$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86c08ea5-a40a-32b5-8ffa-032231b1785c.roa File: 86c08ea5-a40a-32b5-8ffa-032231b1785c.roa (raw, json) Hash identifier: wfV2Fknk6XOHXNu1VlwtzJ2VQOhS/lLcng9Lk9cvn9o= Subject key identifier: A1:3F:1E:6F:DC:06:F7:BF:F5:64:AC:6B:B7:60:6C:BF:0B:28:64:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5E8269B66C6D0E168700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86c08ea5-a40a-32b5-8ffa-032231b1785c.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.220.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5e:82:69:b6:6c:6d:0e:16:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=9c1bdd24-0d95-418c-9880-b6b0c257da84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:fa:c4:54:c6:a1:a2:5d:7b:6b:04:85:66: e6:e6:db:35:be:d0:0f:ac:6c:bd:04:07:fe:a0:68: 52:ef:a1:d2:66:24:a4:81:4e:41:f9:8d:61:97:c1: 36:c0:83:3c:79:45:65:95:cc:86:06:f4:5a:e3:93: 37:f5:58:02:a7:f7:30:c0:17:6d:b8:57:38:87:32: ca:dc:dc:91:a7:8f:5d:73:2e:ff:33:9b:7e:97:6b: 5a:0c:40:a2:17:03:ff:e8:46:25:6a:5b:a6:ef:0b: c4:55:11:79:b3:fc:86:c3:2c:f1:d2:6c:38:40:80: 73:60:21:0c:38:1d:63:1d:52:c0:92:46:d0:bb:42: 3b:b4:67:0b:dd:de:68:82:bd:4f:f5:8d:34:1a:67: 35:1e:41:46:9b:79:77:8b:da:ab:e9:84:99:49:38: 15:b8:7d:16:2a:d5:02:79:31:fc:59:9e:c0:48:1b: a2:5b:e2:31:c6:30:88:da:9a:a7:2a:71:87:84:3d: 34:f1:d8:93:d3:47:d4:63:ad:05:21:11:b9:f7:f4: ea:47:44:9c:88:88:aa:29:9e:5d:15:00:d4:19:93: 57:da:e8:30:5c:0d:33:cc:35:ac:4b:af:cf:6a:88: 06:59:86:7b:26:15:bd:ee:e5:7b:d2:d3:3e:2c:f4: 9b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:1E:6F:DC:06:F7:BF:F5:64:AC:6B:B7:60:6C:BF:0B:28:64:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86c08ea5-a40a-32b5-8ffa-032231b1785c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9a:4c:46:48:d8:d2:0b:88:26:97:29:b9:67:1c:b0:33:10: a6:fa:b7:43:21:8f:d1:dd:a4:72:ef:47:58:12:53:5b:fd:42: a1:ac:03:e0:7a:66:ea:f4:37:28:e8:5e:5e:d0:b8:de:56:2f: 8f:14:97:d3:be:3c:9b:2c:11:ad:8f:04:1c:d0:dd:3f:61:15: d3:fc:8e:fb:bd:7b:75:6f:f4:59:f6:cc:76:a7:3a:72:dd:e7: 2e:3f:f9:ea:f9:26:61:4f:a3:7e:c3:80:a5:27:f5:89:3f:c6: e2:76:44:ed:9f:a0:03:4f:dd:5e:cb:17:69:25:3f:65:d0:5f: 8e:0c:3c:3c:5b:56:a8:f9:b0:d8:c3:51:1f:71:0d:08:db:bf: c2:56:78:6c:5d:d1:1f:af:27:ab:cb:8f:0d:73:d8:69:02:ea: ec:1c:a3:68:74:db:ea:87:08:b3:74:7b:6b:4d:71:48:f8:a9: b4:07:0c:db:03:57:bf:72:d9:d2:fd:1e:92:8d:4b:58:22:94: 7e:8a:25:30:05:02:3c:c2:b0:af:30:45:9a:c6:3e:69:f2:66: 9b:2d:5d:dd:58:54:53:ea:b2:0e:63:24:8a:0e:b8:9c:66:92: 92:bc:12:2f:50:ec:71:75:16:69:28:45:1f:17:6e:9f:25:33: 65:97:fd:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbV6CabZsbQ4WhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk OWMxYmRkMjQtMGQ5NS00MThjLTk4ODAtYjZiMGMyNTdkYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJb6xFTGoaJde2sEhWbm5ts1vtAPrGy9BAf+ oGhS76HSZiSkgU5B+Y1hl8E2wIM8eUVllcyGBvRa45M39VgCp/cwwBdtuFc4hzLK 3NyRp49dcy7/M5t+l2taDECiFwP/6EYlalum7wvEVRF5s/yGwyzx0mw4QIBzYCEM OB1jHVLAkkbQu0I7tGcL3d5ogr1P9Y00Gmc1HkFGm3l3i9qr6YSZSTgVuH0WKtUC eTH8WZ7ASBuiW+IxxjCI2pqnKnGHhD008diT00fUY60FIRG59/TqR0SciIiqKZ5d FQDUGZNX2ugwXA0zzDWsS6/PaogGWYZ7JhW97uV70tM+LPSb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE/Hm/cBve/9WSsa7dgbL8LKGSSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZjMDhlYTUtYTQwYS0z MmI1LThmZmEtMDMyMjMxYjE3ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOaTEZI2NILiCaXKblnHLAzEKb6t0Mhj9HdpHLvR1gSU1v9QqGsA+B6 Zur0NyjoXl7QuN5WL48Ul9O+PJssEa2PBBzQ3T9hFdP8jvu9e3Vv9Fn2zHanOnLd 5y4/+er5JmFPo37DgKUn9Yk/xuJ2RO2foANP3V7LF2klP2XQX44MPDxbVqj5sNjD UR9xDQjbv8JWeGxd0R+vJ6vLjw1z2GkC6uwco2h02+qHCLN0e2tNcUj4qbQHDNsD V79y2dL9HpKNS1gilH6KJTAFAjzCsK8wRZrGPmnyZpstXd1YVFPqsg5jJIoOuJxm kpK8Ei9Q7HF1FmkoRR8Xbp8lM2WX/U4= -----END CERTIFICATE-----Generated at Tue Oct 6 22:08:53 2026 by rpki-client