$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa File: d728645b-ab80-3ba2-827a-d2ab88082ab0.roa (raw, json) Hash identifier: o6h727pni5q948R/klIJor6JPb7uhzl5rWC1a0flSb8= Subject key identifier: 54:B2:5D:9F:7F:E7:F6:6F:93:ED:05:B8:A4:10:9D:EA:BA:6F:F6:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584FA42DEC099466EA8C3520D448 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa Signing time: Tue 27 Oct 2026 13:00:13 +0000 ROA not before: Tue 27 Oct 2026 13:00:13 +0000 ROA not after: Mon 25 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 23.217.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:2d:ec:09:94:66:ea:8c:35:20:d4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:13 2026 GMT Not After : Jan 25 14:00:13 2027 GMT Subject: CN=2b9c7d6a-df7c-4d76-908d-764db128e8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c7:6b:a6:42:93:99:dd:b1:8c:86:26:ff:90: ae:b0:5b:c8:76:e7:4e:d0:d3:f5:33:d0:d2:a1:a4: 2f:d7:b6:1f:81:d5:a0:88:06:83:6a:52:a5:b2:fa: 25:41:e8:c7:4b:99:8e:5b:6b:eb:0e:be:31:2e:72: ab:fc:42:a1:a9:9f:1d:15:93:fe:89:fc:a3:1f:86: 37:1f:2c:65:28:af:15:e8:de:7c:9e:ec:20:fa:53: 09:35:73:dd:e7:da:7f:c4:d0:a0:9a:e5:22:49:5e: 25:8a:cd:2f:ef:18:90:58:08:f1:a1:ec:85:84:fa: ee:dc:38:63:49:38:59:2d:3a:ef:eb:4c:23:54:39: 9c:a5:6d:26:b3:12:5b:68:23:54:b7:39:e7:5a:51: ca:d7:fb:be:9d:02:9f:95:1b:ce:63:66:81:50:f3: d9:52:e2:b3:a4:43:fc:7a:f5:9d:96:8a:17:cf:95: f1:f9:72:35:88:d5:b8:5f:4e:d4:45:48:50:5f:de: 8d:31:ab:4b:00:92:22:cc:2c:ac:23:cb:44:f9:47: 8d:40:42:1f:9e:5c:45:e3:fa:ab:9c:57:1b:bf:19: 91:a5:8d:4c:9b:46:57:72:71:ed:ba:d0:c3:6c:41: db:85:30:7c:bb:65:85:57:c7:5c:ad:1c:c0:1a:f0: 1a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B2:5D:9F:7F:E7:F6:6F:93:ED:05:B8:A4:10:9D:EA:BA:6F:F6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d728645b-ab80-3ba2-827a-d2ab88082ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:3a:c0:f9:cd:f5:1d:2b:c6:0f:6f:9e:4e:da:d5:4a:cd:97: fe:e6:7d:c2:f9:4f:d4:da:40:6a:97:ea:3f:54:8f:33:95:eb: 67:af:0e:a9:c6:eb:19:03:1a:40:da:73:b2:98:7f:89:ee:35: 95:9c:da:ac:f9:a9:35:8a:8b:f8:ce:fe:78:56:56:d6:11:cc: 29:a7:6c:7c:3c:61:64:ba:21:e9:d9:1c:c7:9c:0a:ac:eb:64: 28:fc:4d:a9:04:23:56:2f:4d:35:69:5d:08:8e:04:8c:57:9d: d0:3d:ae:20:a7:32:4a:75:2d:96:fb:20:1b:9c:4f:5d:82:b1: 54:d3:df:e7:25:25:1f:32:32:39:a7:b1:a6:13:ac:e8:22:ce: 5f:05:02:b6:5c:55:4f:9c:e7:95:a0:6b:21:08:1f:bb:78:c8: 98:93:c7:a4:f5:00:a2:9c:07:ca:60:76:10:de:26:c9:03:f0: 27:0e:a8:af:35:d5:fe:6e:36:d5:b9:e3:3b:4e:96:ec:7c:0b: fa:76:a4:6a:be:15:db:38:4d:39:0b:1b:26:23:18:38:f8:99: 73:88:ac:25:2a:73:9f:e1:3b:af:b4:2d:52:10:d6:1c:f9:47: e1:0c:20:a0:ef:3f:d1:5d:23:b5:c9:3c:a6:8a:55:d5:09:ed: b9:ee:bb:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+kLewJlGbqjDUg1EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk MmI5YzdkNmEtZGY3Yy00ZDc2LTkwOGQtNzY0ZGIxMjhlOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicdrpkKTmd2xjIYm/5CusFvIdudO0NP1M9DS oaQv17YfgdWgiAaDalKlsvolQejHS5mOW2vrDr4xLnKr/EKhqZ8dFZP+ifyjH4Y3 HyxlKK8V6N58nuwg+lMJNXPd59p/xNCgmuUiSV4lis0v7xiQWAjxoeyFhPru3Dhj SThZLTrv60wjVDmcpW0msxJbaCNUtznnWlHK1/u+nQKflRvOY2aBUPPZUuKzpEP8 evWdlooXz5Xx+XI1iNW4X07URUhQX96NMatLAJIizCysI8tE+UeNQEIfnlxF4/qr nFcbvxmRpY1Mm0ZXcnHtutDDbEHbhTB8u2WFV8dcrRzAGvAaGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSyXZ9/5/Zvk+0FuKQQneq6b/YwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDcyODY0NWItYWI4MC0z YmEyLTgyN2EtZDJhYjg4MDgyYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9loMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJc6wPnN9R0rxg9vnk7a1UrNl/7mfcL5T9TaQGqX6j9UjzOV62evDqnG 6xkDGkDac7KYf4nuNZWc2qz5qTWKi/jO/nhWVtYRzCmnbHw8YWS6IenZHMecCqzr ZCj8TakEI1YvTTVpXQiOBIxXndA9riCnMkp1LZb7IBucT12CsVTT3+clJR8yMjmn saYTrOgizl8FArZcVU+c55WgayEIH7t4yJiTx6T1AKKcB8pgdhDeJskD8CcOqK81 1f5uNtW54ztOlux8C/p2pGq+Fds4TTkLGyYjGDj4mXOIrCUqc5/hO6+0LVIQ1hz5 R+EMIKDvP9FdI7XJPKaKVdUJ7bnuuwk= -----END CERTIFICATE-----Generated at Tue Oct 27 22:52:03 2026 by rpki-client