$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfae50f-5968-30fb-b05e-4af7b53bc731.roa File: 8bfae50f-5968-30fb-b05e-4af7b53bc731.roa (raw, json) Hash identifier: dK9ltWNEqli8mFf7hD3MQj560t7TSAn7TUqijgTFV2Y= Subject key identifier: 58:2A:B8:8D:6A:E5:2C:C0:CC:CC:BC:A4:81:01:10:42:A7:B0:D6:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D614BD8B45EC1A231BD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfae50f-5968-30fb-b05e-4af7b53bc731.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.222.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:61:4b:d8:b4:5e:c1:a2:31:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=1f60fd40-1b2a-43bd-99a1-1aad0efa0c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:20:5c:c2:fe:4f:b3:44:f3:a9:21:c2:90:99: 06:8a:8c:3a:b8:c0:52:fe:9e:bf:2a:78:74:83:91: 28:df:a1:09:7e:67:82:c3:f8:01:ea:22:a1:01:46: 54:be:4c:3f:ec:65:53:88:1e:10:cd:31:0a:ba:7a: c9:47:cc:b6:4a:67:fb:a9:80:0d:88:a3:aa:20:97: b9:27:39:25:d9:86:85:92:59:78:23:dc:38:99:fc: ff:53:10:27:96:79:ae:fc:92:68:28:89:ba:c8:40: e5:bd:6b:e2:69:d5:8d:6a:06:f1:be:47:8e:3e:a1: b6:a8:7c:da:8e:46:38:b7:b7:58:86:60:60:07:26: b0:56:7e:5b:69:2f:d6:a3:1b:fb:9c:ce:ab:99:1a: 97:9e:90:b2:bc:35:70:23:fa:e5:95:a2:d8:81:aa: 25:1d:c2:64:4f:e5:08:02:5b:0d:3e:96:2a:4f:62: 2d:14:8d:3a:12:5f:12:c4:0e:ba:8b:0c:2e:be:8e: 83:b2:86:6e:fb:d4:3b:2b:a7:11:86:60:35:f0:e8: f4:1c:6b:72:d2:5d:39:4a:4a:b4:f4:72:10:0c:b4: 17:b9:3e:d9:a9:66:ce:23:5f:ec:de:e0:53:2e:fe: 80:0d:14:cb:70:53:a7:e8:af:5c:2f:93:48:ad:7c: 47:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:B8:8D:6A:E5:2C:C0:CC:CC:BC:A4:81:01:10:42:A7:B0:D6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bfae50f-5968-30fb-b05e-4af7b53bc731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3b:f5:64:cd:05:95:2d:3a:5d:1f:ef:f3:8b:0e:62:a1:e8: 69:12:00:de:58:eb:26:3e:5d:6a:12:ce:39:cf:22:7a:92:ac: 24:e4:84:34:cf:c5:b1:5e:9a:af:2c:49:ee:b8:27:cd:f6:49: 18:9c:f9:9b:25:5b:a9:3a:3e:d6:85:db:b4:d5:da:c1:c9:3b: 76:a1:3c:3c:cd:41:bf:b0:b5:28:92:ce:2f:b5:42:fc:98:df: 56:c0:2a:50:0f:6e:f1:33:7c:71:93:d9:e5:48:5a:23:a8:ec: 4a:91:fe:e0:b9:53:ee:cd:36:85:f9:45:88:1d:2f:70:09:04: f1:cb:7f:2e:90:58:59:00:12:a4:2a:8e:34:02:87:f5:66:bf: 3a:11:64:ce:2a:e7:0e:72:7c:a3:95:4d:ff:84:b8:1c:9d:af: 04:c4:49:38:eb:2d:ff:58:55:fd:e5:00:0b:3d:2b:66:58:4f: 07:b3:aa:b3:d9:df:06:f4:16:17:59:dc:ba:41:08:40:59:3f: 51:8b:e8:f0:e2:ad:26:b4:b6:f2:3c:6f:1f:57:7f:85:28:49: 52:36:3e:9e:36:00:2c:5b:2c:2a:a2:d9:13:02:89:eb:55:a9: 5d:6e:5a:d0:5e:3d:dc:95:0a:5f:1d:b2:fe:5a:b1:65:1d:ff: ee:29:35:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWFL2LRewaIxvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MWY2MGZkNDAtMWIyYS00M2JkLTk5YTEtMWFhZDBlZmEwYzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CBcwv5Ps0TzqSHCkJkGiow6uMBS/p6/Knh0 g5Eo36EJfmeCw/gB6iKhAUZUvkw/7GVTiB4QzTEKunrJR8y2Smf7qYANiKOqIJe5 Jzkl2YaFkll4I9w4mfz/UxAnlnmu/JJoKIm6yEDlvWviadWNagbxvkeOPqG2qHza jkY4t7dYhmBgByawVn5baS/Woxv7nM6rmRqXnpCyvDVwI/rllaLYgaolHcJkT+UI AlsNPpYqT2ItFI06El8SxA66iwwuvo6DsoZu+9Q7K6cRhmA18Oj0HGty0l05Skq0 9HIQDLQXuT7ZqWbOI1/s3uBTLv6ADRTLcFOn6K9cL5NIrXxHSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgquI1q5SzAzMy8pIEBEEKnsNaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJmYWU1MGYtNTk2OC0z MGZiLWIwNWUtNGFmN2I1M2JjNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF94cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQ79WTNBZUtOl0f7/OLDmKh6GkSAN5Y6yY+XWoSzjnPInqSrCTkhDTP xbFemq8sSe64J832SRic+ZslW6k6PtaF27TV2sHJO3ahPDzNQb+wtSiSzi+1QvyY 31bAKlAPbvEzfHGT2eVIWiOo7EqR/uC5U+7NNoX5RYgdL3AJBPHLfy6QWFkAEqQq jjQCh/VmvzoRZM4q5w5yfKOVTf+EuBydrwTESTjrLf9YVf3lAAs9K2ZYTwezqrPZ 3wb0FhdZ3LpBCEBZP1GL6PDirSa0tvI8bx9Xf4UoSVI2Pp42ACxbLCqi2RMCietV qV1uWtBePdyVCl8dsv5asWUd/+4pNTw= -----END CERTIFICATE-----Generated at Sun Oct 25 01:10:38 2026 by rpki-client