$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cf90df-c166-369d-b148-1a3ec55f00c8.roa File: 88cf90df-c166-369d-b148-1a3ec55f00c8.roa (raw, json) Hash identifier: iMiO6KFPOvn/7BvDs+qJJygsECZUVjL9TrTi1D7oILE= Subject key identifier: 23:7F:5D:EC:32:7D:9E:29:DA:A5:DD:C9:4F:FD:CF:65:00:5C:7F:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5EF9B0B22C37F37C2880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cf90df-c166-369d-b148-1a3ec55f00c8.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.220.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5e:f9:b0:b2:2c:37:f3:7c:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=c0103854-8bbb-400a-8761-dcb86eb6f30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:17:96:d5:aa:3f:ed:5d:31:a8:b3:e9:af: f7:6e:e3:73:30:4a:2d:e4:e5:54:75:92:0e:d2:66: 50:98:5c:2e:1b:f0:b4:c4:84:f0:28:e2:17:77:73: b7:43:a7:2f:37:9c:61:f0:e4:0d:4b:86:df:f9:1e: 7b:4c:ea:ea:f7:a8:32:70:07:e4:1f:6e:0f:52:1c: 7a:c0:f6:f4:0e:3c:0e:2f:74:b4:99:2a:bc:f0:8f: ab:03:b9:7a:0e:33:e7:4b:a7:1b:b9:89:63:9f:5c: b8:67:51:9a:3b:28:85:d4:34:bc:c3:42:e5:76:f5: 5b:ea:86:36:37:aa:ea:95:2c:ef:68:04:98:9b:95: 23:07:7d:1d:4d:ca:e8:09:30:12:b2:0e:7f:ec:d8: c3:25:fb:01:41:34:10:98:f2:13:f0:37:b7:1e:2c: 97:38:b0:af:ca:97:ff:48:47:97:58:a5:55:e3:3d: 45:89:78:94:ad:2a:12:ce:2a:2e:4d:63:51:18:9a: c2:2f:07:b3:47:3a:f1:42:ae:77:72:83:33:fb:11: 4a:76:b7:5c:39:61:66:77:06:dd:b8:fd:7e:b9:23: 7a:43:4a:4b:c3:6a:12:51:14:04:91:45:e0:3c:fa: 21:1a:33:36:86:9c:f6:9d:1f:6f:59:b2:2c:a8:5e: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7F:5D:EC:32:7D:9E:29:DA:A5:DD:C9:4F:FD:CF:65:00:5C:7F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cf90df-c166-369d-b148-1a3ec55f00c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f1:fa:9c:18:bb:c9:d4:6a:11:6b:9c:a2:92:25:fb:0f:a5: 90:ff:37:00:0f:0a:e2:52:d3:b1:8a:d2:21:de:a3:a8:0f:da: 75:e8:19:52:2b:81:a9:bf:89:66:21:d1:72:40:e1:f1:7e:cf: 25:12:62:30:a1:f5:9f:bf:7b:2d:e9:66:53:4f:6e:61:c5:f2: 56:1a:7b:fd:34:ec:02:e5:92:f1:c1:b3:31:a8:e0:5d:ba:a6: 50:c9:6b:75:2a:ac:f2:e7:0f:39:08:35:0d:39:17:8e:ca:cd: 3a:be:79:7a:a4:7a:53:36:a2:61:2e:40:6f:3b:6b:e3:53:36: fd:4d:c7:d2:8d:b6:c7:ca:d8:d8:ba:71:d3:f5:d8:81:50:2f: 68:95:d4:09:26:21:4b:b7:ba:45:c8:fd:8c:da:1e:fe:87:c8: 93:02:21:59:4d:70:12:5d:4f:ed:d3:b9:c9:e7:89:27:66:9d: 58:c6:2f:7d:e2:aa:4b:75:ec:1a:3f:d6:c8:6d:69:08:b5:6a: df:79:13:15:60:ed:01:13:a5:99:fe:68:0a:7a:50:0c:70:f2: e8:69:bc:56:93:14:6c:26:f7:72:46:67:ea:02:59:7d:a4:e3: 6c:5a:95:af:95:ee:54:5a:e0:67:b9:34:61:40:de:2c:ef:9b: 5e:65:9a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbV75sLIsN/N8KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YzAxMDM4NTQtOGJiYi00MDBhLTg3NjEtZGNiODZlYjZmMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ8XltWqP+1dMaiz6a/3buNzMEot5OVUdZIO 0mZQmFwuG/C0xITwKOIXd3O3Q6cvN5xh8OQNS4bf+R57TOrq96gycAfkH24PUhx6 wPb0DjwOL3S0mSq88I+rA7l6DjPnS6cbuYljn1y4Z1GaOyiF1DS8w0LldvVb6oY2 N6rqlSzvaASYm5UjB30dTcroCTASsg5/7NjDJfsBQTQQmPIT8De3HiyXOLCvypf/ SEeXWKVV4z1FiXiUrSoSziouTWNRGJrCLwezRzrxQq53coMz+xFKdrdcOWFmdwbd uP1+uSN6Q0pLw2oSURQEkUXgPPohGjM2hpz2nR9vWbIsqF67NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN/XewyfZ4p2qXdyU/9z2UAXH8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhjZjkwZGYtYzE2Ni0z NjlkLWIxNDgtMWEzZWM1NWYwMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9zLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDx+pwYu8nUahFrnKKSJfsPpZD/NwAPCuJS07GK0iHeo6gP2nXoGVIr gam/iWYh0XJA4fF+zyUSYjCh9Z+/ey3pZlNPbmHF8lYae/007ALlkvHBszGo4F26 plDJa3UqrPLnDzkINQ05F47KzTq+eXqkelM2omEuQG87a+NTNv1Nx9KNtsfK2Ni6 cdP12IFQL2iV1AkmIUu3ukXI/YzaHv6HyJMCIVlNcBJdT+3TucnniSdmnVjGL33i qkt17Bo/1shtaQi1at95ExVg7QETpZn+aAp6UAxw8uhpvFaTFGwm93JGZ+oCWX2k 42xala+V7lRa4Ge5NGFA3izvm15lmvA= -----END CERTIFICATE-----Generated at Sat Oct 24 02:33:35 2026 by rpki-client