$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a7b918d-e027-398c-ae62-a1b52ff0373a.roa File: 7a7b918d-e027-398c-ae62-a1b52ff0373a.roa (raw, json) Hash identifier: yAlg5ARL8RP5X2pDGxAFRtFFCiM/dB3wVLJ87BSL+nE= Subject key identifier: 1C:74:0D:96:A3:A8:0C:46:F6:B6:B2:31:42:A6:B3:01:F9:00:44:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F85786744DD380A5A348D8A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a7b918d-e027-398c-ae62-a1b52ff0373a.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 35994 IP address blocks: 23.14.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:67:44:dd:38:0a:5a:34:8d:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=797a06ef-15f3-41e8-9c29-5b6228088b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:8f:28:e8:74:a7:9d:e7:fd:94:b2:f6:cb: 9b:bd:77:92:fd:c0:86:dc:ea:76:5b:38:81:cf:6e: e8:c8:c0:36:67:ab:46:3d:bc:92:b5:33:be:e6:2a: b8:a2:4d:67:83:63:be:84:3b:7b:f0:9f:b4:0e:be: ba:f8:ef:f1:a0:f8:73:e5:d1:b3:00:f6:1f:ba:3d: 65:8e:b4:69:df:ba:e0:a3:16:11:01:ac:e2:ac:e6: d5:c4:dd:9b:a9:31:2b:f4:fc:78:c5:ca:d4:e2:c6: 21:7a:8e:00:ac:f3:04:ef:60:ed:b1:0f:c8:4f:42: 53:ba:41:48:8c:0a:e6:c1:e5:57:98:44:2b:23:57: 44:1d:78:a8:58:df:72:33:01:e5:7a:68:7b:f0:72: 58:bb:db:58:ec:0d:b1:cb:6b:c2:a5:84:03:81:4c: 7c:1c:d7:f1:c3:00:ba:79:f3:05:dd:c2:51:f4:fd: 78:91:6e:ec:5f:76:bd:bb:72:64:3d:6a:ee:21:3f: 16:9a:66:db:06:b5:4c:90:30:cf:20:12:08:15:2b: 33:bb:ac:9c:ab:79:d6:a0:ee:20:72:65:f4:85:51: d0:11:ca:de:db:12:e1:c3:4d:7f:d3:b9:f7:93:79: 5e:f0:26:12:a9:36:b4:72:38:ca:1c:d7:e9:e8:bf: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:74:0D:96:A3:A8:0C:46:F6:B6:B2:31:42:A6:B3:01:F9:00:44:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a7b918d-e027-398c-ae62-a1b52ff0373a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.14.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:5f:fa:43:5f:01:ca:23:95:b6:33:a2:0b:25:f5:9c:42:3f: a8:e6:d0:4e:be:63:bb:80:82:94:6d:8d:97:7c:b3:f5:ab:ff: ab:22:94:96:0f:73:e9:38:5f:b7:f7:96:31:82:8c:18:d6:ea: 67:ba:61:c0:9c:50:1c:e8:5f:d1:f0:f3:5f:30:a0:15:8d:ce: 8e:e1:20:1b:15:0e:38:69:87:3e:d5:4d:4e:16:da:6b:c3:01: 3f:bd:c2:b1:0c:45:40:9c:c7:e9:de:40:6f:47:7e:73:7c:18: 99:ff:95:4a:bb:c4:df:05:03:0a:38:70:e8:05:ef:76:23:c0: b4:9d:4b:6b:e9:5f:ae:88:af:7b:30:5d:20:72:79:08:4f:e4: 21:65:db:b3:e3:c9:b8:08:6d:fd:13:84:19:eb:0b:ce:1d:0e: e6:f1:f1:a7:06:73:72:71:ad:25:e8:e1:5a:f0:ff:25:de:13: ce:a2:67:91:82:76:38:16:91:f3:78:46:1f:08:5b:7e:1f:ca: 87:c7:43:19:b3:ba:38:39:e5:d1:46:41:21:49:b0:00:18:1d: 21:09:4f:4f:c3:34:2f:b4:91:36:5d:42:ed:8d:ae:0d:02:32: ea:55:3d:7a:ec:7f:0c:32:fb:8e:af:17:69:cd:bb:67:ba:f3: 36:9c:eb:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeGdE3TgKWjSNigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk Nzk3YTA2ZWYtMTVmMy00MWU4LTljMjktNWI2MjI4MDg4Yjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ6PKOh0p53n/ZSy9subvXeS/cCG3Op2WziB z27oyMA2Z6tGPbyStTO+5iq4ok1ng2O+hDt78J+0Dr66+O/xoPhz5dGzAPYfuj1l jrRp37rgoxYRAazirObVxN2bqTEr9Px4xcrU4sYheo4ArPME72DtsQ/IT0JTukFI jArmweVXmEQrI1dEHXioWN9yMwHlemh78HJYu9tY7A2xy2vCpYQDgUx8HNfxwwC6 efMF3cJR9P14kW7sX3a9u3JkPWruIT8WmmbbBrVMkDDPIBIIFSszu6ycq3nWoO4g cmX0hVHQEcre2xLhw01/07n3k3le8CYSqTa0cjjKHNfp6L/NuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx0DZajqAxG9rayMUKmswH5AESAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2E3YjkxOGQtZTAyNy0z OThjLWFlNjItYTFiNTJmZjAzNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRf+kNfAcojlbYzogsl9ZxCP6jm0E6+Y7uAgpRtjZd8s/Wr/6silJYP c+k4X7f3ljGCjBjW6me6YcCcUBzoX9Hw818woBWNzo7hIBsVDjhphz7VTU4W2mvD AT+9wrEMRUCcx+neQG9HfnN8GJn/lUq7xN8FAwo4cOgF73YjwLSdS2vpX66Ir3sw XSByeQhP5CFl27PjybgIbf0ThBnrC84dDubx8acGc3JxrSXo4Vrw/yXeE86iZ5GC djgWkfN4Rh8IW34fyofHQxmzujg55dFGQSFJsAAYHSEJT0/DNC+0kTZdQu2Nrg0C MupVPXrsfwwy+46vF2nNu2e68zac6/o= -----END CERTIFICATE-----Generated at Thu Oct 22 20:57:41 2026 by rpki-client