$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdb70dcb-69ee-3590-be5a-5bcff500738f.roa File: cdb70dcb-69ee-3590-be5a-5bcff500738f.roa (raw, json) Hash identifier: 2rtYja6/NY0dRDTu2QyQk5b+ERcZ+ycSVo94lPcN3ko= Subject key identifier: DD:88:7F:08:F3:0E:78:30:9D:C0:34:F6:AF:BF:99:9E:AD:DC:B2:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F5768031172CE5C96DF47DA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdb70dcb-69ee-3590-be5a-5bcff500738f.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.197.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:03:11:72:ce:5c:96:df:47:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=8dc55a4a-aa13-416f-917c-b0b70e932672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:cc:5c:29:d8:85:74:14:54:53:67:25:7b: 7c:f4:78:1c:f7:d4:bb:f9:d1:f9:7c:0f:97:47:54: 32:89:b1:32:d2:15:cb:69:14:8b:4d:66:da:68:d7: 3e:83:9b:6c:e8:8c:72:2b:0d:8b:e5:81:85:c0:93: 14:bc:41:0a:59:f9:75:a4:ca:96:ad:77:10:fc:c6: 52:1c:bb:35:95:d8:76:f0:37:5b:8b:f2:48:b1:8b: 58:e9:64:f6:62:a7:3a:1c:f6:62:84:17:46:aa:12: c1:32:7b:18:83:67:4c:ab:cc:5e:91:a1:6d:e3:e3: e2:7a:72:ad:53:9b:84:db:1b:24:71:11:f0:dc:27: 3e:8b:73:cc:57:4c:c8:8f:eb:7c:5d:cb:b5:60:09: 74:3e:06:b5:19:c5:16:fd:17:18:fd:a1:fc:58:60: 48:d7:af:26:43:34:f5:22:04:ee:8a:5c:53:95:b4: 56:09:36:cc:51:9f:93:18:88:bb:a5:17:1a:dc:99: 05:40:07:69:11:46:5e:35:9c:13:d4:45:fe:a1:fb: 9a:bf:94:fc:4d:ac:2e:c5:08:09:9e:68:4f:05:40: 78:0e:0a:c0:38:f8:62:23:0d:49:c9:77:18:df:8e: e1:19:cc:f8:a4:d7:0d:27:db:2c:68:84:ba:b5:f2: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:88:7F:08:F3:0E:78:30:9D:C0:34:F6:AF:BF:99:9E:AD:DC:B2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdb70dcb-69ee-3590-be5a-5bcff500738f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d4:6e:34:0f:f8:e5:a1:08:49:8b:5a:a9:d0:ec:af:62:1f: f3:88:21:f8:50:cd:af:d5:b6:7f:72:2e:6b:1e:f4:a5:f9:3c: 35:67:fb:5f:7c:6b:8d:ce:82:12:4b:79:69:89:4f:e2:43:d4: 67:2d:d5:7f:31:d0:a0:ba:aa:cd:41:bf:23:62:21:21:fc:a5: c8:8d:66:2f:77:8a:de:18:a6:f4:b1:87:b2:5b:a0:1d:0c:20: b1:61:e3:f6:be:02:84:b2:3d:01:9e:8a:84:6a:a4:09:c5:de: f0:d5:41:37:6c:f3:ef:b4:89:bf:17:1b:2a:d7:14:37:b4:fb: be:34:6a:0b:a5:73:cf:d5:fa:b4:e7:db:01:f6:9b:39:73:f8: fa:5e:1b:11:ae:66:88:02:60:c4:39:01:64:d5:e8:36:87:88: c6:e8:e8:2d:72:8d:d9:35:61:62:f9:09:15:48:2d:d4:1c:1e: c3:89:3a:59:51:05:60:fa:97:f1:1e:16:00:45:7d:f9:8d:7b: 73:eb:70:fa:3b:e1:86:fe:c5:14:d4:53:18:ab:55:cf:fc:64: 52:c0:1f:8d:6c:04:f9:87:af:da:e4:ff:a4:39:c5:95:28:94: 32:67:a6:18:22:dd:ca:ba:a5:7d:0f:9a:d5:6f:1a:cd:53:5a: 6e:d7:90:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAMRcs5clt9H2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk OGRjNTVhNGEtYWExMy00MTZmLTkxN2MtYjBiNzBlOTMyNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/fMXCnYhXQUVFNnJXt89Hgc99S7+dH5fA+X R1QyibEy0hXLaRSLTWbaaNc+g5ts6IxyKw2L5YGFwJMUvEEKWfl1pMqWrXcQ/MZS HLs1ldh28Ddbi/JIsYtY6WT2Yqc6HPZihBdGqhLBMnsYg2dMq8xekaFt4+PienKt U5uE2xskcRHw3Cc+i3PMV0zIj+t8Xcu1YAl0Pga1GcUW/RcY/aH8WGBI168mQzT1 IgTuilxTlbRWCTbMUZ+TGIi7pRca3JkFQAdpEUZeNZwT1EX+ofuav5T8TawuxQgJ nmhPBUB4DgrAOPhiIw1JyXcY347hGcz4pNcNJ9ssaIS6tfLWsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2IfwjzDngwncA09q+/mZ6t3LJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RiNzBkY2ItNjllZS0z NTkwLWJlNWEtNWJjZmY1MDA3MzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8WsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvUbjQP+OWhCEmLWqnQ7K9iH/OIIfhQza/Vtn9yLmse9KX5PDVn+198 a43OghJLeWmJT+JD1Gct1X8x0KC6qs1BvyNiISH8pciNZi93it4YpvSxh7JboB0M ILFh4/a+AoSyPQGeioRqpAnF3vDVQTds8++0ib8XGyrXFDe0+740agulc8/V+rTn 2wH2mzlz+PpeGxGuZogCYMQ5AWTV6DaHiMbo6C1yjdk1YWL5CRVILdQcHsOJOllR BWD6l/EeFgBFffmNe3PrcPo74Yb+xRTUUxirVc/8ZFLAH41sBPmHr9rk/6Q5xZUo lDJnphgi3cq6pX0PmtVvGs1TWm7XkAE= -----END CERTIFICATE-----Generated at Tue Oct 6 23:10:35 2026 by rpki-client