$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2fb8810-f23c-3095-9d80-83b3bc7c2d56.roa File: d2fb8810-f23c-3095-9d80-83b3bc7c2d56.roa (raw, json) Hash identifier: PGIRm9N0RIrrdXlb5xdihLB5+WkhlJW46aMx/LOABrk= Subject key identifier: 8F:F8:A9:5C:5F:B5:14:81:79:FD:92:F6:B7:FB:15:54:2B:31:2A:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5AF77D112F00F088BA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2fb8810-f23c-3095-9d80-83b3bc7c2d56.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.222.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5a:f7:7d:11:2f:00:f0:88:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=63d8a5a3-8277-41e2-b666-7ee47eeb28ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:d6:cb:79:bf:f9:bc:69:79:69:7e:cf:a6: e9:e4:70:57:0e:e7:6e:8a:c4:7e:09:18:07:fb:d0: 60:0e:6a:24:c7:ad:27:bb:da:01:47:2e:dc:d5:61: 52:ae:60:28:a0:a5:ad:75:54:44:2f:b1:e7:ad:c5: 7b:99:2a:d8:1c:ee:cc:99:75:00:72:89:15:4a:87: b4:c0:61:00:45:1f:95:3c:46:6a:65:88:10:a9:ab: 8e:94:9f:6f:71:cc:67:6f:08:14:c8:ef:94:97:65: 92:2b:31:6a:69:88:5d:bc:ee:bf:73:cc:fa:9d:24: 6c:8e:b0:31:10:5d:b6:06:a0:30:2b:5e:e9:3f:76: c6:e2:2d:db:eb:b6:52:67:74:2b:bd:b1:b1:17:67: e0:fc:0c:72:13:96:8f:d2:7d:e8:f4:d3:7b:f7:1f: de:82:08:51:c9:74:c4:1f:d2:23:f7:86:1a:7e:55: 02:18:c6:27:18:56:6d:66:8f:58:65:91:64:24:9d: b4:7b:5c:6a:04:dc:3e:53:a6:8e:31:2b:c0:6c:19: 66:c5:f9:13:97:ed:95:c1:39:b7:e4:3f:a4:d2:79: 7a:fb:00:08:24:75:d6:38:fc:89:7c:65:7e:45:f7: ca:60:33:6a:7f:5d:fa:50:d9:7b:78:79:1e:07:63: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F8:A9:5C:5F:B5:14:81:79:FD:92:F6:B7:FB:15:54:2B:31:2A:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2fb8810-f23c-3095-9d80-83b3bc7c2d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:85:ce:81:93:d5:5d:a9:e0:d9:7d:be:3f:8f:a9:36:f5:34: eb:c5:83:40:81:35:fa:64:8d:0a:b4:0c:a0:c7:15:1b:0f:79: 70:e4:19:c6:25:c2:c0:e7:7f:68:95:2a:0f:f2:a8:bc:87:d8: 31:bf:b0:54:56:3f:19:69:cf:35:39:37:a5:fc:63:39:04:ef: e6:48:ce:9b:72:34:bc:60:c7:d0:f5:06:a5:a5:43:24:14:b2: 8d:77:7f:50:c2:d7:cb:ed:7a:d0:a6:c4:d4:0a:09:2a:28:f0: f3:8d:48:4f:00:14:c6:62:24:b8:a2:60:05:85:05:73:dc:2b: 1e:85:0a:43:2b:8d:0c:5a:ab:aa:c7:33:c6:09:c3:66:25:76: e1:a8:9e:30:83:2a:9d:16:b3:95:1c:d5:46:4d:14:b9:08:28: 04:a8:17:ea:12:e4:14:1d:16:05:0e:b7:86:9f:d5:4d:84:8b: d9:79:90:bf:3b:ad:0e:49:26:1f:ef:1d:29:04:70:26:0b:bd: 25:36:c2:fe:ff:12:da:dd:6c:27:3a:a6:ed:91:3f:cf:8b:71: da:48:5b:7e:0e:7e:c3:ac:64:aa:a5:56:ff:da:24:48:69:86: a6:66:fc:6d:92:78:e2:fc:f4:40:5f:d8:4c:01:1b:4e:25:30: 6f:1a:89:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVr3fREvAPCIuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NjNkOGE1YTMtODI3Ny00MWUyLWI2NjYtN2VlNDdlZWIyOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOzWy3m/+bxpeWl+z6bp5HBXDuduisR+CRgH +9BgDmokx60nu9oBRy7c1WFSrmAooKWtdVREL7HnrcV7mSrYHO7MmXUAcokVSoe0 wGEARR+VPEZqZYgQqauOlJ9vccxnbwgUyO+Ul2WSKzFqaYhdvO6/c8z6nSRsjrAx EF22BqAwK17pP3bG4i3b67ZSZ3QrvbGxF2fg/AxyE5aP0n3o9NN79x/egghRyXTE H9Ij94YaflUCGMYnGFZtZo9YZZFkJJ20e1xqBNw+U6aOMSvAbBlmxfkTl+2VwTm3 5D+k0nl6+wAIJHXWOPyJfGV+RffKYDNqf136UNl7eHkeB2PeQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/4qVxftRSBef2S9rf7FVQrMSr3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDJmYjg4MTAtZjIzYy0z MDk1LTlkODAtODNiM2JjN2MyZDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF97sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyFzoGT1V2p4Nl9vj+PqTb1NOvFg0CBNfpkjQq0DKDHFRsPeXDkGcYl wsDnf2iVKg/yqLyH2DG/sFRWPxlpzzU5N6X8YzkE7+ZIzptyNLxgx9D1BqWlQyQU so13f1DC18vtetCmxNQKCSoo8PONSE8AFMZiJLiiYAWFBXPcKx6FCkMrjQxaq6rH M8YJw2YlduGonjCDKp0Ws5Uc1UZNFLkIKASoF+oS5BQdFgUOt4af1U2Ei9l5kL87 rQ5JJh/vHSkEcCYLvSU2wv7/EtrdbCc6pu2RP8+LcdpIW34OfsOsZKqlVv/aJEhp hqZm/G2SeOL89EBf2EwBG04lMG8aiQw= -----END CERTIFICATE-----Generated at Sun Oct 25 20:58:56 2026 by rpki-client