$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa File: 975b2e17-f15b-3eda-aa6f-40d437f71e08.roa (raw, json) Hash identifier: zMsAdGV32mL5gvDhbr1a130uAG/FFROKtYrECzT+5Ys= Subject key identifier: 0E:5D:8B:D9:5F:5D:12:FB:71:10:3F:EA:AF:BA:3D:7C:F6:AA:E1:CC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8F3DB8CEBB4D5F25FE178E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 24319 IP address blocks: 23.214.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b8:ce:bb:4d:5f:25:fe:17:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=d6cd387f-c074-403c-94a5-987e089f0b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:5d:4a:3f:60:78:e7:0e:0e:84:df:9a:b3: 31:11:e5:bc:14:36:c4:e5:4a:83:7f:5c:68:6a:af: 6b:97:e6:43:ba:6d:a8:c9:a5:22:20:15:5d:d3:ea: 03:fd:2b:1b:cf:77:9d:3e:09:57:a5:e3:84:f9:fa: 64:aa:8c:e8:90:1f:bc:dc:a8:c9:c6:b2:ab:6b:33: 15:0d:87:94:44:ab:6e:bd:79:0b:4d:8d:ca:9d:fa: 74:c8:be:99:58:7d:32:e5:d3:43:5e:52:ce:ea:c0: 77:16:65:39:87:84:e0:b6:cf:f3:cc:0c:24:59:42: 6b:88:43:9f:e6:d5:61:5b:fa:61:5b:68:d4:4d:10: ba:b1:eb:0b:92:3e:5b:f1:9c:47:da:bc:b7:38:56: c2:85:95:66:a6:f4:90:94:0b:c3:9a:fe:b6:15:8b: 59:04:f1:b8:4a:c8:38:30:e9:91:c9:a3:34:23:17: 9a:91:ed:6a:d6:71:82:15:17:cc:a8:ac:00:3e:11: 44:17:ec:e3:78:46:8f:ac:53:7a:0a:f9:09:c9:d7: bd:81:5f:88:01:d4:fc:6d:e6:e0:13:dd:23:0a:50: c5:cd:22:0b:61:00:e0:fa:a4:0b:46:9c:18:9c:b6: 56:10:ed:f2:44:bc:e2:53:94:bc:36:3a:6f:a7:9b: 3a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5D:8B:D9:5F:5D:12:FB:71:10:3F:EA:AF:BA:3D:7C:F6:AA:E1:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:87:57:72:ac:33:5c:3b:fe:74:cc:3e:d9:1e:6d:3b:92:cb: 72:ed:66:b5:7a:e8:13:90:8a:5d:29:10:f8:ed:c9:20:5e:0e: 94:aa:a5:05:f6:e1:6c:28:12:dd:15:d3:0a:fb:73:36:88:c3: 0e:1f:7a:9c:03:cb:25:e9:a3:ae:ba:80:60:b6:0e:55:e1:20: f9:13:2b:dd:1a:13:d6:10:a9:31:89:7e:79:9e:74:37:c4:ce: e3:f7:26:af:04:ed:09:2f:f1:66:86:f0:e4:cb:76:45:be:dd: d1:ef:24:e0:48:c2:42:20:aa:0a:fd:77:31:2e:d1:cf:37:8f: 75:69:3a:99:1f:f0:33:ff:cd:c5:b7:7c:51:81:8a:2d:7c:06: c7:7b:5a:b2:58:23:c8:fe:35:4d:b8:d7:a2:23:8b:d0:ea:32: 7f:e9:93:23:fb:e0:03:d8:29:ea:00:8c:9e:21:77:0d:a1:f6: 13:bd:de:36:b1:67:b8:0a:a1:e2:68:fb:08:6a:35:92:3a:c0: 92:09:86:bd:78:d5:12:53:a7:17:fa:29:71:88:40:35:db:52: be:49:88:01:bc:91:bb:5e:43:be:6f:c4:c0:80:8c:7e:e2:e7: 8a:9b:7c:8b:d1:7e:9e:02:38:8f:e2:dd:67:ea:dd:10:be:ad: 78:90:cb:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbjOu01fJf4XjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk ZDZjZDM4N2YtYzA3NC00MDNjLTk0YTUtOTg3ZTA4OWYwYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3RdSj9geOcODoTfmrMxEeW8FDbE5UqDf1xo aq9rl+ZDum2oyaUiIBVd0+oD/Ssbz3edPglXpeOE+fpkqozokB+83KjJxrKrazMV DYeURKtuvXkLTY3Knfp0yL6ZWH0y5dNDXlLO6sB3FmU5h4Tgts/zzAwkWUJriEOf 5tVhW/phW2jUTRC6sesLkj5b8ZxH2ry3OFbChZVmpvSQlAvDmv62FYtZBPG4Ssg4 MOmRyaM0Ixeake1q1nGCFRfMqKwAPhFEF+zjeEaPrFN6CvkJyde9gV+IAdT8bebg E90jClDFzSILYQDg+qQLRpwYnLZWEO3yRLziU5S8Njpvp5s62QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5di9lfXRL7cRA/6q+6PXz2quHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTc1YjJlMTctZjE1Yi0z ZWRhLWFhNmYtNDBkNDM3ZjcxZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSHV3KsM1w7/nTMPtkebTuSy3LtZrV66BOQil0pEPjtySBeDpSqpQX2 4WwoEt0V0wr7czaIww4fepwDyyXpo666gGC2DlXhIPkTK90aE9YQqTGJfnmedDfE zuP3Jq8E7Qkv8WaG8OTLdkW+3dHvJOBIwkIgqgr9dzEu0c83j3VpOpkf8DP/zcW3 fFGBii18Bsd7WrJYI8j+NU2416Iji9DqMn/pkyP74APYKeoAjJ4hdw2h9hO93jax Z7gKoeJo+whqNZI6wJIJhr141RJTpxf6KXGIQDXbUr5JiAG8kbteQ75vxMCAjH7i 54qbfIvRfp4COI/i3Wfq3RC+rXiQyxU= -----END CERTIFICATE-----Generated at Mon Oct 26 23:33:14 2026 by rpki-client