$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa File: 0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa (raw, json) Hash identifier: us10HUj5gCle5ustBno/ASfow0qjY3F7JX7fe3Tpk98= Subject key identifier: 4F:CA:06:52:5D:6E:D1:2C:20:25:2D:6D:CC:37:0E:5D:FE:CE:77:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E5D031D58BCF0734FFB88 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.211.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:5d:03:1d:58:bc:f0:73:4f:fb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f1eaf85f-9a8e-43a3-8bf4-9aa408398932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a9:e5:a3:a4:86:1b:40:a0:72:31:bc:23:42: 71:4c:ae:80:cb:43:47:e4:ae:87:92:ff:06:82:f7: 6b:06:42:9f:54:8b:bf:47:d9:dc:16:ad:23:b3:a0: eb:0f:97:d0:81:86:92:2c:90:92:d4:ce:c2:6c:a6: ab:f0:76:8d:51:10:b8:8d:e2:0e:b8:b7:dc:73:0b: 3e:58:3d:25:8b:77:e6:95:7f:79:32:71:e8:1b:5e: 0b:40:8c:ee:07:ea:f6:da:44:c8:d3:ca:7f:2e:b2: 79:af:cf:76:e1:ec:9d:a1:1e:77:3a:1d:d0:90:d0: 17:96:71:2a:01:11:84:b8:a1:74:94:ff:b1:b8:62: 30:76:06:5c:36:15:fe:fc:99:fe:a4:89:3b:2a:6a: a2:10:ca:94:f8:c6:cc:64:02:96:a0:1b:99:e7:39: 1f:72:3d:e1:97:bf:53:24:3f:7a:81:d7:c5:42:7c: c4:9c:a7:f9:bc:1f:d6:9d:2a:a1:21:72:67:60:f9: d3:0b:ad:f3:63:69:6c:08:b2:ef:b0:2f:b3:22:1f: 5a:62:49:ce:54:58:2f:96:6a:3c:da:a7:85:ae:50: 0d:85:e8:52:5a:d2:01:ed:96:76:8b:d7:00:e8:e4: 60:b1:cb:62:dc:ed:69:f8:e0:2f:48:a7:8d:a1:09: 8c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CA:06:52:5D:6E:D1:2C:20:25:2D:6D:CC:37:0E:5D:FE:CE:77:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:df:b7:de:c8:80:f7:80:ff:90:25:9a:96:07:d4:19:4c:25: 29:a7:06:b4:c3:97:d4:12:12:ef:a8:25:77:21:a8:be:ac:74: 99:a9:08:80:9e:2c:c0:fd:4d:a3:67:06:30:e6:d4:01:a1:6e: ca:27:e4:07:e2:e3:72:91:97:70:e0:ec:e5:ed:4a:a3:4e:2f: c2:51:0a:4a:92:e0:65:b4:4b:74:c6:f9:41:64:29:ac:b1:42: fb:ea:aa:dd:bc:16:35:55:61:3a:f9:2d:5f:2f:70:c7:d0:e1: 61:4a:ef:56:6b:0e:77:cc:28:50:e4:93:ca:4e:ee:9f:fa:40: 58:de:04:7d:67:21:bb:9b:6b:fe:01:8b:af:14:88:66:fc:d7: 02:e6:8a:5a:38:fa:21:6c:21:85:6a:29:f5:86:68:08:03:04: 70:12:00:ed:f6:f2:b1:60:97:81:86:2e:96:77:fb:d2:e9:7a: bd:3f:ca:0a:f6:2d:d8:ec:c4:ba:12:38:c7:31:4b:2a:61:f4: 5a:15:47:60:9c:f4:3c:88:1f:8a:4b:f3:87:5d:6c:cc:8f:e3: da:a9:40:5a:6e:55:e6:fc:de:24:46:3c:20:2d:6f:ae:52:32: 62:39:f3:23:68:16:07:39:1b:e9:87:e2:2f:05:5f:c3:16:4a: 8c:5f:1c:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfl0DHVi88HNP+4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjFlYWY4NWYtOWE4ZS00M2EzLThiZjQtOWFhNDA4Mzk4OTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKnlo6SGG0CgcjG8I0JxTK6Ay0NH5K6Hkv8G gvdrBkKfVIu/R9ncFq0js6DrD5fQgYaSLJCS1M7CbKar8HaNURC4jeIOuLfccws+ WD0li3fmlX95MnHoG14LQIzuB+r22kTI08p/LrJ5r8924eydoR53Oh3QkNAXlnEq ARGEuKF0lP+xuGIwdgZcNhX+/Jn+pIk7KmqiEMqU+MbMZAKWoBuZ5zkfcj3hl79T JD96gdfFQnzEnKf5vB/WnSqhIXJnYPnTC63zY2lsCLLvsC+zIh9aYknOVFgvlmo8 2qeFrlANhehSWtIB7ZZ2i9cA6ORgscti3O1p+OAvSKeNoQmMMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/KBlJdbtEsICUtbcw3Dl3+znesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFmNDdiYWUtOTJhNi0z YzgzLTllNmEtNWMyZGFlYzdkM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF9NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvft97IgPeA/5AlmpYH1BlMJSmnBrTDl9QSEu+oJXchqL6sdJmpCICe LMD9TaNnBjDm1AGhbson5Afi43KRl3Dg7OXtSqNOL8JRCkqS4GW0S3TG+UFkKayx Qvvqqt28FjVVYTr5LV8vcMfQ4WFK71ZrDnfMKFDkk8pO7p/6QFjeBH1nIbuba/4B i68UiGb81wLmilo4+iFsIYVqKfWGaAgDBHASAO328rFgl4GGLpZ3+9Lper0/ygr2 LdjsxLoSOMcxSyph9FoVR2Cc9DyIH4pL84ddbMyP49qpQFpuVeb83iRGPCAtb65S MmI58yNoFgc5G+mH4i8FX8MWSoxfHCA= -----END CERTIFICATE-----Generated at Fri Sep 25 05:50:41 2026 by rpki-client