$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d406cb8e-79f8-3d79-b0a1-68bacdc2bdd6.roa File: d406cb8e-79f8-3d79-b0a1-68bacdc2bdd6.roa (raw, json) Hash identifier: 7Eg3gx+ZgJd89nwB9IeVVOuAJWCweclsz4jEW6in44o= Subject key identifier: 27:94:CA:C5:3C:5A:FB:1F:4D:C2:80:5B:64:50:CA:D0:20:E7:B2:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F58CD54399AEE2AF072C07500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d406cb8e-79f8-3d79-b0a1-68bacdc2bdd6.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 16625 IP address blocks: 23.219.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:54:39:9a:ee:2a:f0:72:c0:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=e4bd344b-54ed-405c-8b71-d52c852fa1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:f5:4b:11:1a:94:a2:e2:f3:c4:73:df:89: 30:db:55:1c:d4:e5:fe:95:3b:4d:ff:2b:5d:f5:f5: 81:11:f9:57:72:f2:55:03:fc:99:7a:ca:e1:c6:a1: 03:eb:ba:92:a9:52:6d:8d:de:aa:da:aa:fa:a3:a7: ce:a9:75:1d:45:64:d8:48:76:ec:49:ee:79:42:cb: ec:d9:89:13:f4:f1:08:6a:41:47:70:cb:85:40:55: c5:ae:4c:d0:8c:82:41:5f:ad:d2:1f:5b:bc:43:4c: d4:31:b5:9a:85:55:a1:6f:52:dc:ab:51:52:00:10: fd:39:cc:ba:8c:3b:a4:b9:3e:cf:0a:4a:ba:2d:9b: f3:f9:fc:a7:90:b2:85:f7:c8:a0:7f:bb:26:e9:f5: 30:79:d6:cb:cb:d7:b5:ca:bb:5c:e7:32:59:a0:6e: 15:bc:20:fc:4a:a5:13:8d:cc:01:77:9e:d6:ba:1a: 02:92:04:c1:bb:97:d5:7e:89:73:57:8e:26:84:86: b1:88:16:72:45:6a:d4:0c:93:db:77:f9:92:29:0f: 10:1b:75:67:70:b5:30:3a:24:1f:1b:ad:13:d5:b0: 85:3a:67:8e:d5:14:9d:e8:e6:99:85:e2:d8:13:e2: c9:c2:68:af:2d:6c:e2:4a:53:57:a7:63:fb:b3:41: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:94:CA:C5:3C:5A:FB:1F:4D:C2:80:5B:64:50:CA:D0:20:E7:B2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d406cb8e-79f8-3d79-b0a1-68bacdc2bdd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5e:ba:28:78:37:ff:95:fd:2e:51:47:c5:f0:a7:d4:e9:f0: 92:b0:6f:39:d6:62:87:b0:4c:44:e8:43:cf:13:24:9d:25:5f: e7:db:f6:db:2f:5c:0b:dc:44:fb:ac:63:8d:d8:c8:4c:6c:7a: 3c:2a:f1:43:3c:f3:51:72:2f:56:43:1d:fc:d2:e4:77:f5:91: e7:54:49:b7:31:92:b1:ca:74:cb:99:5e:f1:e4:29:23:ad:b3: 8f:1a:ff:dc:44:51:5a:41:da:f9:bf:78:bb:8e:a0:c0:1e:a0: 92:93:5a:fb:61:75:f3:1e:1f:44:e8:5b:f0:e1:0f:55:65:10: 58:08:ce:95:2e:74:4c:d8:92:f8:37:75:a1:90:bd:89:98:19: a3:fe:a6:8a:0e:2a:c7:d5:3d:98:ba:ae:d2:f4:7e:ba:5e:4a: 1b:8f:4a:56:8b:4c:9b:30:b1:61:74:b4:b5:ad:18:30:ff:01: 70:96:1e:c9:98:9c:bb:1a:f2:97:78:d6:45:35:b8:50:6c:90: 43:6e:61:cd:ec:14:32:d6:59:fc:90:8e:d6:05:d3:af:b4:e3: 26:3b:db:76:a4:67:00:e6:74:bf:da:78:6b:12:0d:73:52:4d: 4b:e6:fd:c7:1e:db:8d:79:76:a4:e1:ba:00:97:39:d3:c8:32: da:cb:97:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVQ5mu4q8HLAdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ZTRiZDM0NGItNTRlZC00MDVjLThiNzEtZDUyYzg1MmZhMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3L1SxEalKLi88Rz34kw21Uc1OX+lTtN/ytd 9fWBEflXcvJVA/yZesrhxqED67qSqVJtjd6q2qr6o6fOqXUdRWTYSHbsSe55Qsvs 2YkT9PEIakFHcMuFQFXFrkzQjIJBX63SH1u8Q0zUMbWahVWhb1Lcq1FSABD9Ocy6 jDukuT7PCkq6LZvz+fynkLKF98igf7sm6fUwedbLy9e1yrtc5zJZoG4VvCD8SqUT jcwBd57WuhoCkgTBu5fVfolzV44mhIaxiBZyRWrUDJPbd/mSKQ8QG3VncLUwOiQf G60T1bCFOmeO1RSd6OaZheLYE+LJwmivLWziSlNXp2P7s0GzcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeUysU8WvsfTcKAW2RQytAg57KFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDQwNmNiOGUtNzlmOC0z ZDc5LWIwYTEtNjhiYWNkYzJiZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9teMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADheuih4N/+V/S5RR8Xwp9Tp8JKwbznWYoewTEToQ88TJJ0lX+fb9tsv XAvcRPusY43YyExsejwq8UM881FyL1ZDHfzS5Hf1kedUSbcxkrHKdMuZXvHkKSOt s48a/9xEUVpB2vm/eLuOoMAeoJKTWvthdfMeH0ToW/DhD1VlEFgIzpUudEzYkvg3 daGQvYmYGaP+pooOKsfVPZi6rtL0frpeShuPSlaLTJswsWF0tLWtGDD/AXCWHsmY nLsa8pd41kU1uFBskENuYc3sFDLWWfyQjtYF06+04yY723akZwDmdL/aeGsSDXNS TUvm/cce2415dqThugCXOdPIMtrLl5k= -----END CERTIFICATE-----Generated at Mon Oct 5 16:39:24 2026 by rpki-client