$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa File: 8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa (raw, json) Hash identifier: 1JJjcKpbo5IEJ/xZBg4j7NSH9DDV97k/dBfJkXhk/9M= Subject key identifier: 7D:C3:33:E0:44:0D:31:FB:99:B9:AD:5B:09:16:AC:A5:BC:6E:22:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E503367F3356FFE1BFB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.206.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:50:33:67:f3:35:6f:fe:1b:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4c8636ed-b649-4829-a32d-cf785f0eb4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4e:8c:af:1f:e0:18:c6:c3:2e:07:4d:f2:28: 20:ae:df:b4:82:00:48:72:de:55:12:89:d0:a2:29: e1:a3:0c:ca:c5:b4:8a:31:8b:16:40:0f:d7:06:65: ed:c5:58:c8:d4:a4:d6:c5:6d:c1:5f:89:aa:08:54: 39:ab:fa:7d:b9:98:98:88:17:f4:56:9e:b8:43:f0: b4:58:f7:5d:43:8a:69:b0:98:32:3f:8c:ee:68:43: f8:13:e3:bc:d2:37:37:54:b4:03:97:97:72:d3:1a: 20:bf:0a:0b:64:82:6e:b9:f6:b9:ad:31:6d:c0:95: 5c:07:f1:13:e7:ae:ff:d8:a3:b0:48:c0:e3:04:e1: d1:64:f7:d2:eb:68:b0:10:b8:64:5c:02:cb:81:18: d7:bd:e2:5a:94:fb:70:d7:cd:5f:12:5b:4c:02:0d: e3:51:b1:2b:3c:c5:56:26:11:35:de:df:99:76:f0: 7c:2f:1c:54:b9:81:01:d1:65:44:9a:30:50:f3:bc: cf:0d:53:f5:b8:fa:9b:fd:e8:19:a6:44:34:11:0d: cb:3e:b6:d4:30:ab:3f:5f:79:88:19:37:9e:27:43: c1:d6:ba:4e:86:6c:4e:39:d4:9e:21:62:57:3d:e2: 9f:57:8e:f8:dc:d1:42:4e:1e:f5:93:27:50:38:20: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C3:33:E0:44:0D:31:FB:99:B9:AD:5B:09:16:AC:A5:BC:6E:22:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7a536c-b584-35dc-a3b1-e5c6905f0b05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8a:76:ca:b7:b9:18:e8:56:db:50:a0:1c:06:0b:26:6d:9b: c5:c2:5d:ff:c9:8b:49:79:12:90:29:2f:d9:0e:b2:38:b6:ce: 80:ad:ee:27:55:75:25:df:fa:c3:9a:bf:4c:14:49:0b:e6:5f: 55:01:38:d4:69:dd:04:cd:f8:3e:1b:50:f9:34:ed:e3:09:88: 23:1c:91:fa:e6:53:62:5f:ec:e2:b8:3a:6f:4e:ed:33:21:77: bf:18:3d:5f:78:4b:cf:33:c5:d8:3b:9e:b4:4e:15:47:92:4c: 00:8b:5d:46:32:28:71:e3:c0:b6:6b:b5:b9:21:97:76:0c:63: 0e:3f:4b:36:e4:bf:0c:32:96:63:95:7d:65:ed:35:9f:ea:2f: fd:87:ce:a1:41:24:ac:08:32:f7:de:fa:a8:a0:05:78:f0:1e: 32:00:28:1c:1a:27:32:56:70:f3:85:dd:19:d6:1c:9e:1c:56: ad:2d:a1:21:34:aa:32:bb:4c:d6:e1:7a:dd:0c:63:d9:02:57: 5a:56:5b:ab:44:a6:75:42:d2:48:35:d0:6e:8e:64:81:c4:86: eb:cc:2c:ba:71:0e:ea:33:85:3f:b7:e7:f2:e2:f4:45:4e:31: 79:fa:45:90:0a:fa:95:2c:4c:c0:91:e8:70:1c:0e:a3:b6:93: cc:81:54:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JflAzZ/M1b/4b+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGM4NjM2ZWQtYjY0OS00ODI5LWEzMmQtY2Y3ODVmMGViNGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9U6Mrx/gGMbDLgdN8iggrt+0ggBIct5VEonQ oinhowzKxbSKMYsWQA/XBmXtxVjI1KTWxW3BX4mqCFQ5q/p9uZiYiBf0Vp64Q/C0 WPddQ4ppsJgyP4zuaEP4E+O80jc3VLQDl5dy0xogvwoLZIJuufa5rTFtwJVcB/ET 567/2KOwSMDjBOHRZPfS62iwELhkXALLgRjXveJalPtw181fEltMAg3jUbErPMVW JhE13t+ZdvB8LxxUuYEB0WVEmjBQ87zPDVP1uPqb/egZpkQ0EQ3LPrbUMKs/X3mI GTeeJ0PB1rpOhmxOOdSeIWJXPeKfV4743NFCTh71kydQOCDBiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3DM+BEDTH7mbmtWwkWrKW8biJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU3YTUzNmMtYjU4NC0z NWRjLWEzYjEtZTVjNjkwNWYwYjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6Kdsq3uRjoVttQoBwGCyZtm8XCXf/Ji0l5EpApL9kOsji2zoCt7idV dSXf+sOav0wUSQvmX1UBONRp3QTN+D4bUPk07eMJiCMckfrmU2Jf7OK4Om9O7TMh d78YPV94S88zxdg7nrROFUeSTACLXUYyKHHjwLZrtbkhl3YMYw4/SzbkvwwylmOV fWXtNZ/qL/2HzqFBJKwIMvfe+qigBXjwHjIAKBwaJzJWcPOF3RnWHJ4cVq0toSE0 qjK7TNbhet0MY9kCV1pWW6tEpnVC0kg10G6OZIHEhuvMLLpxDuozhT+35/Li9EVO MXn6RZAK+pUsTMCR6HAcDqO2k8yBVA0= -----END CERTIFICATE-----Generated at Fri Oct 23 20:39:36 2026 by rpki-client