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a7:28:68:1e:c1:dc:c0:7e:9a:54:be:65:04:7c:3a:17:5e: 12:e0:6d:d3:42:39:e2:27:91:ab:a2:a6:72:f3:cc:22:3f:c9: 6d:19:09:65:05:6a:4a:32:d0:8f:53:ed:6e:ae:18:1f:46:64: 53:6c:18:b0:92:6d:c5:69:35:7e:46:a7:c0:4e:68:2e:06:82: 3f:5a:d2:62:c9:49:8d:3b:5b:3c:1d:dd:ba:f8:53:b7:92:0b: d8:81:10:e4:c1:04:4d:7e:0e:ab:48:e1:79:25:9d:b9:7d:97: 46:9f:74:3a:2e:e8:85:11:b4:2a:a7:84:19:0c:04:c0:3d:e1: 2b:00:83:1a:86:0d:77:97:03:62:87:d1:ec:48:2d:7e:3f:55: b0:aa:89:8b:71:1d:9b:93:38:73:16:b5:b7:4b:f8:32:00:52: fd:fb:46:17:40:91:b1:86:dd:f1:b5:56:08:e2:0e:4a:ad:3c: 8e:19:e6:c6:d1:01:40:7f:1d:22:30:aa:66:af:06:1e:3c:78: dc:90:60:5c:5d:df:a4:e4:95:a9:10:75:5d:eb:76:f3:25:a6: fb:4b:d0:41:f9:d5:98:4f:2a:73:3a:1f:42:b4:c6:3d:db:a1: df:a5:9e:59:46:f1:fd:ac:0b:79:7d:ff:44:4f:57:78:d4:07: 7a:4a:24:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVtpUnxqDB/dzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTZjOTNhYzQtODllMi00MjQ1LTlmM2ItZjkwNzhlN2QwYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSzzdfsJ4EGUcoRqXHL/MV4boHGMCPTryx/h /t/SrAaQW77/ymumgiZY/6mtWqi6/YjJ1ZK+vJ+AikS5u9mS2wo67OVvZSuK2BcF YRB5SzlUj/g7h6PZhrncZ96ZNt5muTUfjzMT0KfycCS+VpWHiOiYH4st3IFC+s9N 49/lZxMWppeyWFUfgYF4B8Jk32OzOoJvJ6sVWHzU6lBfVRMO0xAyzuyPmBJecouE XEMzVPJzu3R4F/ynjITLXaGJvAqOJAReOZzr+LEG+6ZPFTwkASfJ4EhkB81IU6ex 6RePwzdTRfPHt57964G4efLQAcgsQ0lxirTxjqWy5JO/EYdXcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPH0UUKRDJlyWAZao1rpg9GwGYXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzBhZjhlZjItNGU1Mi0z NjhhLWE1MGMtYWE0ZmM3NGFjMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABynKGgewdzAfppUvmUEfDoXXhLgbdNCOeInkauipnLzzCI/yW0ZCWUF akoy0I9T7W6uGB9GZFNsGLCSbcVpNX5Gp8BOaC4Ggj9a0mLJSY07Wzwd3br4U7eS C9iBEOTBBE1+DqtI4Xklnbl9l0afdDou6IURtCqnhBkMBMA94SsAgxqGDXeXA2KH 0exILX4/VbCqiYtxHZuTOHMWtbdL+DIAUv37RhdAkbGG3fG1VgjiDkqtPI4Z5sbR AUB/HSIwqmavBh48eNyQYFxd36TklakQdV3rdvMlpvtL0EH51ZhPKnM6H0K0xj3b od+lnllG8f2sC3l9/0RPV3jUB3pKJNw= -----END CERTIFICATE-----Generated at Sat Oct 24 05:24:16 2026 by rpki-client