$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7017d65-aa7c-3b4d-8fe9-a16abdac4672.roa File: c7017d65-aa7c-3b4d-8fe9-a16abdac4672.roa (raw, json) Hash identifier: OhuElJ207oSMrezFWirSggktBsJmtOveOdrwNSGdeG4= Subject key identifier: 30:7A:7B:0A:8A:0C:AE:A5:DA:55:AD:12:6C:4B:6F:78:EC:0E:84:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D58E5D3374E954AF01DF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7017d65-aa7c-3b4d-8fe9-a16abdac4672.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.220.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:58:e5:d3:37:4e:95:4a:f0:1d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=08b72215-0c9b-453c-89c0-6990f7094970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f0:65:b4:88:70:37:93:ad:bc:86:7e:7b:59: 9d:9d:2c:16:c4:71:f6:e0:ba:a8:c3:79:ed:06:9b: e0:57:90:e0:7b:d4:d2:c4:b8:dc:4e:2d:31:ab:c5: 3e:f1:b5:ad:ff:1e:16:86:33:b7:80:64:ce:f0:5d: 1a:75:a2:0d:df:0b:b9:3c:ac:f8:e5:cd:3a:c9:aa: b0:06:db:c5:bc:68:a1:2e:6b:43:bf:eb:de:c9:85: ef:7e:23:15:37:e4:4b:b6:c9:55:df:d5:dd:04:71: 24:21:f1:f0:b1:41:62:26:b3:8c:fd:bf:99:5e:0f: dd:0c:2b:e3:61:5e:e0:be:a3:37:3d:38:c1:dc:7c: ef:74:e1:70:e0:95:44:f6:38:7d:ea:27:fd:cf:98: 90:46:2a:54:8b:a5:7d:dc:a6:63:3f:43:53:e6:57: 1b:da:20:b3:90:9f:10:14:4c:a0:08:5d:11:3b:17: ab:7f:b3:cb:0e:5e:95:aa:07:0e:ed:a7:2b:4b:b4: 5b:25:bd:08:da:4c:18:9e:71:38:32:d7:c3:aa:69: d6:09:3f:c0:10:fa:3a:ff:44:55:9e:bd:30:4c:cb: 22:47:d4:74:4e:9a:09:f0:1e:bb:fb:10:24:3c:b9: 8d:7b:8d:85:4d:46:94:44:90:cf:96:e6:26:93:b2: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7A:7B:0A:8A:0C:AE:A5:DA:55:AD:12:6C:4B:6F:78:EC:0E:84:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7017d65-aa7c-3b4d-8fe9-a16abdac4672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a7:ba:56:29:5d:c7:7e:9c:4d:47:16:77:88:8e:31:20:ed: 27:fa:b4:6c:e0:ad:50:41:fb:1b:29:c7:82:a7:15:dd:d4:5b: 41:85:06:5a:4a:b3:18:06:31:e8:cc:f2:ba:e8:12:3f:02:81: 4e:f4:6e:9a:fd:c1:c1:f7:cc:6f:83:6e:c5:c2:65:2a:78:8a: 8b:92:e7:9c:43:60:c2:45:f4:70:ca:7d:94:fc:08:e6:a0:97: 43:0b:98:49:de:57:b9:62:3e:c8:6b:5b:c5:4a:4c:16:a3:8b: 64:03:4f:6f:4d:e8:a3:52:f6:db:d8:34:a9:40:f0:62:cc:32: 01:34:77:b1:b2:b5:5d:ff:72:82:13:c4:4c:f9:4c:56:cc:a7: 9b:67:d3:0b:28:7c:23:ab:c1:a7:06:39:f4:46:c2:b9:8e:96: f1:67:25:0e:38:32:6f:b9:ad:aa:c1:46:d2:ad:d5:0b:c8:ab: 7e:f4:29:f7:51:fd:7e:e1:5a:98:8c:56:4c:95:56:dc:f9:c4: be:87:ef:81:dc:66:cc:8f:82:3e:80:55:40:00:95:45:56:b2: 53:ad:7b:b1:2e:57:08:b3:2d:3c:c7:ff:43:70:29:b2:d6:53: fc:2b:06:9a:7d:bf:27:a8:a2:f0:bb:68:c7:58:41:4c:c5:fe: 2a:5e:ac:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVjl0zdOlUrwHfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MDhiNzIyMTUtMGM5Yi00NTNjLTg5YzAtNjk5MGY3MDk0OTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fBltIhwN5OtvIZ+e1mdnSwWxHH24Lqow3nt BpvgV5Dge9TSxLjcTi0xq8U+8bWt/x4WhjO3gGTO8F0adaIN3wu5PKz45c06yaqw BtvFvGihLmtDv+veyYXvfiMVN+RLtslV39XdBHEkIfHwsUFiJrOM/b+ZXg/dDCvj YV7gvqM3PTjB3HzvdOFw4JVE9jh96if9z5iQRipUi6V93KZjP0NT5lcb2iCzkJ8Q FEygCF0ROxerf7PLDl6VqgcO7acrS7RbJb0I2kwYnnE4MtfDqmnWCT/AEPo6/0RV nr0wTMsiR9R0TpoJ8B67+xAkPLmNe42FTUaURJDPluYmk7LmHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDB6ewqKDK6l2lWtEmxLb3jsDoR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzcwMTdkNjUtYWE3Yy0z YjRkLThmZTktYTE2YWJkYWM0NjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmnulYpXcd+nE1HFneIjjEg7Sf6tGzgrVBB+xspx4KnFd3UW0GFBlpK sxgGMejM8rroEj8CgU70bpr9wcH3zG+DbsXCZSp4iouS55xDYMJF9HDKfZT8COag l0MLmEneV7liPshrW8VKTBaji2QDT29N6KNS9tvYNKlA8GLMMgE0d7GytV3/coIT xEz5TFbMp5tn0wsofCOrwacGOfRGwrmOlvFnJQ44Mm+5rarBRtKt1QvIq370KfdR /X7hWpiMVkyVVtz5xL6H74HcZsyPgj6AVUAAlUVWslOte7EuVwizLTzH/0NwKbLW U/wrBpp9vyeoovC7aMdYQUzF/iperKY= -----END CERTIFICATE-----Generated at Sat Oct 24 09:56:10 2026 by rpki-client