$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e7f17d0-692b-3b03-bf62-e4412a8f6726.roa File: 9e7f17d0-692b-3b03-bf62-e4412a8f6726.roa (raw, json) Hash identifier: XcCyJZWq0JArC9mNPA/yroCbLRJXDPkJP4x+NIGMvpo= Subject key identifier: CA:A9:70:7A:68:0A:20:FC:27:81:7C:40:DE:A2:90:3B:97:63:E9:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D59E7E34469B6B51E4CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e7f17d0-692b-3b03-bf62-e4412a8f6726.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 9498 IP address blocks: 23.221.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:59:e7:e3:44:69:b6:b5:1e:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=fe104252-8aab-4c39-8f4f-dc9a24f17dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:fa:70:9f:c4:98:22:45:ef:16:ef:b0:51: 52:56:21:e0:56:39:53:d0:c7:79:a6:1d:9b:65:bd: 9e:06:4a:1e:e2:c0:0c:58:4e:93:dc:a8:a0:90:dc: 68:b4:b5:fe:16:c4:f5:c0:76:e9:4f:da:4a:b1:1c: fa:17:06:fc:63:0f:e7:49:9a:50:4f:e0:bb:9b:a9: 7f:ba:41:cd:d6:d6:3a:2b:a4:4d:9e:c8:bf:71:58: 2d:43:5c:57:75:14:63:3f:88:2c:fe:5f:6e:42:39: ed:9d:2a:5a:82:97:83:fb:e4:72:f8:83:80:09:e9: 11:91:9c:40:76:d6:2e:70:e4:1f:ab:c9:55:2e:d3: 64:45:2c:31:31:da:fa:40:e2:19:25:59:4e:e4:7a: 9d:c3:fe:6f:2a:aa:dc:9e:26:2a:38:f9:5b:b7:4a: 75:ce:cf:14:06:92:7c:65:88:bc:91:c8:9d:d4:82: a3:a2:b1:4d:38:fd:eb:96:cf:9c:fe:07:14:0e:36: 25:6e:70:ef:f6:c6:d6:98:de:96:43:06:f5:dd:1f: 6a:f6:85:4d:95:48:3d:c4:fd:c8:1f:de:37:e4:c9: 40:59:36:97:5f:9a:88:fb:83:24:fc:03:66:5c:67: c0:19:91:38:9c:43:1e:56:e4:91:29:d1:bf:e6:3c: a2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A9:70:7A:68:0A:20:FC:27:81:7C:40:DE:A2:90:3B:97:63:E9:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e7f17d0-692b-3b03-bf62-e4412a8f6726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:dd:96:c7:04:07:ec:35:c3:35:31:0d:28:9e:e4:cb:59:91: 36:1e:4f:75:56:a4:60:5b:ab:ee:88:de:a2:b4:4f:8c:83:26: 0d:16:d5:41:ee:68:8b:a5:11:7c:d6:28:2f:98:2d:1c:07:aa: 1a:68:f5:c4:a7:c0:d2:b3:7c:d0:13:bf:03:0f:a6:22:e0:91: 97:6b:c7:e1:fc:50:b2:7a:bd:6c:9a:3f:71:55:a1:71:c5:52: 6c:6e:32:1a:61:67:07:4a:39:8c:8e:91:ee:2d:45:49:c0:69: fb:2a:cc:57:df:09:b9:61:45:af:1d:e3:9f:dd:5e:7f:54:83: f5:93:f7:d1:11:a7:e7:f7:59:aa:77:9b:d1:3c:90:2d:04:79: 24:81:58:fc:a1:e5:bc:fa:9d:df:a6:d5:29:5e:63:9c:a5:78: dc:aa:6b:0a:21:3c:82:34:97:5f:8b:89:e2:04:6a:36:c3:3f: d6:20:9e:13:7b:19:42:e2:30:e1:c3:d2:e8:3f:21:c8:f3:83: 7f:99:a9:c6:a0:ca:47:0c:58:c1:0b:83:97:fb:8c:c0:6a:3a: ca:39:43:9b:d2:fb:79:8b:59:aa:08:e2:24:f5:df:fc:43:c8: 3c:e1:ca:80:d5:7e:92:98:62:ea:02:92:24:90:c3:4d:a8:8d: 6d:fa:5e:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVnn40RptrUeTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZmUxMDQyNTItOGFhYi00YzM5LThmNGYtZGM5YTI0ZjE3ZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOH6cJ/EmCJF7xbvsFFSViHgVjlT0Md5ph2b Zb2eBkoe4sAMWE6T3KigkNxotLX+FsT1wHbpT9pKsRz6Fwb8Yw/nSZpQT+C7m6l/ ukHN1tY6K6RNnsi/cVgtQ1xXdRRjP4gs/l9uQjntnSpagpeD++Ry+IOACekRkZxA dtYucOQfq8lVLtNkRSwxMdr6QOIZJVlO5Hqdw/5vKqrcniYqOPlbt0p1zs8UBpJ8 ZYi8kcid1IKjorFNOP3rls+c/gcUDjYlbnDv9sbWmN6WQwb13R9q9oVNlUg9xP3I H9435MlAWTaXX5qI+4Mk/ANmXGfAGZE4nEMeVuSRKdG/5jyiEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqpcHpoCiD8J4F8QN6ikDuXY+kzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWU3ZjE3ZDAtNjkyYi0z YjAzLWJmNjItZTQ0MTJhOGY2NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF93uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTdlscEB+w1wzUxDSie5MtZkTYeT3VWpGBbq+6I3qK0T4yDJg0W1UHu aIulEXzWKC+YLRwHqhpo9cSnwNKzfNATvwMPpiLgkZdrx+H8ULJ6vWyaP3FVoXHF UmxuMhphZwdKOYyOke4tRUnAafsqzFffCblhRa8d45/dXn9Ug/WT99ERp+f3Wap3 m9E8kC0EeSSBWPyh5bz6nd+m1SleY5yleNyqawohPII0l1+LieIEajbDP9YgnhN7 GULiMOHD0ug/Icjzg3+ZqcagykcMWMELg5f7jMBqOso5Q5vS+3mLWaoI4iT13/xD yDzhyoDVfpKYYuoCkiSQw02ojW36Xis= -----END CERTIFICATE-----Generated at Wed Oct 28 00:50:05 2026 by rpki-client