$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fa7feb5-ddc8-3d97-8e44-fc5d0d8c81ff.roa File: 8fa7feb5-ddc8-3d97-8e44-fc5d0d8c81ff.roa (raw, json) Hash identifier: QXchRtgya/mo1heO5s5YdqDbnomnly7Z6yabKaPnpHA= Subject key identifier: EF:A3:08:FD:4B:86:0D:73:95:27:8B:8F:C0:16:11:9F:16:68:B8:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D595E2E701269CA216740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fa7feb5-ddc8-3d97-8e44-fc5d0d8c81ff.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.221.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:59:5e:2e:70:12:69:ca:21:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=61a6d02e-551f-4eca-9d38-4066f505a38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:68:88:33:da:bf:da:b7:be:a6:af:7b:4d: 5f:a9:6a:d5:7e:a8:5f:2a:d1:01:5e:6f:bd:c3:50: 48:cb:da:2f:9d:2e:95:93:64:74:d0:20:bc:4d:7a: 78:07:7a:87:d2:d1:22:92:2b:23:73:7c:54:b6:a8: ed:c2:2b:68:6c:1f:ab:58:3b:6d:fb:64:90:e0:d5: af:bb:bc:84:fd:77:63:a0:a6:d0:9f:55:7c:5e:70: 60:3c:ac:dd:de:9d:0b:cb:a0:94:c2:1f:ad:81:40: a3:6b:e8:43:37:2e:84:16:69:81:b2:86:f4:3f:e6: b6:39:19:94:9a:b6:e3:43:bd:b7:6f:bd:60:ea:96: a4:93:fa:bd:80:9d:d2:4b:a2:69:f8:47:25:8e:a7: d0:f6:18:41:1b:5a:96:e3:3d:dd:b4:21:4c:18:a0: a8:f7:c5:d2:06:7c:64:7b:d1:73:69:0e:60:a3:3e: ad:21:68:a0:f9:f5:c4:4f:28:52:6c:05:a2:d2:7b: 53:02:ee:1d:29:22:86:3d:f4:fe:33:64:55:c9:f0: 0d:7e:00:6d:69:f1:47:17:a6:4c:98:aa:af:e0:b5: 0e:1d:13:dc:f4:6f:57:d2:f0:bc:94:35:d4:02:a6: 7c:66:e7:64:ae:88:24:96:64:d2:e6:b1:2c:59:0a: 50:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A3:08:FD:4B:86:0D:73:95:27:8B:8F:C0:16:11:9F:16:68:B8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8fa7feb5-ddc8-3d97-8e44-fc5d0d8c81ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5b:00:f5:12:86:c5:0c:4c:7a:b5:e1:7f:2c:6d:b4:b3:57: eb:2c:8f:6c:5c:01:ce:49:2e:60:69:68:57:f0:49:57:a7:93: e1:70:7e:0a:f0:5a:a4:fd:09:e0:c2:1f:46:ee:1f:b6:98:32: 75:00:ab:bc:31:23:0b:da:ab:13:f3:8a:f0:3c:25:d8:a3:60: 76:b9:89:b8:bf:bd:81:54:af:bd:09:c5:a5:11:76:fa:bf:60: 10:7a:d1:f9:6f:57:22:e8:a5:bb:6c:65:a5:d1:06:76:3e:f8: f5:52:b5:55:cc:c9:50:d8:05:36:cd:0b:20:2d:49:f1:99:d5: 8c:6d:35:bb:ab:ed:a8:0e:77:22:cd:f3:27:c7:ae:62:ba:98: e6:89:3e:b2:5f:05:71:bb:bf:f8:e6:3f:69:7a:2c:20:c3:3c: d2:75:2a:d5:c6:95:05:9b:bf:1f:3c:6d:b0:05:64:50:e3:9f: ff:92:b8:37:9e:6a:a1:4d:e4:94:0b:1e:c8:37:ab:a5:2f:ca: b9:99:dd:d8:27:8a:2d:8f:d9:ab:84:6e:87:81:ed:72:ba:b6: c8:2d:7a:2c:94:fe:80:64:00:63:ae:23:e7:8f:be:8c:fa:ba: dd:7a:d7:86:5b:f4:73:6d:33:36:d0:91:1a:58:e3:03:55:18: 45:be:24:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVleLnASacohZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NjFhNmQwMmUtNTUxZi00ZWNhLTlkMzgtNDA2NmY1MDVhMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zloiDPav9q3vqave01fqWrVfqhfKtEBXm+9 w1BIy9ovnS6Vk2R00CC8TXp4B3qH0tEikisjc3xUtqjtwitobB+rWDtt+2SQ4NWv u7yE/XdjoKbQn1V8XnBgPKzd3p0Ly6CUwh+tgUCja+hDNy6EFmmBsob0P+a2ORmU mrbjQ723b71g6pakk/q9gJ3SS6Jp+EcljqfQ9hhBG1qW4z3dtCFMGKCo98XSBnxk e9FzaQ5goz6tIWig+fXETyhSbAWi0ntTAu4dKSKGPfT+M2RVyfANfgBtafFHF6ZM mKqv4LUOHRPc9G9X0vC8lDXUAqZ8ZudkrogklmTS5rEsWQpQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+jCP1Lhg1zlSeLj8AWEZ8WaLjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGZhN2ZlYjUtZGRjOC0z ZDk3LThlNDQtZmM1ZDBkOGM4MWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF900MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1bAPUShsUMTHq14X8sbbSzV+ssj2xcAc5JLmBpaFfwSVenk+Fwfgrw WqT9CeDCH0buH7aYMnUAq7wxIwvaqxPzivA8JdijYHa5ibi/vYFUr70JxaURdvq/ YBB60flvVyLopbtsZaXRBnY++PVStVXMyVDYBTbNCyAtSfGZ1YxtNbur7agOdyLN 8yfHrmK6mOaJPrJfBXG7v/jmP2l6LCDDPNJ1KtXGlQWbvx88bbAFZFDjn/+SuDee aqFN5JQLHsg3q6UvyrmZ3dgnii2P2auEboeB7XK6tsgteiyU/oBkAGOuI+ePvoz6 ut1614Zb9HNtMzbQkRpY4wNVGEW+JBw= -----END CERTIFICATE-----Generated at Tue Oct 6 07:24:16 2026 by rpki-client