$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa File: dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa (raw, json) Hash identifier: PIlWY7OMUN2MoFiVNROmg+++/3eRwl7D5UGAaL28RrE= Subject key identifier: AC:B6:70:6E:FA:A3:34:72:B8:92:7D:43:A6:F9:DD:61:5A:CE:82:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49857D84E05B1B3825252AE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7713 IP address blocks: 23.212.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:7d:84:e0:5b:1b:38:25:25:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e1ec7e09-21d6-49f0-a8bb-5c3e696e9963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:5d:e0:64:ad:fb:35:bf:f7:c9:6b:3f:cc: 71:32:a0:4b:2d:fc:c2:ec:6e:58:a7:3b:e4:11:10: ab:2c:45:b6:e0:3c:69:74:95:59:a5:da:ad:0e:3f: 83:da:3b:d3:2d:74:eb:26:d1:fb:ee:a1:9e:70:71: 1e:c7:75:30:6a:ff:75:53:f7:83:91:e3:d2:29:c7: d9:0c:3e:fe:99:e9:36:38:a7:26:7a:b2:7d:d7:a4: 44:22:6f:67:9e:49:ad:99:5b:e4:90:cb:1c:ab:46: 39:90:b9:4b:85:fe:53:4f:a5:32:f7:ae:8e:47:a7: 7d:9f:14:61:62:e3:68:28:ba:f2:c6:09:59:54:a8: e1:66:e1:3d:be:2a:b1:50:19:50:67:90:1d:ac:7c: 99:52:15:63:2e:4c:85:af:ec:d0:66:fb:65:6f:e2: 36:00:37:de:3a:ba:11:f3:cb:80:43:a1:8c:60:3f: c3:ef:7b:bc:52:69:57:80:35:26:23:0b:4f:8d:85: 2b:22:4a:8a:17:07:b5:c5:42:78:35:71:c2:f1:83: dc:28:b2:67:51:ff:42:63:28:d6:8a:79:5f:fa:09: fc:31:87:d4:e6:73:12:e9:fb:d7:04:69:f0:6e:3a: 1a:a4:c1:50:79:73:d9:76:10:af:b8:71:11:40:17: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B6:70:6E:FA:A3:34:72:B8:92:7D:43:A6:F9:DD:61:5A:CE:82:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:82:2f:a7:4b:a1:40:ce:7f:92:2e:ea:d1:35:a6:3f:f2:8d: 2f:9b:f4:35:96:a6:74:00:31:c6:55:ac:90:aa:99:91:6f:08: 6a:8b:bf:01:6e:4b:ab:2d:00:0f:d3:b8:1c:f5:81:4e:03:12: d4:71:e6:c7:ce:99:a9:c9:7c:ec:5b:1f:df:e6:70:81:03:79: 4c:af:2a:92:b4:50:ce:4c:5f:bc:c5:d4:9f:25:5d:9e:42:bf: b0:cb:8e:eb:6d:30:3d:09:23:54:0d:eb:a8:af:5d:72:bf:19: 6d:d0:5a:9b:92:61:a3:e1:07:64:64:ce:d2:3c:0c:e7:f9:66: 2e:bd:c6:b5:36:2c:64:a6:34:ca:fc:29:49:79:b1:fd:6b:f8: 24:04:09:a4:0c:49:ba:bc:21:6c:e3:14:8c:c8:2d:0a:73:02: 0c:a4:68:79:e7:65:f5:05:60:da:56:5d:f8:48:bb:57:e5:03: f6:a0:82:ea:ae:60:e6:10:43:29:2b:06:65:25:e1:b6:8a:43: 01:50:ec:d4:85:13:d6:83:59:61:27:b0:4b:65:11:6d:9f:ca: 0d:0f:e0:cb:13:3e:63:2b:4d:b3:43:c6:80:71:99:87:3b:ba: 27:0d:ed:40:9d:ce:0c:3a:07:42:5e:05:15:79:51:87:c0:af: 42:1e:b2:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhX2E4FsbOCUlKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTFlYzdlMDktMjFkNi00OWYwLWE4YmItNWMzZTY5NmU5OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQZd4GSt+zW/98lrP8xxMqBLLfzC7G5Ypzvk ERCrLEW24DxpdJVZpdqtDj+D2jvTLXTrJtH77qGecHEex3Uwav91U/eDkePSKcfZ DD7+mek2OKcmerJ916REIm9nnkmtmVvkkMscq0Y5kLlLhf5TT6Uy966OR6d9nxRh YuNoKLryxglZVKjhZuE9viqxUBlQZ5AdrHyZUhVjLkyFr+zQZvtlb+I2ADfeOroR 88uAQ6GMYD/D73u8UmlXgDUmIwtPjYUrIkqKFwe1xUJ4NXHC8YPcKLJnUf9CYyjW inlf+gn8MYfU5nMS6fvXBGnwbjoapMFQeXPZdhCvuHERQBeTHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy2cG76ozRyuJJ9Q6b53WFazoL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZjY2Q5OWQtYTA3ZS0z ZGRiLWEyNDYtYzY2ZDQ0ODEyZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9RwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWCL6dLoUDOf5Iu6tE1pj/yjS+b9DWWpnQAMcZVrJCqmZFvCGqLvwFu S6stAA/TuBz1gU4DEtRx5sfOmanJfOxbH9/mcIEDeUyvKpK0UM5MX7zF1J8lXZ5C v7DLjuttMD0JI1QN66ivXXK/GW3QWpuSYaPhB2RkztI8DOf5Zi69xrU2LGSmNMr8 KUl5sf1r+CQECaQMSbq8IWzjFIzILQpzAgykaHnnZfUFYNpWXfhIu1flA/agguqu YOYQQykrBmUl4baKQwFQ7NSFE9aDWWEnsEtlEW2fyg0P4MsTPmMrTbNDxoBxmYc7 uicN7UCdzgw6B0JeBRV5UYfAr0Iesvw= -----END CERTIFICATE-----Generated at Sun Oct 25 21:07:29 2026 by rpki-client