$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72a4512d-e139-3913-8331-290047d0b71b.roa File: 72a4512d-e139-3913-8331-290047d0b71b.roa (raw, json) Hash identifier: pLe10+RbeZUvs1t6rkvI3VRHnsNP/vU+yq/3lSZoA+8= Subject key identifier: 4D:11:CA:D0:E6:EC:67:64:12:D5:04:DE:58:2A:3B:41:8A:8D:C4:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F9BCDDB7BD81AD3D6F15F5E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72a4512d-e139-3913-8331-290047d0b71b.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 16625 IP address blocks: 23.66.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:db:7b:d8:1a:d3:d6:f1:5f:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=08333015-825b-456a-b711-5f27fb1bf204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:cc:98:b2:8d:23:f1:69:b4:40:65:9f:d7: 37:36:f8:66:c6:ab:cf:38:1c:c7:d9:b7:d6:0c:f1: 56:19:ab:6b:ed:59:4c:7d:90:e4:4c:c7:4d:2c:c7: 58:96:26:1f:07:ec:b2:a5:58:f1:9a:e2:2a:0a:7f: 67:ff:f5:b5:94:19:f5:c4:4e:3c:8b:13:fe:c6:4a: 43:40:3f:8a:7b:62:c6:1e:ac:ce:52:df:20:6a:47: f1:75:39:98:fc:29:51:54:3a:a2:97:15:99:48:45: e3:7c:98:0e:47:13:8b:91:1c:5a:0a:7a:f0:3e:02: cd:fe:b3:e6:93:45:d3:8f:de:df:19:ff:08:f2:ef: 71:c8:a2:c5:b0:3d:91:98:af:6c:f8:7b:33:66:45: 01:75:71:39:a2:75:2e:91:97:9d:91:bd:e2:7c:1b: 30:3b:c2:9d:27:f9:c5:71:ce:5f:6e:0b:ef:79:ff: 16:8d:eb:ef:db:a2:38:c6:5d:84:12:6a:f7:44:f8: de:47:43:6e:8d:d0:33:ce:fd:1e:b1:ef:40:94:5f: 43:c5:6a:8f:89:a9:dd:bf:42:6d:20:0b:17:55:d1: cd:48:f8:a3:27:0c:16:59:bb:7f:52:b0:77:0a:e9: 8d:d8:fa:8a:0d:dc:36:ae:e4:82:70:6c:5b:09:a2: ae:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:11:CA:D0:E6:EC:67:64:12:D5:04:DE:58:2A:3B:41:8A:8D:C4:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72a4512d-e139-3913-8331-290047d0b71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:22:23:17:7f:48:50:ca:0d:24:5e:d0:58:67:f6:58:fd:ab: c4:10:26:55:be:03:84:b7:d3:80:13:f1:ae:46:5c:18:d2:1a: e0:eb:0e:9f:c8:7c:84:f0:c1:de:b9:eb:9d:7b:95:4a:43:b0: f1:84:43:a7:dd:70:12:e0:6d:2d:9b:b4:48:1d:68:03:23:bd: 51:c0:a7:5b:f5:9b:db:f8:da:c9:f7:03:69:38:22:b5:73:39: 10:8f:e1:34:43:b8:64:9c:44:73:7f:69:29:6d:1c:03:cb:21: 38:4a:e0:ab:47:4a:49:77:f0:35:1e:0b:05:3c:73:45:51:b0: 88:81:85:db:ff:63:d3:d4:b9:47:03:f9:19:f1:b8:e5:2d:1e: 8b:70:2b:63:45:ff:ed:46:28:d2:0e:45:15:ae:b9:93:97:cf: ed:e3:81:1e:ad:e3:1c:60:fd:10:05:e5:a1:36:49:37:42:f1: 3c:a4:b4:7c:a1:94:dd:de:58:f2:7d:5d:e6:c2:8b:e6:17:01: c4:f9:e0:e8:ce:1a:f6:ac:f0:4d:64:c7:be:89:04:0f:83:34: 42:da:15:15:a4:bf:10:74:0b:c0:e4:34:2f:ff:c3:05:c1:d5: 7e:81:1d:18:48:36:98:4e:ac:a9:36:8d:98:0e:c7:52:01:04: 2c:ae:90:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzdt72BrT1vFfXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MDgzMzMwMTUtODI1Yi00NTZhLWI3MTEtNWYyN2ZiMWJmMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLXMmLKNI/FptEBln9c3NvhmxqvPOBzH2bfW DPFWGatr7VlMfZDkTMdNLMdYliYfB+yypVjxmuIqCn9n//W1lBn1xE48ixP+xkpD QD+Ke2LGHqzOUt8gakfxdTmY/ClRVDqilxWZSEXjfJgORxOLkRxaCnrwPgLN/rPm k0XTj97fGf8I8u9xyKLFsD2RmK9s+HszZkUBdXE5onUukZedkb3ifBswO8KdJ/nF cc5fbgvvef8Wjevv26I4xl2EEmr3RPjeR0NujdAzzv0ese9AlF9DxWqPiandv0Jt IAsXVdHNSPijJwwWWbt/UrB3CumN2PqKDdw2ruSCcGxbCaKu6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0RytDm7GdkEtUE3lgqO0GKjcRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzJhNDUxMmQtZTEzOS0z OTEzLTgzMzEtMjkwMDQ3ZDBiNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0JoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkiIxd/SFDKDSRe0Fhn9lj9q8QQJlW+A4S304AT8a5GXBjSGuDrDp/I fITwwd656517lUpDsPGEQ6fdcBLgbS2btEgdaAMjvVHAp1v1m9v42sn3A2k4IrVz ORCP4TRDuGScRHN/aSltHAPLIThK4KtHSkl38DUeCwU8c0VRsIiBhdv/Y9PUuUcD +RnxuOUtHotwK2NF/+1GKNIORRWuuZOXz+3jgR6t4xxg/RAF5aE2STdC8TyktHyh lN3eWPJ9XebCi+YXAcT54OjOGvas8E1kx76JBA+DNELaFRWkvxB0C8DkNC//wwXB 1X6BHRhINphOrKk2jZgOx1IBBCyukFA= -----END CERTIFICATE-----Generated at Sun Oct 25 15:52:54 2026 by rpki-client