$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de48e4de-3b88-37fa-92b9-3fced7e7f93b.roa File: de48e4de-3b88-37fa-92b9-3fced7e7f93b.roa (raw, json) Hash identifier: 2xZo6sIZlpLhZCfwJ8yvNleXc9ZP+Hy11r1b2PRcXyo= Subject key identifier: 66:5A:AB:F9:E6:9F:A6:16:BA:33:BD:04:1D:DE:89:98:F9:0E:45:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985D6844FFEE0651C5B67C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de48e4de-3b88-37fa-92b9-3fced7e7f93b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.205.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:d6:84:4f:fe:e0:65:1c:5b:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8387a4e6-4ada-4d0c-ab1f-3657a96b3a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e6:be:f9:13:a7:6c:4c:e7:5a:61:9c:54:3d: c4:5b:74:95:7a:03:49:58:61:07:11:d7:8b:f0:ba: fc:3e:eb:6d:45:16:b8:ec:a0:7d:e0:3b:00:e1:45: 4e:ae:39:5e:d6:cf:50:12:f8:54:72:43:51:8d:e2: 2b:10:5d:48:83:5c:1f:e7:22:e8:13:31:fa:a1:b9: d3:7a:73:14:a1:5e:44:a7:5d:cb:8d:45:9a:9a:a1: 8e:bb:e2:54:8d:f5:d6:d6:98:7d:03:c2:f1:ef:a3: 56:1a:f7:f3:c8:c8:4b:08:98:0a:34:82:49:8c:e5: 38:5f:d0:70:7d:87:1d:17:49:04:00:8f:02:11:40: ba:fd:6a:3b:56:f0:f9:40:ca:d0:f6:3e:e9:aa:8f: 5a:ab:44:51:c4:fa:4d:5c:d4:f6:71:a9:cb:e8:7f: 15:41:5f:cb:01:2f:64:4b:85:45:69:3e:c1:33:43: e3:2b:05:9b:b0:08:f7:bb:13:ed:cf:5d:eb:1f:fc: 09:28:08:ca:88:35:35:b3:0c:f3:43:df:d5:a9:50: b2:3e:8a:17:08:24:76:b4:04:72:af:66:d0:b0:01: cb:16:84:70:f2:0e:a3:e4:f1:54:ea:da:02:3a:73: ad:33:ae:c0:a7:0a:a7:c9:fb:c1:6b:47:0b:0d:b2: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5A:AB:F9:E6:9F:A6:16:BA:33:BD:04:1D:DE:89:98:F9:0E:45:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de48e4de-3b88-37fa-92b9-3fced7e7f93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e2:3b:a7:81:76:b0:9e:70:91:b3:5c:a9:d4:f5:44:c5:54: b1:a8:cc:1e:b8:b2:34:36:f1:1f:59:aa:f0:64:aa:d7:2a:9b: ee:3e:2a:0c:31:b7:b0:b4:c3:59:71:10:75:b9:a8:64:e4:05: 10:44:88:87:67:a7:54:db:70:ef:8c:9e:c5:54:5a:bc:ed:8e: ae:9a:c0:af:e6:6e:8d:28:ef:f6:ff:28:95:56:e2:6b:0d:4b: 13:b1:25:ad:a8:0f:52:53:bc:2f:42:38:92:99:1c:a1:ca:7c: e2:05:9a:74:70:27:e3:52:dd:9c:64:77:f8:93:b9:c0:a9:73: 50:5a:c8:79:cd:c2:99:32:4a:43:81:26:59:88:af:95:09:70: 6d:a5:f7:78:84:f7:19:b6:bb:b2:88:10:3a:9b:4f:44:b7:b4: 2b:bd:f2:aa:4b:21:09:ed:d4:41:e9:64:26:55:20:55:04:63: a5:18:64:21:86:89:1d:52:96:c0:26:cb:67:d8:6c:b2:66:06: f6:dc:8a:06:fc:21:00:79:c9:50:b8:14:0b:19:52:90:2a:fd: 01:47:a8:d2:a4:19:e4:13:49:7c:b5:19:bd:91:a1:53:fe:63: 4f:36:13:72:b2:bb:a2:55:69:6f:ad:65:fe:95:33:57:55:42: 4a:5b:cc:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhdaET/7gZRxbZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODM4N2E0ZTYtNGFkYS00ZDBjLWFiMWYtMzY1N2E5NmIzYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Oa++ROnbEznWmGcVD3EW3SVegNJWGEHEdeL 8Lr8PuttRRa47KB94DsA4UVOrjle1s9QEvhUckNRjeIrEF1Ig1wf5yLoEzH6obnT enMUoV5Ep13LjUWamqGOu+JUjfXW1ph9A8Lx76NWGvfzyMhLCJgKNIJJjOU4X9Bw fYcdF0kEAI8CEUC6/Wo7VvD5QMrQ9j7pqo9aq0RRxPpNXNT2canL6H8VQV/LAS9k S4VFaT7BM0PjKwWbsAj3uxPtz13rH/wJKAjKiDU1swzzQ9/VqVCyPooXCCR2tARy r2bQsAHLFoRw8g6j5PFU6toCOnOtM67ApwqnyfvBa0cLDbIZWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZaq/nmn6YWujO9BB3eiZj5DkVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGU0OGU0ZGUtM2I4OC0z N2ZhLTkyYjktM2ZjZWQ3ZTdmOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF836MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjiO6eBdrCecJGzXKnU9UTFVLGozB64sjQ28R9ZqvBkqtcqm+4+Kgwx t7C0w1lxEHW5qGTkBRBEiIdnp1TbcO+MnsVUWrztjq6awK/mbo0o7/b/KJVW4msN SxOxJa2oD1JTvC9COJKZHKHKfOIFmnRwJ+NS3Zxkd/iTucCpc1BayHnNwpkySkOB JlmIr5UJcG2l93iE9xm2u7KIEDqbT0S3tCu98qpLIQnt1EHpZCZVIFUEY6UYZCGG iR1SlsAmy2fYbLJmBvbcigb8IQB5yVC4FAsZUpAq/QFHqNKkGeQTSXy1Gb2RoVP+ Y082E3Kyu6JVaW+tZf6VM1dVQkpbzEU= -----END CERTIFICATE-----Generated at Tue Oct 6 19:57:04 2026 by rpki-client