$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a597263b-dc11-3506-80e2-e26124db9b91.roa File: a597263b-dc11-3506-80e2-e26124db9b91.roa (raw, json) Hash identifier: eAv3BluCpYq2KZD1Y5SZS+izjQhFCCc7OXtbqP9yI1k= Subject key identifier: DC:81:C6:97:1D:C3:CC:DD:51:5E:16:D3:1C:D0:92:E5:8A:BE:6F:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D587B1439DEF7D07C4E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a597263b-dc11-3506-80e2-e26124db9b91.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.220.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:58:7b:14:39:de:f7:d0:7c:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=594034c5-dd80-4652-81b0-4bce3827eeda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:5c:bc:d6:85:48:34:cf:9a:40:73:b8:97: c1:46:82:f6:56:94:d7:f6:44:fc:ad:b9:aa:c9:16: 21:d4:ed:d8:4e:6a:70:5f:19:f9:65:32:13:9d:a5: 2a:2c:b2:93:11:ea:16:2e:23:0e:28:51:78:9c:8a: 94:43:86:12:55:3f:d1:43:47:39:81:d7:bc:95:b4: 26:96:63:d2:21:d0:00:fa:3a:15:93:0e:51:74:76: 68:56:77:a9:96:b0:57:44:ca:a1:a7:52:22:f9:5a: 6d:77:cc:ec:ea:17:02:76:15:d6:50:5c:69:c1:92: 5d:be:f6:9f:21:ea:d0:1b:64:cc:15:a0:b2:2b:29: 63:dd:c0:1d:2b:55:a0:7f:83:c9:c9:f6:a1:e1:db: 3f:16:42:ca:ef:1f:78:d3:d2:30:a7:72:2f:4d:3c: ae:16:56:d4:f1:0e:fc:ae:35:6d:24:07:39:73:04: 8c:71:9a:d6:44:e7:73:73:64:1a:d5:a3:57:a2:13: 12:c2:52:b9:89:3e:4a:a4:c0:df:b2:f3:13:69:a5: 7a:87:35:eb:4d:eb:a6:8d:3c:08:6a:56:1a:92:05: 3e:2e:4b:8e:ed:18:b9:65:9f:90:98:47:ee:bf:98: 78:e3:e0:e4:35:df:77:06:9e:60:ca:78:1e:6b:db: a0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:81:C6:97:1D:C3:CC:DD:51:5E:16:D3:1C:D0:92:E5:8A:BE:6F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a597263b-dc11-3506-80e2-e26124db9b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e3:80:71:b3:93:a8:e2:63:5b:6c:8d:ed:97:14:e7:2c:7b: 62:90:47:34:03:d3:9b:c2:e7:89:21:9a:a1:1c:66:2b:de:17: dc:26:ff:eb:09:4f:78:e3:97:3d:db:be:8e:22:25:54:5b:e8: fa:3a:2a:88:a6:ca:b2:77:bf:bd:26:11:09:e1:20:9a:5b:a7: 00:0f:1a:b7:87:56:e8:97:c6:7a:e0:87:48:3c:1e:d6:19:ba: 2d:a7:94:f5:91:16:46:94:b0:41:b5:37:1d:dc:71:e3:df:c6: d6:c0:48:9b:fe:fe:19:a1:24:a1:d6:bc:8a:27:62:29:1a:95: ab:fd:6a:0a:d4:1a:b7:9b:e3:d4:f5:bf:ae:7e:f3:99:3c:92: f9:9a:24:c8:14:08:98:1a:f1:7d:8d:34:4c:1b:dc:32:93:c7: bb:76:26:8d:2e:64:68:03:e1:54:9e:d4:39:62:44:ef:8f:34: 1c:f0:94:21:5d:17:78:59:46:e6:d0:3e:e1:43:06:3e:19:56: bb:7d:cc:a6:af:35:25:4b:d7:00:c3:a9:ef:b0:b7:3e:af:67: de:75:c9:a7:a8:bb:09:fa:fc:05:8d:43:2f:b8:b0:1f:6a:d0: f8:7a:9c:bd:b3:89:4d:0e:d4:a3:d9:a8:78:5c:3d:24:06:3f: e3:64:03:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVh7FDne99B8TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NTk0MDM0YzUtZGQ4MC00NjUyLTgxYjAtNGJjZTM4MjdlZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRRcvNaFSDTPmkBzuJfBRoL2VpTX9kT8rbmq yRYh1O3YTmpwXxn5ZTITnaUqLLKTEeoWLiMOKFF4nIqUQ4YSVT/RQ0c5gde8lbQm lmPSIdAA+joVkw5RdHZoVneplrBXRMqhp1Ii+Vptd8zs6hcCdhXWUFxpwZJdvvaf IerQG2TMFaCyKylj3cAdK1Wgf4PJyfah4ds/FkLK7x9409Iwp3IvTTyuFlbU8Q78 rjVtJAc5cwSMcZrWROdzc2Qa1aNXohMSwlK5iT5KpMDfsvMTaaV6hzXrTeumjTwI alYakgU+LkuO7Ri5ZZ+QmEfuv5h44+DkNd93Bp5gyngea9ugcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyBxpcdw8zdUV4W0xzQkuWKvm8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTU5NzI2M2ItZGMxMS0z NTA2LTgwZTItZTI2MTI0ZGI5YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9yiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILjgHGzk6jiY1tsje2XFOcse2KQRzQD05vC54khmqEcZiveF9wm/+sJ T3jjlz3bvo4iJVRb6Po6KoimyrJ3v70mEQnhIJpbpwAPGreHVuiXxnrgh0g8HtYZ ui2nlPWRFkaUsEG1Nx3ccePfxtbASJv+/hmhJKHWvIonYikalav9agrUGreb49T1 v65+85k8kvmaJMgUCJga8X2NNEwb3DKTx7t2Jo0uZGgD4VSe1DliRO+PNBzwlCFd F3hZRubQPuFDBj4ZVrt9zKavNSVL1wDDqe+wtz6vZ951yaeouwn6/AWNQy+4sB9q 0Ph6nL2ziU0O1KPZqHhcPSQGP+NkA7k= -----END CERTIFICATE-----Generated at Wed Oct 21 05:04:54 2026 by rpki-client