$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa File: 3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa (raw, json) Hash identifier: DVPu3wPLklu6gTEqXYqjeY6VoAGTSgv9PXUwG8B3XoA= Subject key identifier: AB:C4:08:BC:07:FF:86:37:42:C0:56:FB:C1:03:9F:86:E0:19:F4:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D6B18F79D1A8B8CD69F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.223.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:6b:18:f7:9d:1a:8b:8c:d6:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=14355336-a9d9-4351-9d15-adfac7cab986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:76:6b:00:a4:09:80:95:a8:d3:ab:12:51:b0: 5f:96:db:76:09:22:aa:96:50:f5:99:2a:fa:be:e4: 04:c0:02:78:72:55:8a:f3:da:98:a2:6e:6b:80:85: ca:b0:c1:a7:59:79:48:7c:9b:52:0a:0d:b9:6f:50: 37:81:2e:0d:99:be:f5:da:53:c2:ff:6b:4b:51:fd: 7a:3b:f7:c8:52:47:14:44:cf:7c:f7:f5:33:54:8b: bc:31:c7:3f:46:38:29:b3:a1:29:a7:b9:e7:a0:1f: 81:8a:51:b3:7e:b7:3e:c9:f6:dd:53:ab:eb:2e:95: ce:3b:18:ca:2d:34:14:a2:0e:4b:3c:5e:ba:2e:f8: fe:31:cc:da:b3:6d:0e:b7:c2:36:84:c2:89:83:80: 01:f1:e7:9a:b8:0f:af:98:be:d8:e6:78:c3:52:25: 7b:a5:61:75:c2:fc:7d:7c:ca:57:15:91:99:b0:3a: 79:5a:05:2b:e1:ba:06:8f:30:41:91:aa:1d:9f:7f: 98:0e:30:e0:3e:0f:01:5c:cb:43:1a:b9:fe:c3:23: 76:f0:24:99:fe:76:00:0a:e8:bc:5f:4c:f2:2c:4a: 2a:d6:95:fa:20:48:7a:e9:33:e0:01:fb:bb:38:b8: 07:99:fd:d0:84:6f:f9:ab:e8:42:32:fa:2b:e3:79: a4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C4:08:BC:07:FF:86:37:42:C0:56:FB:C1:03:9F:86:E0:19:F4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f18e0ff-5f83-3116-ac63-3a9cedcf5742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f4:97:1b:50:4f:77:c6:22:df:e1:b9:1f:2a:c5:46:77:ed: 5d:7d:d7:74:f2:6a:a1:1c:36:73:4c:7a:32:02:e8:c1:be:90: 0b:d2:75:47:11:f7:9d:f1:5e:dd:ae:13:ed:76:55:e1:38:b3: f1:f1:67:f9:b8:ec:85:60:34:1b:e1:af:f1:6e:06:bd:00:f3: 53:5c:22:0a:3b:24:53:76:01:c1:a1:1d:88:a6:ae:98:c5:a9: 77:80:08:f8:fa:5a:90:37:4c:ed:61:23:95:4d:25:8b:64:49: aa:6f:75:6d:ec:7e:0a:f9:90:1f:b8:28:bd:62:08:7d:e4:5b: 63:70:19:58:a4:19:6a:98:60:42:4c:15:e0:13:56:48:48:c6: b3:71:8d:85:b8:4e:4f:98:7d:ea:b9:25:35:b6:a5:91:d2:4f: 59:f7:e9:8f:22:3f:2b:66:df:77:bf:bc:3e:59:05:70:42:64: 7c:d7:03:af:df:c5:8d:17:20:5f:6d:7a:04:6b:71:8f:d0:bf: a8:58:75:f4:26:8f:5e:35:76:9d:45:9b:15:b1:66:12:34:4f: 11:4f:d3:ff:23:9e:45:84:b1:c9:58:f6:af:3b:cc:4c:38:e0: e0:75:f1:e3:5e:4d:f0:06:7d:30:9e:42:49:b2:97:ed:96:19: db:57:8b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfWsY950ai4zWn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTQzNTUzMzYtYTlkOS00MzUxLTlkMTUtYWRmYWM3Y2FiOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHZrAKQJgJWo06sSUbBfltt2CSKqllD1mSr6 vuQEwAJ4clWK89qYom5rgIXKsMGnWXlIfJtSCg25b1A3gS4Nmb712lPC/2tLUf16 O/fIUkcURM989/UzVIu8Mcc/Rjgps6Epp7nnoB+BilGzfrc+yfbdU6vrLpXOOxjK LTQUog5LPF66Lvj+Mczas20Ot8I2hMKJg4AB8eeauA+vmL7Y5njDUiV7pWF1wvx9 fMpXFZGZsDp5WgUr4boGjzBBkaodn3+YDjDgPg8BXMtDGrn+wyN28CSZ/nYACui8 X0zyLEoq1pX6IEh66TPgAfu7OLgHmf3QhG/5q+hCMvor43mkcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvECLwH/4Y3QsBW+8EDn4bgGfSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YxOGUwZmYtNWY4My0z MTE2LWFjNjMtM2E5Y2VkY2Y1NzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF98/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA70lxtQT3fGIt/huR8qxUZ37V1913TyaqEcNnNMejIC6MG+kAvSdUcR 953xXt2uE+12VeE4s/HxZ/m47IVgNBvhr/FuBr0A81NcIgo7JFN2AcGhHYimrpjF qXeACPj6WpA3TO1hI5VNJYtkSapvdW3sfgr5kB+4KL1iCH3kW2NwGVikGWqYYEJM FeATVkhIxrNxjYW4Tk+Yfeq5JTW2pZHST1n36Y8iPytm33e/vD5ZBXBCZHzXA6/f xY0XIF9tegRrcY/Qv6hYdfQmj141dp1FmxWxZhI0TxFP0/8jnkWEsclY9q87zEw4 4OB18eNeTfAGfTCeQkmyl+2WGdtXiys= -----END CERTIFICATE-----Generated at Sat Sep 26 22:22:37 2026 by rpki-client