$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43ac3807-97e4-3f2b-ac8c-eb415cefcf25.roa File: 43ac3807-97e4-3f2b-ac8c-eb415cefcf25.roa (raw, json) Hash identifier: S2JJIEZQy669H5GKfDhqu5pHubapSb/W8D8weXhBwTg= Subject key identifier: 40:DD:82:5A:B4:B4:0A:4B:BC:22:2C:77:95:6B:B6:D7:B2:83:4E:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4278236F9BF0543B3B8FDC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43ac3807-97e4-3f2b-ac8c-eb415cefcf25.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.47.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:23:6f:9b:f0:54:3b:3b:8f:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=b9479f39-7089-4973-8e13-1f8d90c10dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:1a:5e:90:44:f6:9a:82:6a:44:5e:68:54: 48:bc:bb:e1:68:22:03:a2:d8:26:c4:2b:f6:38:21: 38:61:54:0e:14:19:bc:a9:e5:06:a3:80:2b:4d:42: 0f:87:19:d6:83:a8:d8:b1:b1:c5:35:64:14:95:41: 75:0b:c6:af:6f:e8:98:41:34:1f:17:34:ec:92:51: 0c:58:4f:19:43:4d:1f:59:cd:15:ec:88:3d:41:1e: 99:97:fe:94:4e:fd:a5:93:68:38:a0:a4:e3:d2:48: 34:44:04:3f:0e:8e:e8:51:b6:8a:23:d7:0c:7b:c6: 33:3c:52:7c:e2:3f:02:61:b4:9e:4f:83:a7:66:39: 55:0d:b1:13:67:fd:ab:37:fd:1a:fc:8c:9a:ef:c1: 0d:71:5d:ff:21:2c:b1:6d:6e:5e:07:3f:f7:66:d4: fa:bf:f8:e6:76:f1:b6:80:72:79:6d:5e:dc:db:2c: 6e:b1:73:9b:54:64:1d:3a:ac:c5:05:c3:8f:48:bb: 46:24:a8:14:c2:37:1c:f3:75:ac:5c:b1:e4:33:58: 95:17:8d:d7:10:cd:55:7b:07:fd:80:45:10:31:09: 99:32:c0:03:d3:7e:d3:a2:03:75:0f:fd:cc:e3:de: 87:b1:31:a7:c5:f5:30:fa:a9:f7:c4:68:ed:d7:10: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DD:82:5A:B4:B4:0A:4B:BC:22:2C:77:95:6B:B6:D7:B2:83:4E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43ac3807-97e4-3f2b-ac8c-eb415cefcf25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.47.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:14:de:db:55:91:bc:bf:2b:83:48:f1:e2:84:86:36:95:9e: f3:ab:01:b9:22:58:e9:b6:91:37:2a:05:92:85:e0:2c:c8:a5: b8:d8:b7:8d:3f:f2:1f:68:56:12:88:41:d4:67:e3:98:e7:68: c1:f3:a7:84:dc:a9:97:22:5d:18:32:14:2e:6f:11:d2:d9:e9: 5f:52:01:88:df:1f:06:85:52:7f:2c:18:70:fd:c1:b0:c2:ff: 60:63:43:5d:20:db:63:26:9d:58:c3:62:18:0d:32:c8:e4:d0: 2f:52:8b:81:83:cd:45:20:9c:51:43:ff:a2:c1:76:f3:bf:5a: 19:f6:7e:27:d2:08:e4:49:8b:c1:97:7c:7d:3b:44:89:5e:f6: a8:dd:e0:82:e6:1b:eb:a8:5d:40:1c:03:93:ef:3e:5e:b1:10: 14:59:88:1e:56:b9:af:67:4b:b9:6d:78:ed:e0:e4:b7:b6:f4: a8:72:24:a2:77:c2:d6:66:97:40:09:61:d0:ea:88:35:01:9a: 64:8a:ce:40:82:60:e9:f7:e1:a6:43:be:c2:cd:6e:78:62:68: 50:83:1b:a7:89:4a:57:97:f8:30:87:63:87:0f:46:33:c2:61: df:4d:80:30:b5:47:31:52:90:90:e8:25:cc:ab:e3:2a:7c:64: 48:49:c8:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCNvm/BUOzuP3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Yjk0NzlmMzktNzA4OS00OTczLThlMTMtMWY4ZDkwYzEwZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4MaXpBE9pqCakReaFRIvLvhaCIDotgmxCv2 OCE4YVQOFBm8qeUGo4ArTUIPhxnWg6jYsbHFNWQUlUF1C8avb+iYQTQfFzTsklEM WE8ZQ00fWc0V7Ig9QR6Zl/6UTv2lk2g4oKTj0kg0RAQ/Do7oUbaKI9cMe8YzPFJ8 4j8CYbSeT4OnZjlVDbETZ/2rN/0a/Iya78ENcV3/ISyxbW5eBz/3ZtT6v/jmdvG2 gHJ5bV7c2yxusXObVGQdOqzFBcOPSLtGJKgUwjcc83WsXLHkM1iVF43XEM1Vewf9 gEUQMQmZMsAD037TogN1D/3M496HsTGnxfUw+qn3xGjt1xAFjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDdglq0tApLvCIsd5Vrtteyg048MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNhYzM4MDctOTdlNC0z ZjJiLWFjOGMtZWI0MTVjZWZjZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy/PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIU3ttVkby/K4NI8eKEhjaVnvOrAbkiWOm2kTcqBZKF4CzIpbjYt40/ 8h9oVhKIQdRn45jnaMHzp4TcqZciXRgyFC5vEdLZ6V9SAYjfHwaFUn8sGHD9wbDC /2BjQ10g22MmnVjDYhgNMsjk0C9Si4GDzUUgnFFD/6LBdvO/Whn2fifSCORJi8GX fH07RIle9qjd4ILmG+uoXUAcA5PvPl6xEBRZiB5Wua9nS7lteO3g5Le29KhyJKJ3 wtZml0AJYdDqiDUBmmSKzkCCYOn34aZDvsLNbnhiaFCDG6eJSleX+DCHY4cPRjPC Yd9NgDC1RzFSkJDoJcyr4yp8ZEhJyMA= -----END CERTIFICATE-----Generated at Wed Sep 23 01:02:30 2026 by rpki-client