$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec679f14-0b9f-3507-9c9a-f3f5a13863db.roa File: ec679f14-0b9f-3507-9c9a-f3f5a13863db.roa (raw, json) Hash identifier: Z+RUQytVqE3bpRa+o5K9SurDuoCTA8QWr3AIqnkXLyA= Subject key identifier: 88:45:9F:2F:87:1D:25:8E:A6:6D:EC:55:25:CE:AA:88:20:E3:49:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8DD856705FA28181381A8940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec679f14-0b9f-3507-9c9a-f3f5a13863db.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 32787 IP address blocks: 23.213.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:56:70:5f:a2:81:81:38:1a:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=34d3a78a-ec2c-44b3-9ea6-eed113dc6291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:08:f7:d9:8a:01:25:3e:f1:a9:ca:aa:e6: 51:87:2d:63:c0:1d:93:1d:06:5c:79:76:aa:cb:e1: b7:dd:a3:01:9f:dd:96:1d:d6:5e:0c:25:8f:64:b4: 0a:55:fd:41:62:97:ea:08:4a:f9:46:4d:34:2d:b0: dd:30:2f:10:00:d1:4d:55:5b:cd:a1:e5:10:7e:73: a5:08:bd:c8:25:e3:5b:30:14:25:ee:be:38:6e:8c: bd:89:7a:da:69:e6:b7:52:4a:df:6d:02:c2:2f:65: d7:df:c6:b5:69:d9:d5:4b:de:6d:b5:f8:3f:34:8b: 2f:5c:be:78:08:6d:05:8e:26:5e:a9:73:81:43:d4: 22:10:8d:34:da:90:c7:cb:ac:63:18:6e:fc:94:cf: f2:8a:04:cc:32:4e:73:f1:83:d3:06:e1:62:2f:d6: dc:64:39:75:95:d0:5a:92:16:23:f0:6d:58:ce:a0: 12:15:41:31:5b:5c:ea:e2:69:46:8f:5d:26:18:31: 8a:a3:69:7d:88:ab:cf:8b:a3:aa:82:41:32:1e:83: d1:4c:22:b7:fe:f6:cb:d7:91:12:5a:7f:eb:76:90: 66:b8:58:96:07:44:f8:25:12:21:17:4b:3d:f4:26: c2:be:24:07:34:14:ec:64:55:e0:9a:88:d2:18:53: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:45:9F:2F:87:1D:25:8E:A6:6D:EC:55:25:CE:AA:88:20:E3:49:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec679f14-0b9f-3507-9c9a-f3f5a13863db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f0:70:5d:00:fa:1d:f2:62:35:63:89:15:e9:73:20:0d:01: 2f:9a:ea:5a:d3:14:a4:4b:56:03:d3:ff:1f:60:f5:3c:3b:a8: 03:aa:3e:c4:22:f0:4c:90:58:bc:9a:dc:c5:ce:1a:65:94:6c: eb:ff:46:76:6b:5d:4c:04:18:a6:11:cf:69:c7:0c:5a:a2:8b: 6a:ed:fc:3f:19:86:d0:da:24:e7:f3:3c:80:6c:52:7f:76:5b: aa:dd:ee:b5:01:56:35:5d:7e:c9:be:6d:bb:69:3d:00:b3:c5: 07:71:ff:81:62:ab:c2:df:1e:90:01:44:f4:a7:8f:7d:b3:3d: c5:fe:6e:85:cc:56:93:6e:03:86:6c:4e:a9:20:88:05:39:ce: d8:92:7b:af:72:12:a6:27:bb:93:dd:5c:4d:77:43:ab:5e:8c: 09:04:00:eb:db:e3:0a:37:f8:c6:16:8b:6f:9f:ab:9f:b0:ce: aa:2a:0f:37:2c:4c:21:a0:42:f5:f5:f7:3b:3e:65:52:86:7e: 37:ea:8b:8d:61:74:a8:5d:bc:26:03:8f:b3:fd:a4:a7:0a:e1: b2:bb:2e:33:c0:1a:13:3c:93:54:81:51:34:9c:ed:b0:ec:26: bb:d8:bf:1f:07:8a:ac:bd:6d:f1:35:c4:f1:e0:25:b6:3c:0b: ca:a8:08:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2FZwX6KBgTgaiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk MzRkM2E3OGEtZWMyYy00NGIzLTllYTYtZWVkMTEzZGM2MjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVYI99mKASU+8anKquZRhy1jwB2THQZceXaq y+G33aMBn92WHdZeDCWPZLQKVf1BYpfqCEr5Rk00LbDdMC8QANFNVVvNoeUQfnOl CL3IJeNbMBQl7r44boy9iXraaea3UkrfbQLCL2XX38a1adnVS95ttfg/NIsvXL54 CG0FjiZeqXOBQ9QiEI002pDHy6xjGG78lM/yigTMMk5z8YPTBuFiL9bcZDl1ldBa khYj8G1YzqASFUExW1zq4mlGj10mGDGKo2l9iKvPi6OqgkEyHoPRTCK3/vbL15ES Wn/rdpBmuFiWB0T4JRIhF0s99CbCviQHNBTsZFXgmojSGFMMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhFny+HHSWOpm3sVSXOqogg40nyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM2NzlmMTQtMGI5Zi0z NTA3LTljOWEtZjNmNWExMzg2M2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPwcF0A+h3yYjVjiRXpcyANAS+a6lrTFKRLVgPT/x9g9Tw7qAOqPsQi 8EyQWLya3MXOGmWUbOv/RnZrXUwEGKYRz2nHDFqii2rt/D8ZhtDaJOfzPIBsUn92 W6rd7rUBVjVdfsm+bbtpPQCzxQdx/4Fiq8LfHpABRPSnj32zPcX+boXMVpNuA4Zs TqkgiAU5ztiSe69yEqYnu5PdXE13Q6tejAkEAOvb4wo3+MYWi2+fq5+wzqoqDzcs TCGgQvX19zs+ZVKGfjfqi41hdKhdvCYDj7P9pKcK4bK7LjPAGhM8k1SBUTSc7bDs JrvYvx8Hiqy9bfE1xPHgJbY8C8qoCEQ= -----END CERTIFICATE-----Generated at Sun Oct 25 14:06:41 2026 by rpki-client