$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6ecbb0-7fa0-3ee7-a836-249e1a95a47b.roa File: 8d6ecbb0-7fa0-3ee7-a836-249e1a95a47b.roa (raw, json) Hash identifier: B1B4warAUu5IRIy2B5EFSWGLUHXvtF45gMMaakgbLVM= Subject key identifier: B8:94:37:AC:44:72:93:0C:2C:DB:85:4D:52:9C:57:6B:7D:CE:AA:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5A17128BE3F5DD9FA680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6ecbb0-7fa0-3ee7-a836-249e1a95a47b.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.222.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5a:17:12:8b:e3:f5:dd:9f:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=d99dbc0e-f4d3-4829-b5ea-f0c4b1d0092b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:4a:02:c9:18:8c:d7:e3:87:d1:77:83:96: 45:bf:96:11:ac:81:2f:90:2f:57:43:29:0a:38:64: c6:51:9c:7e:53:9c:1f:09:18:5e:0f:5f:54:e2:1c: a4:43:b2:6f:ea:df:a4:1d:cc:ac:20:c9:67:35:ec: 2b:12:dd:aa:37:d0:e8:72:4b:75:23:91:e4:4d:f6: 1e:fa:2c:59:16:5b:d8:5f:12:a7:f8:e9:33:ca:9e: b9:71:36:d2:3b:2b:e5:c7:03:34:87:5f:e3:91:d7: 88:74:5a:4e:db:9a:ec:bc:7c:94:b0:76:df:da:b8: 07:c7:95:6e:66:5e:89:86:f5:6d:41:23:17:13:19: 11:4c:07:a8:9e:7b:f1:0c:af:80:76:58:6d:0f:de: 90:9d:ca:08:fa:5a:41:db:92:17:b8:aa:a3:a2:36: d9:9f:fb:c0:65:68:d7:89:34:a9:15:79:c7:c4:ba: a4:ae:b6:be:a5:fb:42:77:30:34:fe:f9:2e:de:a4: b8:5d:79:21:e7:18:b2:49:20:e3:bc:49:29:57:7e: 82:8b:04:f6:0c:0a:ae:c4:6e:b4:1d:b8:dc:e0:f2: cc:90:48:4e:65:40:74:f2:45:d3:59:b3:06:b7:7a: 24:84:2d:22:1e:17:77:88:be:f2:63:0a:db:8b:d5: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:94:37:AC:44:72:93:0C:2C:DB:85:4D:52:9C:57:6B:7D:CE:AA:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d6ecbb0-7fa0-3ee7-a836-249e1a95a47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:57:c3:d6:1a:48:45:cf:d4:a5:95:e0:03:50:3c:80:9d:ea: 9d:1a:c4:85:c2:46:93:e8:72:60:d2:71:f9:7e:a7:90:7e:95: 48:8b:a1:0d:e9:06:a9:9a:65:31:54:7b:cd:cb:d3:b8:38:f7: 62:eb:ed:0a:04:c1:f8:ba:68:66:f5:f3:53:c4:8f:b8:d9:09: 88:fa:90:6c:01:1f:32:b6:92:ef:97:90:db:bb:db:d6:5a:09: d3:05:24:2c:1e:45:99:41:79:fb:f3:7c:d9:cb:80:00:8a:2d: ea:d6:d5:08:05:1d:38:33:09:3c:f1:a6:44:2a:2a:c2:42:9c: 5f:0a:86:45:91:8d:91:a9:cc:84:8d:75:9d:2f:ea:8c:21:06: 1d:e6:ae:55:5b:44:38:bb:94:ba:77:3a:0b:0c:20:d8:46:ca: 31:1e:2c:3d:8d:14:87:1a:b8:f9:1b:c2:79:0c:14:24:5a:e8: 16:42:32:da:e4:22:4d:a8:ac:59:da:09:9e:39:c7:e8:a9:5e: a3:92:a3:80:1c:d7:95:b7:31:ac:68:15:03:d2:f7:fb:0c:db: f4:bb:50:3d:0f:a1:44:b2:c4:ad:17:ba:6a:5c:cb:6d:91:bb: 05:23:59:ba:2f:b3:f2:dc:bf:31:38:d9:88:eb:16:2d:13:d9: ed:4c:04:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVoXEovj9d2fpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDk5ZGJjMGUtZjRkMy00ODI5LWI1ZWEtZjBjNGIxZDAwOTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRtKAskYjNfjh9F3g5ZFv5YRrIEvkC9XQykK OGTGUZx+U5wfCRheD19U4hykQ7Jv6t+kHcysIMlnNewrEt2qN9Dockt1I5HkTfYe +ixZFlvYXxKn+Okzyp65cTbSOyvlxwM0h1/jkdeIdFpO25rsvHyUsHbf2rgHx5Vu Zl6JhvVtQSMXExkRTAeonnvxDK+AdlhtD96QncoI+lpB25IXuKqjojbZn/vAZWjX iTSpFXnHxLqkrra+pftCdzA0/vku3qS4XXkh5xiySSDjvEkpV36CiwT2DAquxG60 Hbjc4PLMkEhOZUB08kXTWbMGt3okhC0iHhd3iL7yYwrbi9WSmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiUN6xEcpMMLNuFTVKcV2t9zqoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ2ZWNiYjAtN2ZhMC0z ZWU3LWE4MzYtMjQ5ZTFhOTVhNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF94AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxXw9YaSEXP1KWV4ANQPICd6p0axIXCRpPocmDScfl+p5B+lUiLoQ3p BqmaZTFUe83L07g492Lr7QoEwfi6aGb181PEj7jZCYj6kGwBHzK2ku+XkNu729Za CdMFJCweRZlBefvzfNnLgACKLerW1QgFHTgzCTzxpkQqKsJCnF8KhkWRjZGpzISN dZ0v6owhBh3mrlVbRDi7lLp3OgsMINhGyjEeLD2NFIcauPkbwnkMFCRa6BZCMtrk Ik2orFnaCZ45x+ipXqOSo4Ac15W3MaxoFQPS9/sM2/S7UD0PoUSyxK0Xumpcy22R uwUjWbovs/LcvzE42YjrFi0T2e1MBMk= -----END CERTIFICATE-----Generated at Tue Oct 20 22:17:07 2026 by rpki-client