$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa File: 9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa (raw, json) Hash identifier: AXuOKDZLFzZlUm+VT30+oqh6YCDXM6rG2amHH0O9a+Y= Subject key identifier: 10:36:94:09:7C:3C:48:BC:0A:AD:20:AF:0C:17:00:5D:E4:EB:6A:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5CE2A2ECBDE9B2BA6D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.223.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5c:e2:a2:ec:bd:e9:b2:ba:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=d5c55366-cc33-4860-8844-5e57fccd63db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:e9:89:d9:10:97:d2:cb:95:52:cf:0f:c8: 9e:55:66:9e:8b:c1:24:01:c0:99:87:55:91:2f:a4: 2d:f7:97:93:79:98:71:30:e1:20:a7:c4:7b:44:a9: da:e1:17:39:3e:d8:06:69:53:66:7d:18:ea:9d:aa: 48:92:11:40:86:d5:1f:d1:4d:29:ef:54:9b:ff:38: b9:c4:d9:80:ad:e0:9c:ec:f4:28:0e:22:16:5b:86: 79:e2:92:ba:e0:ae:01:e7:df:49:99:8e:d8:3f:0e: 10:d2:5f:60:26:bd:61:28:fd:51:aa:f6:f4:ed:80: fb:7d:58:83:bf:2f:4f:3f:c2:4e:8d:d6:46:97:5c: b4:f3:75:c9:89:6c:ce:83:c3:42:6a:55:f0:45:ac: 1d:0c:5c:6f:7f:19:96:97:d7:a1:ab:29:e4:c4:30: 4d:d7:93:43:41:ad:0c:cd:da:b2:73:22:44:80:d2: d4:4f:93:bf:90:45:42:85:1f:64:a3:fb:5e:03:d5: af:95:c2:8e:17:ec:06:0b:87:f8:ae:14:66:41:37: 71:76:6f:87:09:40:3a:02:e5:43:f7:e7:38:13:17: 86:f3:52:60:99:bb:d0:d9:7f:74:5e:c7:ff:91:07: 43:d7:d7:f0:0c:e4:b1:c9:c1:48:35:40:f4:4c:27: 0a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:36:94:09:7C:3C:48:BC:0A:AD:20:AF:0C:17:00:5D:E4:EB:6A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c3ac85b-16e3-3e8b-8e8e-152bac44117e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:31:55:f0:e6:a3:30:e7:c5:a0:82:85:c6:14:6a:57:cb:e1: e1:8b:cb:33:9b:de:35:8a:cc:1b:ed:bc:22:18:6f:2c:16:51: 17:73:3c:fa:a1:d7:88:10:fc:b9:b5:d6:85:76:eb:a3:cf:58: 5c:b9:3b:d2:fe:df:e6:27:4c:64:28:87:f9:2e:e3:1d:ff:cb: b6:44:92:0d:eb:fe:14:6e:42:ce:1c:50:1a:24:8a:5d:4d:e2: 3a:0b:17:da:f0:5b:89:28:93:55:8f:da:da:75:7c:6f:00:71: 29:59:9d:1c:3c:42:a3:1b:ac:0c:81:44:16:26:f5:a5:87:f7: e3:1a:a4:73:f9:50:da:78:1b:3a:22:1d:61:72:f4:79:65:e4: 4b:37:0b:39:63:73:30:28:3c:46:ff:82:5f:af:f4:45:6f:00: 25:e9:51:c2:82:c2:90:85:0b:94:d7:ff:82:ff:05:1e:7a:2b: 80:c9:7e:54:6a:2b:33:db:2d:70:f1:6e:4d:01:a3:58:3f:9e: ba:22:4f:6a:b5:8d:c0:f0:b1:ee:f8:08:c2:5e:b0:5c:97:11: 6c:d7:5a:d6:5c:d2:77:e8:28:49:a7:12:42:6c:31:6e:68:81: c5:34:3b:ea:a6:15:50:1e:46:33:d3:93:d2:17:83:26:2d:14: 0d:1e:21:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVziouy96bK6bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDVjNTUzNjYtY2MzMy00ODYwLTg4NDQtNWU1N2ZjY2Q2M2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3jpidkQl9LLlVLPD8ieVWaei8EkAcCZh1WR L6Qt95eTeZhxMOEgp8R7RKna4Rc5PtgGaVNmfRjqnapIkhFAhtUf0U0p71Sb/zi5 xNmAreCc7PQoDiIWW4Z54pK64K4B599JmY7YPw4Q0l9gJr1hKP1Rqvb07YD7fViD vy9PP8JOjdZGl1y083XJiWzOg8NCalXwRawdDFxvfxmWl9ehqynkxDBN15NDQa0M zdqycyJEgNLUT5O/kEVChR9ko/teA9WvlcKOF+wGC4f4rhRmQTdxdm+HCUA6AuVD 9+c4ExeG81JgmbvQ2X90Xsf/kQdD19fwDOSxycFINUD0TCcK9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA2lAl8PEi8Cq0grwwXAF3k62qiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMzYWM4NWItMTZlMy0z ZThiLThlOGUtMTUyYmFjNDQxMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4xVfDmozDnxaCChcYUalfL4eGLyzOb3jWKzBvtvCIYbywWURdzPPqh 14gQ/Lm11oV266PPWFy5O9L+3+YnTGQoh/ku4x3/y7ZEkg3r/hRuQs4cUBokil1N 4joLF9rwW4kok1WP2tp1fG8AcSlZnRw8QqMbrAyBRBYm9aWH9+MapHP5UNp4Gzoi HWFy9Hll5Es3CzljczAoPEb/gl+v9EVvACXpUcKCwpCFC5TX/4L/BR56K4DJflRq KzPbLXDxbk0Bo1g/nroiT2q1jcDwse74CMJesFyXEWzXWtZc0nfoKEmnEkJsMW5o gcU0O+qmFVAeRjPTk9IXgyYtFA0eIbE= -----END CERTIFICATE-----Generated at Wed Oct 21 07:13:19 2026 by rpki-client