$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/109dede6-1ba0-3b76-8e67-74f3a18f22e7.roa File: 109dede6-1ba0-3b76-8e67-74f3a18f22e7.roa (raw, json) Hash identifier: IxA7ZdGUHPqEeqYFvu3FgnB3TGxBkvaGE6V64D4xflA= Subject key identifier: 62:D7:87:AA:D7:A6:35:21:BF:3B:D0:0E:A3:6C:0E:D0:3A:DA:C5:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47FE533D4901D9B9069D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/109dede6-1ba0-3b76-8e67-74f3a18f22e7.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.60.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fe:53:3d:49:01:d9:b9:06:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=de94f420-2b32-4efd-9df7-17dd487bed77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:45:c6:a1:2a:7c:62:fd:3f:98:48:c9:d0: 2f:6e:72:73:b6:c8:0d:31:0f:fc:72:42:17:af:e9: b8:9d:47:49:03:7a:7f:e3:56:bc:cb:27:06:6d:08: c4:c7:06:62:f0:0e:c0:8c:f7:9f:6f:db:ce:04:19: a7:36:e9:59:28:07:01:1a:39:49:18:85:9e:15:fa: 7e:61:69:a0:7e:8c:a1:c0:94:dc:08:64:d8:25:51: 87:ef:e0:0f:08:b6:9d:31:65:af:6a:5f:1c:bd:73: f1:fe:07:2b:50:97:8f:57:06:02:8a:c9:b8:0a:95: e6:5c:d1:67:a6:b3:15:54:63:aa:77:9a:46:8b:30: b0:7f:2e:34:ea:41:d2:68:bb:2b:28:5c:ef:b6:8a: 81:e1:97:a9:00:45:8d:12:08:0a:93:60:3b:20:c2: 7b:e5:0f:67:f2:ce:be:2f:31:cd:ba:b5:ea:96:63: bf:bf:73:08:46:a1:5a:00:1d:b5:29:ea:e1:10:f2: e5:e8:69:5e:f4:06:14:83:6d:70:89:00:56:8d:a5: 5c:70:52:df:5a:a7:fd:d1:7f:96:f7:18:fe:01:51: a6:cc:76:06:24:9e:5d:44:5c:10:27:7c:da:39:34: e3:b3:6d:a7:76:62:b4:6f:21:62:fb:a7:1d:9b:93: 98:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D7:87:AA:D7:A6:35:21:BF:3B:D0:0E:A3:6C:0E:D0:3A:DA:C5:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/109dede6-1ba0-3b76-8e67-74f3a18f22e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:47:27:0c:89:f3:bf:25:57:f3:b2:93:4c:4d:6b:a3:f3:8b: a8:af:44:6d:e3:da:97:3e:f8:da:ee:c9:98:bb:7a:4b:ff:cb: bf:df:0d:a6:df:85:56:4c:d3:91:88:41:af:ef:37:61:97:05: 32:59:02:5a:c3:bf:39:b4:26:31:a1:df:00:9f:0e:ba:95:77: 64:97:6a:38:80:7e:37:de:93:96:4e:77:21:89:fc:c8:c2:15: 11:05:22:a7:c2:8f:b9:6a:68:1b:7a:a6:d6:ab:12:0c:6c:f3: 5a:62:5d:cb:75:8d:d6:45:38:8a:7f:fc:3a:9c:0b:e5:4e:32: e9:6d:af:b4:75:be:5f:2e:67:f1:7a:74:97:c3:a9:ec:91:fe: 9d:0d:c9:ab:a2:9b:a9:87:3c:c4:70:6c:5d:d2:53:ff:a6:88: 25:9e:04:33:89:d6:2f:d4:50:82:d4:39:b0:d5:be:27:4a:97: 0c:8b:cb:8a:10:5d:1e:94:56:36:c8:96:a7:4f:e6:d0:e1:c1: f6:e2:e3:32:0b:3a:f1:7b:5c:01:fe:b9:7f:c0:82:09:44:27: 68:da:f4:88:3e:96:f6:85:a7:07:13:46:0f:d4:5f:b1:32:b3: bf:d5:22:1c:84:ac:f1:c4:6f:15:50:ea:82:02:c0:a3:43:c7: 9a:1a:b1:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/5TPUkB2bkGnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZGU5NGY0MjAtMmIzMi00ZWZkLTlkZjctMTdkZDQ4N2JlZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa9FxqEqfGL9P5hIydAvbnJztsgNMQ/8ckIX r+m4nUdJA3p/41a8yycGbQjExwZi8A7AjPefb9vOBBmnNulZKAcBGjlJGIWeFfp+ YWmgfoyhwJTcCGTYJVGH7+APCLadMWWval8cvXPx/gcrUJePVwYCism4CpXmXNFn prMVVGOqd5pGizCwfy406kHSaLsrKFzvtoqB4ZepAEWNEggKk2A7IMJ75Q9n8s6+ LzHNurXqlmO/v3MIRqFaAB21KerhEPLl6Gle9AYUg21wiQBWjaVccFLfWqf90X+W 9xj+AVGmzHYGJJ5dRFwQJ3zaOTTjs22ndmK0byFi+6cdm5OYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLXh6rXpjUhvzvQDqNsDtA62sXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTA5ZGVkZTYtMWJhMC0z Yjc2LThlNjctNzRmM2ExOGYyMmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhHJwyJ878lV/Oyk0xNa6Pzi6ivRG3j2pc++NruyZi7ekv/y7/fDabf hVZM05GIQa/vN2GXBTJZAlrDvzm0JjGh3wCfDrqVd2SXajiAfjfek5ZOdyGJ/MjC FREFIqfCj7lqaBt6ptarEgxs81piXct1jdZFOIp//DqcC+VOMultr7R1vl8uZ/F6 dJfDqeyR/p0Nyauim6mHPMRwbF3SU/+miCWeBDOJ1i/UUILUObDVvidKlwyLy4oQ XR6UVjbIlqdP5tDhwfbi4zILOvF7XAH+uX/AgglEJ2ja9Ig+lvaFpwcTRg/UX7Ey s7/VIhyErPHEbxVQ6oICwKNDx5oasTw= -----END CERTIFICATE-----Generated at Wed Sep 23 06:46:32 2026 by rpki-client