$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa4e237-ba26-3e9b-b9c1-1b303d0832a0.roa File: 7aa4e237-ba26-3e9b-b9c1-1b303d0832a0.roa (raw, json) Hash identifier: 0dXI7u2aCaMlvddqahiaAjVPKB9LLCJeBE0LkCCGNo4= Subject key identifier: 29:21:A7:9E:5D:6F:AB:28:F9:2B:A7:0C:46:29:A7:D5:C1:86:0B:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497EE377D3DE1435433293E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa4e237-ba26-3e9b-b9c1-1b303d0832a0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.216.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:e3:77:d3:de:14:35:43:32:93:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2f8c310e-d3a1-46fe-8e3c-72c45e1a2f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:2c:ff:f2:0f:ef:90:f0:c5:13:36:ff:25: e2:07:35:51:0e:f9:3b:2a:e3:54:3b:2a:af:61:7c: f2:a3:eb:75:f5:d8:dd:b6:8d:9d:bf:d7:90:44:01: 11:86:02:78:a8:e3:aa:8f:c2:88:ea:d9:fb:b0:ba: ea:78:fd:97:42:34:03:f1:b9:1d:10:5e:c9:fa:a6: da:56:20:71:a2:a5:7a:05:6b:74:a8:8a:a3:2a:02: e1:3b:35:da:72:43:34:d5:16:f3:b5:de:94:dd:ea: a5:d6:d1:33:d9:21:12:62:bf:17:f6:c7:4f:61:21: d7:60:64:8c:7e:41:11:71:5d:07:0e:ed:ad:0e:8f: 12:93:11:39:e8:33:68:c9:2f:0f:17:b2:e3:6c:34: 62:24:38:ce:11:66:23:a0:b7:35:ef:70:50:cc:fb: de:f2:2b:80:5f:28:2a:6c:99:1f:41:07:8c:e2:4a: 2c:f1:72:f1:dd:8a:7a:f1:45:ca:20:79:43:ad:b5: 3a:a5:ca:4f:5e:7e:02:34:f8:be:e1:38:c5:d2:7a: 24:aa:7c:38:12:6e:54:3e:98:a5:27:3c:d5:b2:ba: 3b:e8:24:5c:34:3e:21:71:44:8d:7f:48:43:0d:2c: 00:f7:72:05:d5:d4:ea:3b:74:d4:62:bb:4d:e1:c3: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:A7:9E:5D:6F:AB:28:F9:2B:A7:0C:46:29:A7:D5:C1:86:0B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa4e237-ba26-3e9b-b9c1-1b303d0832a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:55:8e:b6:dc:a5:2c:2f:dd:0a:0d:b9:3d:38:bd:a0:d1:eb: 98:c8:e7:e5:2b:df:92:ac:36:2e:1b:97:71:29:9c:46:16:3d: 7c:2d:c9:e0:bb:fb:ba:83:da:ca:d0:fa:9c:79:0d:2b:c0:86: 16:7f:4b:99:c8:07:68:0d:fe:e2:37:fa:5a:dc:4e:1d:33:11: 3e:35:d6:5b:51:eb:cc:9a:6f:46:91:5a:d7:d1:4e:1c:50:f8: 0b:5a:6b:1b:b3:42:eb:aa:19:06:1d:77:d6:97:80:f1:97:1c: 66:68:ef:2e:5a:97:0f:a4:5d:5e:9d:74:92:c2:42:04:7c:35: 32:af:48:1e:08:69:d6:87:a5:da:14:12:a5:3b:cc:6d:be:0d: ad:c8:c7:80:6e:98:8c:25:97:29:5e:4e:dd:9a:0f:22:3e:80: 7f:83:a4:02:96:a0:dd:72:66:3c:8c:e1:b7:3f:d2:ff:8b:ca: 8a:65:43:65:ba:e3:57:24:f4:94:3c:45:d0:9e:dc:9d:f9:5c: 9e:b6:e1:f3:63:83:77:b0:13:18:ca:aa:d2:48:d2:b0:57:28: e4:3b:b8:e9:62:19:bd:40:fb:21:8f:66:90:05:77:88:7e:4b: 7a:87:2b:82:7b:83:6e:9a:0e:5a:eb:a1:29:a7:0e:fa:95:ad: 58:af:de:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfuN3094UNUMyk+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmY4YzMxMGUtZDNhMS00NmZlLThlM2MtNzJjNDVlMWEyZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+os//IP75DwxRM2/yXiBzVRDvk7KuNUOyqv YXzyo+t19djdto2dv9eQRAERhgJ4qOOqj8KI6tn7sLrqeP2XQjQD8bkdEF7J+qba ViBxoqV6BWt0qIqjKgLhOzXackM01Rbztd6U3eql1tEz2SESYr8X9sdPYSHXYGSM fkERcV0HDu2tDo8SkxE56DNoyS8PF7LjbDRiJDjOEWYjoLc173BQzPve8iuAXygq bJkfQQeM4kos8XLx3Yp68UXKIHlDrbU6pcpPXn4CNPi+4TjF0nokqnw4Em5UPpil JzzVsro76CRcND4hcUSNf0hDDSwA93IF1dTqO3TUYrtN4cMBkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkhp55db6so+SunDEYpp9XBhgs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2FhNGUyMzctYmEyNi0z ZTliLWI5YzEtMWIzMDNkMDgzMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9jgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9VjrbcpSwv3QoNuT04vaDR65jI5+Ur35KsNi4bl3EpnEYWPXwtyeC7 +7qD2srQ+px5DSvAhhZ/S5nIB2gN/uI3+lrcTh0zET411ltR68yab0aRWtfRThxQ +AtaaxuzQuuqGQYdd9aXgPGXHGZo7y5alw+kXV6ddJLCQgR8NTKvSB4IadaHpdoU EqU7zG2+Da3Ix4BumIwllyleTt2aDyI+gH+DpAKWoN1yZjyM4bc/0v+LyoplQ2W6 41ck9JQ8RdCe3J35XJ624fNjg3ewExjKqtJI0rBXKOQ7uOliGb1A+yGPZpAFd4h+ S3qHK4J7g26aDlrroSmnDvqVrViv3hQ= -----END CERTIFICATE-----Generated at Thu Oct 22 18:14:37 2026 by rpki-client