$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e3ce54f-0714-3db1-be36-36fceec2b343.roa File: 7e3ce54f-0714-3db1-be36-36fceec2b343.roa (raw, json) Hash identifier: Q9NBddAubp60ugCsVuK3VLQrcGh27itZOKEYtpeIVq0= Subject key identifier: 72:BE:37:76:6A:16:F1:A7:47:82:A7:0F:54:F1:27:90:49:89:12:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8F3DA54DFD1F11769C345B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e3ce54f-0714-3db1-be36-36fceec2b343.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 16625 IP address blocks: 23.221.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:a5:4d:fd:1f:11:76:9c:34:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=5e99cf7e-f67e-47a7-a6a2-d3774c026c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:a8:a9:a9:a2:e6:7e:20:7f:bf:39:04:ca: c3:5c:c7:e5:0b:41:77:fc:fd:b5:3f:08:3b:a7:f2: f6:39:70:94:bf:6d:da:d7:1b:1f:55:cf:9f:de:43: 58:aa:d8:fa:da:67:a3:52:18:e5:09:35:7f:da:59: 4f:f6:65:a3:0d:68:84:9f:34:e5:d0:9a:a1:2b:47: 48:f7:bf:50:f5:a3:82:84:72:7a:56:37:df:53:e9: 3d:ce:06:2d:36:2a:dc:2f:1b:fa:3c:99:b4:c4:21: f1:68:b2:c8:cb:91:d7:68:ac:b8:de:2f:67:88:50: d6:fa:90:28:c4:01:02:91:19:90:e4:07:a1:a0:c3: 96:e1:2c:df:18:68:25:e0:fd:d8:f5:b1:54:89:7f: 0f:7c:80:c2:b4:94:22:71:fb:63:91:ee:02:39:5f: 1c:1f:6b:d6:9c:29:e5:17:b6:3c:ec:57:84:3d:0f: 66:80:1d:20:42:76:bc:65:a1:cf:5c:fe:21:0f:65: 4b:3b:54:f6:e1:53:57:49:97:3f:09:52:3c:0a:1f: af:46:b0:e7:18:d6:66:25:01:c0:1b:ad:43:54:19: 74:43:49:33:c6:76:d5:13:90:23:c3:a9:86:6f:67: 63:b5:42:39:a2:78:a2:7d:f0:7f:ab:c2:1a:c4:6f: 38:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BE:37:76:6A:16:F1:A7:47:82:A7:0F:54:F1:27:90:49:89:12:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e3ce54f-0714-3db1-be36-36fceec2b343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f6:b9:8c:f6:77:3c:8f:46:a8:df:ed:df:6f:79:1b:1c:99: c1:1f:a3:01:51:07:d7:62:09:eb:fe:92:42:05:8a:ad:17:1f: 4c:55:c5:eb:0f:2a:c7:3e:94:11:5d:21:4f:c5:3a:6c:d4:18: a6:87:d4:44:c8:09:d4:b2:bb:99:3d:87:64:7e:e6:89:76:1b: cd:f6:4f:5a:fb:77:61:d4:7f:d3:26:e0:8a:38:dc:82:42:9b: 0a:46:ce:b1:70:20:1a:28:dc:f6:d7:7b:a9:97:51:bd:44:8b: 76:f3:49:96:af:32:d9:a9:0d:76:c4:a5:f3:2b:32:7a:77:18: 99:c5:76:7f:6f:6c:1e:db:3b:a9:35:5f:49:57:b0:d2:6d:0a: 47:ac:27:0b:b8:97:e4:a5:b4:3c:5f:6b:1f:c1:6d:4d:9b:f1: 24:a2:2c:6c:c7:02:14:1e:4c:3f:81:70:f2:77:0c:e1:29:6d: 0d:ac:14:32:a8:d8:bd:11:e6:03:22:c5:1e:ff:7a:cb:84:d3: 3c:ed:68:d4:91:dd:17:6b:e4:1b:d3:26:e4:f3:f5:cf:17:80: b6:82:11:b3:e4:52:01:e3:b3:c0:b3:dd:64:83:04:bd:1f:c9: 5a:7c:e2:6c:f3:73:87:09:b4:61:ed:1d:43:b2:32:25:06:3b: 62:cd:1b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPaVN/R8Rdpw0W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NWU5OWNmN2UtZjY3ZS00N2E3LWE2YTItZDM3NzRjMDI2YzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+yoqami5n4gf785BMrDXMflC0F3/P21Pwg7 p/L2OXCUv23a1xsfVc+f3kNYqtj62mejUhjlCTV/2llP9mWjDWiEnzTl0JqhK0dI 979Q9aOChHJ6VjffU+k9zgYtNircLxv6PJm0xCHxaLLIy5HXaKy43i9niFDW+pAo xAECkRmQ5AehoMOW4SzfGGgl4P3Y9bFUiX8PfIDCtJQicftjke4COV8cH2vWnCnl F7Y87FeEPQ9mgB0gQna8ZaHPXP4hD2VLO1T24VNXSZc/CVI8Ch+vRrDnGNZmJQHA G61DVBl0Q0kzxnbVE5Ajw6mGb2djtUI5oniiffB/q8IaxG84qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK+N3ZqFvGnR4KnD1TxJ5BJiRIxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2UzY2U1NGYtMDcxNC0z ZGIxLWJlMzYtMzZmY2VlYzJiMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF90+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv2uYz2dzyPRqjf7d9veRscmcEfowFRB9diCev+kkIFiq0XH0xVxesP Ksc+lBFdIU/FOmzUGKaH1ETICdSyu5k9h2R+5ol2G832T1r7d2HUf9Mm4Io43IJC mwpGzrFwIBoo3PbXe6mXUb1Ei3bzSZavMtmpDXbEpfMrMnp3GJnFdn9vbB7bO6k1 X0lXsNJtCkesJwu4l+SltDxfax/BbU2b8SSiLGzHAhQeTD+BcPJ3DOEpbQ2sFDKo 2L0R5gMixR7/esuE0zztaNSR3Rdr5BvTJuTz9c8XgLaCEbPkUgHjs8Cz3WSDBL0f yVp84mzzc4cJtGHtHUOyMiUGO2LNG3o= -----END CERTIFICATE-----Generated at Sat Oct 24 20:55:39 2026 by rpki-client