$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/951e92c4-60b2-3938-8b8e-2136c0cef151.roa File: 951e92c4-60b2-3938-8b8e-2136c0cef151.roa (raw, json) Hash identifier: 9nvbDg9JJMsOexTZ+jEtXoGbmltaUa9P+v8GybBZVnI= Subject key identifier: 0F:7D:A1:F9:5F:05:8C:FE:B6:D3:A4:03:4D:5D:FD:58:10:DC:1B:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5DBB70FD7423464AF3E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/951e92c4-60b2-3938-8b8e-2136c0cef151.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.220.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5d:bb:70:fd:74:23:46:4a:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=701e7077-1b3f-40da-86d7-b8d4277672ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:01:37:96:8a:70:d2:08:99:67:28:4d:b3: 3e:24:ba:1c:17:0c:b6:f8:37:9c:6a:d0:42:7b:2f: 55:39:6f:53:e2:80:61:7a:fd:16:0e:91:4d:88:48: 9b:2b:2e:1c:bd:73:0a:0d:ca:11:4c:28:e1:46:9b: 43:ad:09:13:4b:87:30:4f:bc:27:4c:20:a4:70:27: 4d:60:98:20:a7:15:fa:97:38:9b:87:2d:6a:e3:2c: 86:1a:89:ee:82:d8:8a:13:86:6b:a5:a5:3a:ec:f3: b8:89:5b:86:6f:5c:83:11:05:a9:2c:98:b2:94:75: 48:9e:eb:b6:e1:06:3c:92:43:69:cc:64:c7:c5:79: 2f:c1:4a:7d:e1:cb:a0:60:e1:38:e1:e5:4b:fc:69: 83:16:d2:f2:42:d6:1c:0e:7f:4c:31:98:11:8a:92: 31:0a:9c:6f:ed:ef:5f:82:b4:d0:ba:a8:33:61:b6: 08:aa:44:31:fe:f7:a7:3f:7b:49:57:76:98:52:d0: b0:88:d4:12:4f:d1:38:b7:11:af:32:d2:06:39:f4: 13:9a:01:2c:a6:c7:ca:3f:49:03:86:de:22:0f:54: 3c:d7:dc:dc:4e:0c:59:34:dd:cf:a2:6c:cc:c5:a1: c9:d4:97:ef:cb:a2:b6:c3:38:6a:72:19:83:2d:d9: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7D:A1:F9:5F:05:8C:FE:B6:D3:A4:03:4D:5D:FD:58:10:DC:1B:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/951e92c4-60b2-3938-8b8e-2136c0cef151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b7:3b:a3:8a:3e:76:76:ef:f1:08:3d:d7:49:b5:75:36:7c: e1:73:11:d6:57:8f:ee:f3:08:64:47:37:1e:f0:e2:84:9d:fd: b0:a1:4c:fa:4b:d6:a9:77:26:68:83:ec:ba:b6:c7:97:c8:b1: 8b:21:f3:de:af:0d:ef:1b:02:5f:27:de:ee:c4:ff:f0:ba:55: 0b:a6:06:7c:48:51:e6:7a:28:3a:6f:1e:28:65:73:2f:59:41: af:da:ac:46:ec:60:d5:32:a0:35:45:73:47:28:f9:9c:35:da: ff:ae:87:b2:ce:67:98:1d:2d:6d:db:97:cf:ce:45:0c:14:0b: 22:70:69:16:5c:4e:33:da:9b:95:19:80:3f:cd:76:bf:39:88: 66:8e:0f:34:3e:09:2c:fd:b0:ee:af:f2:61:11:21:05:56:fe: 55:7e:fd:80:e0:d1:2a:ba:10:f3:10:00:01:8c:2f:79:bd:ee: a1:15:2d:30:ae:a6:82:47:ca:17:0c:93:04:50:1f:6c:55:4e: e4:61:4a:80:55:3d:6b:9e:b8:2d:95:c3:b2:4d:b5:14:fd:cc: 7a:9d:c3:c1:1b:bb:27:7e:50:9a:3b:22:7b:80:2e:70:a8:90: 91:82:23:a2:84:e3:d7:2a:da:cb:36:a7:fa:04:f7:73:7c:37: a8:9a:c7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbV27cP10I0ZK8+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NzAxZTcwNzctMWIzZi00MGRhLTg2ZDctYjhkNDI3NzY3MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpgBN5aKcNIImWcoTbM+JLocFwy2+DecatBC ey9VOW9T4oBhev0WDpFNiEibKy4cvXMKDcoRTCjhRptDrQkTS4cwT7wnTCCkcCdN YJggpxX6lzibhy1q4yyGGonugtiKE4ZrpaU67PO4iVuGb1yDEQWpLJiylHVInuu2 4QY8kkNpzGTHxXkvwUp94cugYOE44eVL/GmDFtLyQtYcDn9MMZgRipIxCpxv7e9f grTQuqgzYbYIqkQx/venP3tJV3aYUtCwiNQST9E4txGvMtIGOfQTmgEspsfKP0kD ht4iD1Q819zcTgxZNN3PomzMxaHJ1Jfvy6K2wzhqchmDLdnGnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA99oflfBYz+ttOkA01d/VgQ3Bs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTUxZTkyYzQtNjBiMi0z OTM4LThiOGUtMjEzNmMwY2VmMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu3O6OKPnZ27/EIPddJtXU2fOFzEdZXj+7zCGRHNx7w4oSd/bChTPpL 1ql3JmiD7Lq2x5fIsYsh896vDe8bAl8n3u7E//C6VQumBnxIUeZ6KDpvHihlcy9Z Qa/arEbsYNUyoDVFc0co+Zw12v+uh7LOZ5gdLW3bl8/ORQwUCyJwaRZcTjPam5UZ gD/Ndr85iGaODzQ+CSz9sO6v8mERIQVW/lV+/YDg0Sq6EPMQAAGML3m97qEVLTCu poJHyhcMkwRQH2xVTuRhSoBVPWueuC2Vw7JNtRT9zHqdw8Ebuyd+UJo7InuALnCo kJGCI6KE49cq2ss2p/oE93N8N6iax7Q= -----END CERTIFICATE-----Generated at Sat Oct 24 10:42:15 2026 by rpki-client