$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f390cd5-e241-3534-a449-3fa1c263bee2.roa File: 7f390cd5-e241-3534-a449-3fa1c263bee2.roa (raw, json) Hash identifier: kb5GS20LBGUVQp4Wb7TFZaUFCZSOfFbv5TMaP3tXmrs= Subject key identifier: 2E:E1:F4:67:DC:6C:5B:0E:1D:CD:98:C0:20:5C:3F:56:86:34:56:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D60752CBC809D85216100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f390cd5-e241-3534-a449-3fa1c263bee2.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.221.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:60:75:2c:bc:80:9d:85:21:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=e19b9bd3-dbf3-4f97-bc4c-5765b3f9fc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:96:c2:bb:cd:e8:b8:57:7c:e1:96:b5:f6:8c: 69:7c:12:28:30:ad:b5:d0:de:e7:15:ba:47:a2:f5: 9a:1a:15:26:bb:4c:e0:71:83:39:19:37:db:0b:fc: 8d:34:8a:10:81:62:d1:10:c3:91:e6:e4:3f:3a:19: ab:b0:03:12:9a:2d:c2:46:ed:c4:e9:93:c5:72:5c: e8:a3:0c:7e:6f:f8:39:80:a5:94:93:94:ac:9a:de: f0:2b:9b:00:fe:03:50:fb:27:ad:19:90:5a:20:38: 88:a5:51:2b:84:87:43:d4:d4:e6:6d:44:85:2a:94: 10:1d:60:26:d4:7f:6c:99:d1:99:5a:09:49:1d:62: 77:de:d7:49:53:e6:0e:60:3d:ed:41:53:95:01:6e: 68:ad:8a:6c:08:67:80:89:9c:89:f1:f4:37:09:99: c2:00:b3:7e:53:49:87:e5:c0:49:98:4f:46:3c:55: 19:40:e8:76:dc:74:a5:68:fc:e5:e5:ca:e8:69:d4: 7c:10:49:6d:95:9c:40:99:57:c4:e4:96:da:d8:28: 48:e1:ef:22:d7:5b:ab:33:4f:13:67:89:ac:03:82: 7b:76:97:d1:94:88:1f:cc:01:aa:00:2d:34:a3:59: ca:a5:fd:de:81:da:3f:3d:71:b6:05:dd:f4:d5:e4: 14:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E1:F4:67:DC:6C:5B:0E:1D:CD:98:C0:20:5C:3F:56:86:34:56:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f390cd5-e241-3534-a449-3fa1c263bee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:0e:aa:80:76:d2:6d:70:61:28:71:eb:84:7e:92:27:13:7b: 10:4f:11:9e:9e:ed:fc:e7:42:a0:63:69:31:25:d3:ca:7d:5f: ab:be:38:c5:c3:fc:d4:b9:29:60:ae:41:85:e8:fc:2b:4d:d3: 64:10:5b:a5:e9:62:aa:fa:05:6b:a5:c5:69:df:55:a1:83:38: 1c:c3:83:94:b7:26:0f:ed:3e:b2:7d:78:16:e1:47:77:4a:4e: 58:dc:9b:89:a0:ec:8b:b3:da:b7:69:bd:2f:9c:2e:19:71:e1: 7a:68:6f:81:e8:02:ee:2a:a8:4b:80:43:c6:06:d3:44:d1:a9: f1:95:24:9d:c8:a0:b1:4c:c5:7d:8f:a4:cc:a2:d2:7a:ef:fc: e6:3d:d1:94:32:86:ad:7e:23:97:5c:53:81:2b:fd:3b:2e:8f: f7:07:39:4f:78:d7:7f:46:59:42:13:e3:16:16:18:20:79:7d: 60:29:a2:af:58:a2:36:ae:91:d7:f7:45:32:49:28:01:6c:18: 43:4c:e1:29:03:7c:f1:52:a5:88:38:14:c6:4a:69:bb:d5:63: f0:51:8b:6b:03:9c:ee:47:91:7a:02:54:bd:78:eb:33:57:75: 8a:c0:6f:be:12:d4:1b:0a:0c:fc:d6:e4:e4:0a:40:e7:a8:85: ae:67:d5:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWB1LLyAnYUhYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZTE5YjliZDMtZGJmMy00Zjk3LWJjNGMtNTc2NWIzZjlmYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJbCu83ouFd84Za19oxpfBIoMK210N7nFbpH ovWaGhUmu0zgcYM5GTfbC/yNNIoQgWLREMOR5uQ/OhmrsAMSmi3CRu3E6ZPFclzo owx+b/g5gKWUk5Ssmt7wK5sA/gNQ+yetGZBaIDiIpVErhIdD1NTmbUSFKpQQHWAm 1H9smdGZWglJHWJ33tdJU+YOYD3tQVOVAW5orYpsCGeAiZyJ8fQ3CZnCALN+U0mH 5cBJmE9GPFUZQOh23HSlaPzl5croadR8EEltlZxAmVfE5Jba2ChI4e8i11urM08T Z4msA4J7dpfRlIgfzAGqAC00o1nKpf3egdo/PXG2Bd301eQUMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7h9GfcbFsOHc2YwCBcP1aGNFaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2YzOTBjZDUtZTI0MS0z NTM0LWE0NDktM2ZhMWMyNjNiZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwOqoB20m1wYShx64R+kicTexBPEZ6e7fznQqBjaTEl08p9X6u+OMXD /NS5KWCuQYXo/CtN02QQW6XpYqr6BWulxWnfVaGDOBzDg5S3Jg/tPrJ9eBbhR3dK Tljcm4mg7Iuz2rdpvS+cLhlx4Xpob4HoAu4qqEuAQ8YG00TRqfGVJJ3IoLFMxX2P pMyi0nrv/OY90ZQyhq1+I5dcU4Er/Tsuj/cHOU94139GWUIT4xYWGCB5fWApoq9Y ojaukdf3RTJJKAFsGENM4SkDfPFSpYg4FMZKabvVY/BRi2sDnO5HkXoCVL146zNX dYrAb74S1BsKDPzW5OQKQOeoha5n1ag= -----END CERTIFICATE-----Generated at Tue Oct 20 20:33:56 2026 by rpki-client