$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df649329-7e0f-3186-ab7e-43f288c65a55.roa File: df649329-7e0f-3186-ab7e-43f288c65a55.roa (raw, json) Hash identifier: nTC76QBtLX+5z32+REMk2MgNCqSANHdW/F35q7wxgas= Subject key identifier: 0B:CE:A3:BD:F3:9C:CC:09:75:EA:D0:F1:16:81:36:47:B2:89:C9:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8578614A7C857704454D72C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df649329-7e0f-3186-ab7e-43f288c65a55.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 24319 IP address blocks: 23.79.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:61:4a:7c:85:77:04:45:4d:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=66e41112-6bf4-4e71-ac46-d5b1828ba4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:30:e3:19:ac:fd:71:b2:23:3c:38:2a:df:55: e3:6d:d6:06:2e:2b:f9:d4:65:30:70:b7:2a:e7:9d: 9d:ee:d3:56:c7:3f:e5:52:48:d4:b3:4f:a7:20:8f: 70:f1:a5:c3:70:fb:e7:d1:bb:47:15:c3:84:d6:37: e7:af:d5:62:72:72:80:bf:06:21:8d:85:1b:fb:de: df:e7:2b:26:2c:4d:ca:df:ad:5a:f6:51:48:59:ae: d3:07:e1:c6:9d:01:38:fc:31:2b:7c:3f:49:9b:38: 31:1c:a7:e2:dc:1a:72:3c:3f:e5:74:f5:17:eb:6b: c6:ea:ba:03:59:7f:9a:f2:eb:2e:b0:1a:0d:5e:77: d2:69:d9:bb:d1:a0:b0:b0:3f:a1:da:84:fd:41:47: 2f:a3:31:aa:5b:c4:52:57:98:96:55:2f:02:c2:98: d3:d1:a0:03:30:6a:41:60:bf:81:30:7f:09:4e:54: 32:1a:07:09:5c:cf:0d:a5:95:10:20:1b:df:c9:0a: c2:9f:4f:b0:d9:27:f7:a2:9e:49:c9:76:32:b5:62: 64:94:28:bd:68:40:2e:38:e3:fa:b9:a0:7d:c8:d6: 03:b1:37:bf:ec:62:2c:42:53:41:c2:8e:a8:2f:ae: b8:eb:ab:d9:81:20:53:4d:1f:3c:69:2e:fa:4c:24: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CE:A3:BD:F3:9C:CC:09:75:EA:D0:F1:16:81:36:47:B2:89:C9:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df649329-7e0f-3186-ab7e-43f288c65a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.79.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7a:24:cf:0a:ba:de:b3:e3:17:aa:23:51:48:c1:61:bb:52: ff:7e:d4:14:22:3c:c4:fd:23:49:d2:29:45:8e:ef:92:22:29: 6d:a2:44:cc:01:b0:d0:a9:09:6e:78:9c:3a:eb:40:ea:93:99: 85:2b:8e:28:4a:f2:c5:74:58:ff:5a:4c:1d:7f:56:ce:6c:76: c8:4d:8b:08:ae:51:ae:cb:8c:aa:d1:40:fe:59:46:56:54:8c: ae:43:cc:5a:c9:9c:5e:da:f0:ea:7d:cc:60:b9:b5:82:13:50: 66:6c:b7:36:99:4b:8c:1d:de:a3:fa:65:ef:05:12:d5:0c:dd: 98:04:10:16:0a:8f:6c:7a:5d:b6:d0:63:b6:ce:7d:e8:9a:88: 99:3b:78:8d:0f:af:0a:c8:a8:ca:73:df:0f:9f:4d:7c:40:83: b0:ad:b0:2b:df:5b:99:6d:8e:a1:e4:68:0b:1c:f3:47:29:dd: 0f:e8:37:ae:e9:38:0b:ca:f4:44:4d:f6:23:6d:35:b1:da:0b: 73:f7:3e:a2:e9:2e:62:6e:c5:69:5a:c1:30:31:59:69:fa:bf: 8e:dd:3b:6b:d1:19:77:3a:da:5e:67:f3:18:ff:fd:8a:0e:c6: 5b:3a:d4:a3:4b:f1:f9:1d:45:29:e5:4a:fb:26:19:57:7b:77: 0f:ca:cc:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeGFKfIV3BEVNcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NjZlNDExMTItNmJmNC00ZTcxLWFjNDYtZDViMTgyOGJhNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTDjGaz9cbIjPDgq31XjbdYGLiv51GUwcLcq 552d7tNWxz/lUkjUs0+nII9w8aXDcPvn0btHFcOE1jfnr9VicnKAvwYhjYUb+97f 5ysmLE3K361a9lFIWa7TB+HGnQE4/DErfD9JmzgxHKfi3BpyPD/ldPUX62vG6roD WX+a8ususBoNXnfSadm70aCwsD+h2oT9QUcvozGqW8RSV5iWVS8CwpjT0aADMGpB YL+BMH8JTlQyGgcJXM8NpZUQIBvfyQrCn0+w2Sf3op5JyXYytWJklCi9aEAuOOP6 uaB9yNYDsTe/7GIsQlNBwo6oL66466vZgSBTTR88aS76TCSEBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvOo73znMwJderQ8RaBNkeyicnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY2NDkzMjktN2UwZi0z MTg2LWFiN2UtNDNmMjg4YzY1YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ6JM8Kut6z4xeqI1FIwWG7Uv9+1BQiPMT9I0nSKUWO75IiKW2iRMwB sNCpCW54nDrrQOqTmYUrjihK8sV0WP9aTB1/Vs5sdshNiwiuUa7LjKrRQP5ZRlZU jK5DzFrJnF7a8Op9zGC5tYITUGZstzaZS4wd3qP6Ze8FEtUM3ZgEEBYKj2x6XbbQ Y7bOfeiaiJk7eI0PrwrIqMpz3w+fTXxAg7CtsCvfW5ltjqHkaAsc80cp3Q/oN67p OAvK9ERN9iNtNbHaC3P3PqLpLmJuxWlawTAxWWn6v47dO2vRGXc62l5n8xj//YoO xls61KNL8fkdRSnlSvsmGVd7dw/KzAQ= -----END CERTIFICATE-----Generated at Tue Oct 27 06:13:51 2026 by rpki-client