$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/753ee868-d8c1-3ba9-b60e-042e72005231.roa File: 753ee868-d8c1-3ba9-b60e-042e72005231.roa (raw, json) Hash identifier: guxOJ9X2vb+ltN5OzL5mYxT2mx9yxpLijQJHXlZ20sk= Subject key identifier: DB:B7:3C:EA:59:22:84:B2:2C:5B:43:F0:DA:F5:22:7E:34:4C:0A:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D4B41EF7C45D2DC018DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/753ee868-d8c1-3ba9-b60e-042e72005231.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.59.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:4b:41:ef:7c:45:d2:dc:01:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fb497d4f-cf6a-4893-8537-3c9dbca9433e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9d:bd:bc:79:21:1a:01:ff:8a:e1:87:d6:79: a7:f2:00:c3:69:14:00:96:8a:20:7a:f2:d0:03:a3: 84:4f:7a:09:9c:82:8b:1d:99:e9:db:9c:9c:8d:e4: c2:88:b2:ee:2f:6e:03:41:30:c7:d9:1b:a2:1d:a2: c8:5f:68:4b:4e:15:9d:2f:fa:8c:fc:bb:81:6d:7d: 37:48:9e:a1:cb:97:12:c2:45:3c:63:5f:f6:e3:52: bf:91:66:c3:9d:c8:bc:31:59:94:80:df:cc:a0:9f: 79:f3:4b:c8:4b:1e:e1:ed:c3:b2:0a:a8:be:1c:1b: 7c:dc:40:09:8a:b7:8d:e2:b4:4f:39:96:e0:58:c0: 62:a0:d1:2f:42:3c:f4:cc:64:59:04:3b:55:a7:0d: 0f:45:09:e6:c4:b6:ac:36:a8:74:7f:c3:6f:37:0f: e1:97:ce:83:86:cd:ca:44:45:e9:1e:ea:b8:10:0d: 8c:f5:14:c0:a5:50:6f:22:2f:07:ea:46:81:e4:52: 76:a2:27:eb:a6:16:99:7b:91:04:a8:15:07:af:1d: 50:b2:12:56:78:7b:12:1a:1b:77:ff:c7:54:49:cf: a3:ce:68:ff:04:c5:f9:61:54:a9:d9:83:54:20:ed: de:85:51:72:0e:5e:44:80:57:9c:9c:06:af:a0:6f: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B7:3C:EA:59:22:84:B2:2C:5B:43:F0:DA:F5:22:7E:34:4C:0A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/753ee868-d8c1-3ba9-b60e-042e72005231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:10:9e:c8:f6:5d:9b:cb:f8:f7:ca:a2:3b:43:0e:61:40:8c: 9e:3e:7c:d5:e2:42:58:3f:f3:5e:88:47:aa:bd:7d:93:67:92: 67:9d:6d:ca:b2:7f:c4:36:f7:a0:ab:06:14:48:10:b0:58:4c: c3:d4:ec:e1:a7:a4:49:e9:95:4b:d0:20:23:79:f9:a4:0f:55: 73:54:7c:1a:78:3c:c1:cd:f1:49:51:fe:26:c2:2c:a3:e4:5f: 4a:45:75:af:19:df:cb:91:5a:af:17:cd:c3:11:b5:4b:4b:21: ca:29:bc:3b:11:a1:52:d2:9f:c9:c9:f7:09:58:e2:77:c2:85: 55:1a:5d:9a:2f:94:50:b6:d0:d9:4f:d7:9c:d9:f0:bd:30:47: 59:ef:25:a7:bc:5e:ce:06:64:ce:a1:83:75:da:73:78:80:11: cf:df:21:e7:e6:30:0f:d0:41:92:1d:60:8b:0a:ca:2f:96:4b: 0a:77:76:f0:1d:f4:a3:36:c7:f7:a1:a9:d8:8f:15:87:50:bf: 7e:b7:60:08:3c:63:1c:f7:bc:6e:9a:25:be:56:82:92:e9:52: da:1a:59:d6:14:6b:a9:09:98:6a:55:10:0e:6c:50:c6:f7:fa: e6:e3:7a:36:97:d1:12:92:04:6d:23:0b:1e:b3:e3:6b:7a:91: 52:84:72:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfUtB73xF0twBjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmI0OTdkNGYtY2Y2YS00ODkzLTg1MzctM2M5ZGJjYTk0MzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg529vHkhGgH/iuGH1nmn8gDDaRQAloogevLQ A6OET3oJnIKLHZnp25ycjeTCiLLuL24DQTDH2RuiHaLIX2hLThWdL/qM/LuBbX03 SJ6hy5cSwkU8Y1/241K/kWbDnci8MVmUgN/MoJ9580vISx7h7cOyCqi+HBt83EAJ ireN4rRPOZbgWMBioNEvQjz0zGRZBDtVpw0PRQnmxLasNqh0f8NvNw/hl86Dhs3K REXpHuq4EA2M9RTApVBvIi8H6kaB5FJ2oifrphaZe5EEqBUHrx1QshJWeHsSGht3 /8dUSc+jzmj/BMX5YVSp2YNUIO3ehVFyDl5EgFecnAavoG/SdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu3POpZIoSyLFtD8Nr1In40TAokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzUzZWU4NjgtZDhjMS0z YmE5LWI2MGUtMDQyZTcyMDA1MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkQnsj2XZvL+PfKojtDDmFAjJ4+fNXiQlg/816IR6q9fZNnkmedbcqy f8Q296CrBhRIELBYTMPU7OGnpEnplUvQICN5+aQPVXNUfBp4PMHN8UlR/ibCLKPk X0pFda8Z38uRWq8XzcMRtUtLIcopvDsRoVLSn8nJ9wlY4nfChVUaXZovlFC20NlP 15zZ8L0wR1nvJae8Xs4GZM6hg3Xac3iAEc/fIefmMA/QQZIdYIsKyi+WSwp3dvAd 9KM2x/ehqdiPFYdQv363YAg8Yxz3vG6aJb5WgpLpUtoaWdYUa6kJmGpVEA5sUMb3 +ubjejaX0RKSBG0jCx6z42t6kVKEcgU= -----END CERTIFICATE-----Generated at Sat Oct 24 09:55:07 2026 by rpki-client