$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f5057e1-232a-3fae-a9a2-e04cd1ba4c98.roa File: 8f5057e1-232a-3fae-a9a2-e04cd1ba4c98.roa (raw, json) Hash identifier: UurQ36KcKqsBEv62wnzwCxXKMb1PLAeX1CI8UE5TPYU= Subject key identifier: 79:59:DB:DC:C8:E6:48:DC:0D:6A:E5:BB:F4:98:4D:A1:58:D4:26:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D4CB109B7CD5B3D9E8E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f5057e1-232a-3fae-a9a2-e04cd1ba4c98.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.53.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:4c:b1:09:b7:cd:5b:3d:9e:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=fbd525c3-30b6-4003-b3a1-28807ce29079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:6d:22:e8:51:d9:74:43:d2:9e:6f:77:73: eb:29:91:69:d2:e0:49:50:8a:18:86:0a:3f:89:e4: 95:c1:9c:91:eb:bf:10:24:8b:1c:8b:10:5f:b1:14: 60:f4:ac:9b:f6:22:cb:69:73:e2:6e:ae:0b:b4:63: 5c:84:00:f0:2e:5f:4b:0b:9e:25:86:f3:92:50:5f: fb:b0:f1:8d:30:44:60:36:f6:5d:b4:56:43:7b:c8: 24:15:a6:0b:98:31:7f:64:4a:ea:e4:a9:1a:c3:15: 43:dc:18:a2:74:0c:8c:91:4f:e4:fc:6b:e5:11:d4: 9e:8b:7a:1f:b9:d9:b8:0f:da:05:33:2c:5a:04:09: 78:e2:33:47:1d:33:86:43:18:17:7f:39:97:5a:e9: 2d:cd:0c:7b:47:32:41:10:4d:7a:64:f5:67:4c:43: 61:51:09:57:9e:60:1c:13:ef:2e:50:18:79:e6:d1: b7:13:e0:88:a7:65:1c:29:5e:de:58:47:cd:b8:70: 95:c2:06:4f:ce:40:50:e3:a0:48:0e:31:6c:e9:98: 24:1f:a5:70:b8:8b:02:c8:46:fa:8a:02:ed:45:89: bf:2c:03:be:78:5c:24:76:d5:51:ac:cc:b9:58:73: 12:dd:13:56:de:37:63:df:27:97:c9:46:c7:32:88: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:59:DB:DC:C8:E6:48:DC:0D:6A:E5:BB:F4:98:4D:A1:58:D4:26:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f5057e1-232a-3fae-a9a2-e04cd1ba4c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:75:5d:35:f0:81:c2:aa:00:4b:ff:17:1d:45:d2:69:b0:bb: b0:c7:60:4b:81:35:7b:91:3a:02:44:3f:e4:bf:36:fd:bb:81: 24:20:bf:ad:cb:88:31:0e:f7:22:6e:3d:79:5c:44:2d:5e:b0: 3e:9b:7e:f5:8d:24:52:5f:27:de:04:8a:23:cc:67:27:fe:6c: 62:4c:bf:ce:bf:e5:bc:93:e4:bd:b5:ef:fe:53:be:18:c5:97: f3:57:be:2d:e5:8d:11:4e:c6:96:6c:e1:8f:c5:9f:59:e8:47: d6:2a:ba:36:82:ac:f9:07:b6:0d:bd:29:7a:47:7f:3c:ba:93: c8:af:82:e0:4e:37:bb:7c:34:5e:80:9e:78:dc:99:98:f8:04: ee:b9:8f:0b:68:20:57:eb:db:2d:86:f3:98:2d:a9:1a:2b:4d: ac:6c:2b:0d:19:d3:a1:42:57:b1:9e:be:13:54:1b:06:ad:bc: 44:16:49:7e:2b:a2:a6:aa:29:66:43:52:f7:7e:d1:1e:06:9f: d6:16:bc:9f:31:7d:d2:2f:11:0d:6d:5e:93:b0:23:69:9f:98: 5a:55:3a:8b:cc:40:8d:b5:52:9a:ed:50:16:93:ad:49:0e:89: 6d:f1:ce:d9:41:b1:ac:87:3c:b9:8e:cf:b7:42:03:04:c0:d5: dc:58:6d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUyxCbfNWz2ejoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZmJkNTI1YzMtMzBiNi00MDAzLWIzYTEtMjg4MDdjZTI5MDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZxtIuhR2XRD0p5vd3PrKZFp0uBJUIoYhgo/ ieSVwZyR678QJIscixBfsRRg9Kyb9iLLaXPibq4LtGNchADwLl9LC54lhvOSUF/7 sPGNMERgNvZdtFZDe8gkFaYLmDF/ZErq5KkawxVD3BiidAyMkU/k/GvlEdSei3of udm4D9oFMyxaBAl44jNHHTOGQxgXfzmXWuktzQx7RzJBEE16ZPVnTENhUQlXnmAc E+8uUBh55tG3E+CIp2UcKV7eWEfNuHCVwgZPzkBQ46BIDjFs6ZgkH6VwuIsCyEb6 igLtRYm/LAO+eFwkdtVRrMy5WHMS3RNW3jdj3yeXyUbHMogP7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlZ29zI5kjcDWrlu/SYTaFY1CZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY1MDU3ZTEtMjMyYS0z ZmFlLWE5YTItZTA0Y2QxYmE0Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG11XTXwgcKqAEv/Fx1F0mmwu7DHYEuBNXuROgJEP+S/Nv27gSQgv63L iDEO9yJuPXlcRC1esD6bfvWNJFJfJ94EiiPMZyf+bGJMv86/5byT5L217/5TvhjF l/NXvi3ljRFOxpZs4Y/Fn1noR9YqujaCrPkHtg29KXpHfzy6k8ivguBON7t8NF6A nnjcmZj4BO65jwtoIFfr2y2G85gtqRorTaxsKw0Z06FCV7GevhNUGwatvEQWSX4r oqaqKWZDUvd+0R4Gn9YWvJ8xfdIvEQ1tXpOwI2mfmFpVOovMQI21UprtUBaTrUkO iW3xztlBsayHPLmOz7dCAwTA1dxYbQA= -----END CERTIFICATE-----Generated at Wed Oct 21 19:45:41 2026 by rpki-client