$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2e285cd-c618-3cfe-b874-5b552520ce4e.roa File: f2e285cd-c618-3cfe-b874-5b552520ce4e.roa (raw, json) Hash identifier: h8dZx7j/w8CKdJYbuadu88un/wwvUN3rC1jsJhaSGDg= Subject key identifier: E5:44:43:23:A6:FA:F4:9F:FB:4E:90:FE:0D:0F:80:C6:91:7E:FA:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5E8E5ACC232F14EBFE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2e285cd-c618-3cfe-b874-5b552520ce4e.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.220.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5e:8e:5a:cc:23:2f:14:eb:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=e1f0be53-da1f-4690-942d-d276db10f617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:0f:bb:31:6c:62:d6:f3:90:e6:e7:23:bc: 5e:c5:54:1f:fd:45:32:62:0b:0b:02:4f:18:9b:5e: b0:f5:f8:29:7e:2f:40:e9:c9:45:20:7b:c3:1a:6b: 94:6f:df:b9:ac:2c:a4:2f:d1:66:69:e0:bc:19:f9: 09:51:f7:dd:1c:16:93:2d:ec:44:f9:db:b1:ae:da: 03:8e:23:14:1e:80:b8:44:99:68:19:5a:a0:e2:15: 8d:82:b6:72:d1:ae:3a:35:db:ab:76:0f:0a:06:76: 38:a8:49:d4:cb:d6:5e:d8:86:0e:52:32:2e:27:83: f0:6a:51:25:16:89:16:d9:fa:7b:3b:ac:85:57:84: 37:25:92:1a:bd:3b:ad:bc:44:da:bd:4a:79:f9:f5: d3:9b:0a:64:da:31:5b:69:71:57:8d:40:d3:e8:67: 9e:e0:d2:9a:80:31:a8:33:ed:b6:e6:62:a8:60:96: 35:6e:7a:a1:a0:61:88:d3:c5:f8:3e:a0:95:42:d0: 81:66:4a:dc:ae:94:13:3f:1f:b9:be:1e:74:f0:ab: 61:06:ce:03:b5:5b:39:e7:ec:69:6b:7e:2a:52:0a: b0:73:2d:ae:d5:0a:38:a1:e3:83:c9:eb:b4:55:0d: 06:19:fb:aa:c4:b7:e2:04:90:f0:ab:bc:ca:dd:48: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:44:43:23:A6:FA:F4:9F:FB:4E:90:FE:0D:0F:80:C6:91:7E:FA:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2e285cd-c618-3cfe-b874-5b552520ce4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f0:e2:a6:d9:52:84:63:ff:c5:82:5a:3e:1c:62:de:76:ab: f0:8d:ee:d8:6f:b2:ad:20:f4:18:e4:d3:ae:c1:72:8b:a7:d8: eb:bc:10:07:c8:d9:06:cc:3a:2c:58:67:96:55:17:8d:a0:a1: 24:6a:b8:ad:5c:49:01:c2:5e:ac:16:a0:0a:0e:74:04:2e:2f: 80:25:37:f2:b0:d5:54:73:5c:ab:c5:2b:f8:6c:18:d1:d0:5e: cd:58:db:56:b0:8c:c9:72:11:3f:32:e7:e0:b6:32:96:7b:fa: 8f:d3:a2:b3:18:6b:f5:0c:95:97:b3:d9:4d:05:7e:c8:cc:de: d7:ac:27:2f:77:cf:32:ae:41:8a:e6:26:4f:2d:90:c6:b3:ee: 2f:6c:63:13:a0:7e:30:81:d5:09:15:14:05:2a:62:38:78:0d: fe:a3:6b:5b:41:8e:d3:e5:35:7c:59:f1:bc:a1:43:32:b5:1d: 8f:b9:81:0a:9e:f0:83:b6:27:58:2e:cf:d9:d0:69:1d:b0:7a: 81:76:e0:8f:0e:00:04:b5:83:6f:69:6c:cc:26:f7:6f:d9:ba: 74:ef:4b:d7:23:a7:17:53:96:9a:07:ef:65:9e:d3:bd:11:ef: b7:e7:4e:b7:1b:fb:ef:8e:06:7f:73:f0:99:0a:30:e6:c1:ce: e0:28:17:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbV6OWswjLxTr/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZTFmMGJlNTMtZGExZi00NjkwLTk0MmQtZDI3NmRiMTBmNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweMPuzFsYtbzkObnI7xexVQf/UUyYgsLAk8Y m16w9fgpfi9A6clFIHvDGmuUb9+5rCykL9FmaeC8GfkJUffdHBaTLexE+duxrtoD jiMUHoC4RJloGVqg4hWNgrZy0a46Ndurdg8KBnY4qEnUy9Ze2IYOUjIuJ4PwalEl FokW2fp7O6yFV4Q3JZIavTutvETavUp5+fXTmwpk2jFbaXFXjUDT6Gee4NKagDGo M+225mKoYJY1bnqhoGGI08X4PqCVQtCBZkrcrpQTPx+5vh508KthBs4DtVs55+xp a34qUgqwcy2u1Qo4oeODyeu0VQ0GGfuqxLfiBJDwq7zK3Ugw5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVEQyOm+vSf+06Q/g0PgMaRfvrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjJlMjg1Y2QtYzYxOC0z Y2ZlLWI4NzQtNWI1NTI1MjBjZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9yMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3w4qbZUoRj/8WCWj4cYt52q/CN7thvsq0g9Bjk067Bcoun2Ou8EAfI 2QbMOixYZ5ZVF42goSRquK1cSQHCXqwWoAoOdAQuL4AlN/Kw1VRzXKvFK/hsGNHQ Xs1Y21awjMlyET8y5+C2MpZ7+o/TorMYa/UMlZez2U0FfsjM3tesJy93zzKuQYrm Jk8tkMaz7i9sYxOgfjCB1QkVFAUqYjh4Df6ja1tBjtPlNXxZ8byhQzK1HY+5gQqe 8IO2J1guz9nQaR2weoF24I8OAAS1g29pbMwm92/ZunTvS9cjpxdTlpoH72We070R 77fnTrcb+++OBn9z8JkKMObBzuAoF6c= -----END CERTIFICATE-----Generated at Mon Oct 5 16:39:20 2026 by rpki-client