$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da28ca4d-c794-307e-8505-e3e72e0becc6.roa File: da28ca4d-c794-307e-8505-e3e72e0becc6.roa (raw, json) Hash identifier: qns7G4mKUtLZWOn+Ww1wDSIZA8QX0AJjyLZlNzGlAzA= Subject key identifier: D3:89:64:25:08:44:EE:19:84:89:54:A8:E2:75:BB:12:80:E4:BE:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985EDD8A01FD1D09EF6F630 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da28ca4d-c794-307e-8505-e3e72e0becc6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9498 IP address blocks: 23.211.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:ed:d8:a0:1f:d1:d0:9e:f6:f6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bf3db96d-4dc6-4e59-83dc-471257e71611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:11:69:82:1e:f2:ec:73:22:fc:ea:b3:1d: 3c:3e:9e:62:77:49:6f:fe:c8:e4:03:a8:ff:f4:f0: f1:19:33:80:35:66:92:01:d1:4c:ff:46:2e:a1:6a: 73:9d:8a:6f:ed:fb:5d:6c:71:20:eb:b2:4e:80:de: fc:c8:d0:00:42:65:98:b1:f9:fe:d1:55:d0:b7:f7: 28:c9:d8:ab:e0:ac:16:17:3b:7b:e6:14:48:fa:34: b7:e7:c7:9f:00:05:f9:d1:cf:1f:25:91:49:79:ae: 99:5b:81:77:27:03:94:c6:d7:92:10:69:07:c8:31: 5f:9c:a6:9e:84:1e:fe:95:72:c3:d6:58:52:62:ea: 79:c3:c2:fd:51:9c:4c:3b:e4:e7:13:a0:a6:e4:81: fa:6a:f2:ef:8b:7e:3f:59:e4:e1:c8:84:c0:a9:2c: 84:e0:e6:17:94:a7:29:10:33:7c:ca:27:46:b9:ab: 60:37:fb:12:79:9f:4f:e2:6c:c9:fb:c1:49:ff:8b: 61:ca:90:e4:8c:b0:7a:aa:34:2c:11:07:87:94:78: 25:c2:b9:1e:79:4e:f4:df:5d:04:6b:51:27:61:8f: 50:2a:4a:e4:f0:5a:d0:5e:49:89:04:6d:b1:70:5b: 4d:3b:c8:dd:1d:09:be:fe:3f:49:f5:a8:de:76:3e: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:89:64:25:08:44:EE:19:84:89:54:A8:E2:75:BB:12:80:E4:BE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da28ca4d-c794-307e-8505-e3e72e0becc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:66:a9:1c:cf:47:c2:83:58:93:14:89:3c:2e:b9:24:9e:73: 42:fb:7d:35:83:0f:88:3b:c6:8a:31:af:d4:8b:6e:c0:ae:d6: 64:95:d5:e8:a0:40:f6:d8:65:5c:d0:97:fb:60:50:9d:3d:a0: c1:77:09:aa:a5:60:3b:66:ff:8c:a4:91:a0:27:41:5e:88:85: 0f:6c:64:ea:a6:bc:3f:1b:9f:f2:3e:b9:b9:87:dc:45:6d:e2: 47:97:42:89:01:b5:a3:c3:15:f7:c3:ad:a4:84:c6:e2:fc:27: 7d:6e:49:49:cf:bd:d6:fc:f5:f0:1e:1f:25:23:98:39:6e:a2: bb:60:9a:f9:bd:55:28:5a:63:e7:ae:61:1e:b5:16:d9:ba:ca: 84:d2:89:1b:a7:f5:5d:20:0c:4e:37:2a:48:4f:f2:9f:aa:2a: eb:67:3d:f0:fa:d8:9a:51:9f:b4:bd:24:16:19:4b:2f:93:33: 05:ad:5f:58:bf:34:2e:1f:20:6b:11:d6:17:2f:4b:23:66:d9: 02:2b:6a:93:c0:b4:05:ae:e0:60:7a:aa:58:7f:bd:80:95:d9: cb:e1:cf:83:4d:93:04:10:9d:78:97:69:ce:cd:cd:b5:50:d5: b6:d8:a1:76:61:0e:31:78:0c:f7:de:17:6d:e2:3d:9c:03:c2: d6:dd:d4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhe3YoB/R0J729jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmYzZGI5NmQtNGRjNi00ZTU5LTgzZGMtNDcxMjU3ZTcxNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2ERaYIe8uxzIvzqsx08Pp5id0lv/sjkA6j/ 9PDxGTOANWaSAdFM/0YuoWpznYpv7ftdbHEg67JOgN78yNAAQmWYsfn+0VXQt/co ydir4KwWFzt75hRI+jS358efAAX50c8fJZFJea6ZW4F3JwOUxteSEGkHyDFfnKae hB7+lXLD1lhSYup5w8L9UZxMO+TnE6Cm5IH6avLvi34/WeThyITAqSyE4OYXlKcp EDN8yidGuatgN/sSeZ9P4mzJ+8FJ/4thypDkjLB6qjQsEQeHlHglwrkeeU70310E a1EnYY9QKkrk8FrQXkmJBG2xcFtNO8jdHQm+/j9J9ajedj4Y4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOJZCUIRO4ZhIlUqOJ1uxKA5L7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGEyOGNhNGQtYzc5NC0z MDdlLTg1MDUtZTNlNzJlMGJlY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9OJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlmqRzPR8KDWJMUiTwuuSSec0L7fTWDD4g7xooxr9SLbsCu1mSV1eig QPbYZVzQl/tgUJ09oMF3CaqlYDtm/4ykkaAnQV6IhQ9sZOqmvD8bn/I+ubmH3EVt 4keXQokBtaPDFffDraSExuL8J31uSUnPvdb89fAeHyUjmDluortgmvm9VShaY+eu YR61Ftm6yoTSiRun9V0gDE43KkhP8p+qKutnPfD62JpRn7S9JBYZSy+TMwWtX1i/ NC4fIGsR1hcvSyNm2QIrapPAtAWu4GB6qlh/vYCV2cvhz4NNkwQQnXiXac7NzbVQ 1bbYoXZhDjF4DPfeF23iPZwDwtbd1Hw= -----END CERTIFICATE-----Generated at Tue Oct 27 16:34:30 2026 by rpki-client