$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/460e3e5b-6cf1-32c7-9486-04b1c4f8a48b.roa File: 460e3e5b-6cf1-32c7-9486-04b1c4f8a48b.roa (raw, json) Hash identifier: EsqAJoSb/fSPISAj4f4qg6GbFs7OHvEdwdHiYEJC03w= Subject key identifier: 64:66:AA:18:A8:A6:22:B4:1E:14:19:76:2F:03:5D:D9:FD:71:87:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985C1C29EF2EEC79FEAC970 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/460e3e5b-6cf1-32c7-9486-04b1c4f8a48b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.203.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:c1:c2:9e:f2:ee:c7:9f:ea:c9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec74a77d-0620-4050-a9a0-738d4a718cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:6f:4c:c6:9b:0f:0d:4e:da:71:cb:a3:49: e1:95:30:29:1b:ac:91:c7:ae:c7:5e:3d:7e:0c:70: 40:6e:6a:c7:67:5d:8d:0b:7b:7a:1d:33:0b:3a:b0: eb:75:22:24:53:42:3f:77:9a:a3:fc:66:db:c7:3a: 77:4c:f8:df:e1:20:07:ff:e8:0a:de:9d:bd:61:fb: e4:9b:e8:9f:62:b3:26:74:fd:9d:e7:c8:f6:9c:d6: 12:4b:f9:2e:b6:76:ca:14:37:cc:d8:e5:2a:1e:3e: 97:70:11:fc:60:23:4e:a7:22:64:98:41:6a:bd:5b: f7:b6:0a:8b:59:76:43:80:ab:dd:16:ae:67:32:51: ad:69:a7:24:89:58:8c:50:2c:93:eb:26:0e:c8:85: 7a:fa:03:79:c4:b6:e5:38:11:02:f8:23:0b:56:1e: 96:43:c4:f6:de:39:99:bd:80:a7:2a:40:da:a0:fa: fe:9d:0e:50:75:c9:83:be:12:d9:e8:d0:a8:9c:6d: 5c:c2:8c:4d:b5:00:41:d6:2b:de:7b:57:96:42:44: f0:1c:93:16:73:2c:9d:c5:98:f1:e3:34:ed:dd:99: fe:ed:58:76:38:95:d0:c8:db:56:be:04:97:94:a7: 29:82:3c:1b:de:ea:f1:87:9e:b2:87:60:e6:0d:6e: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:66:AA:18:A8:A6:22:B4:1E:14:19:76:2F:03:5D:D9:FD:71:87:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/460e3e5b-6cf1-32c7-9486-04b1c4f8a48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f6:83:b3:02:5d:2d:e1:d5:8e:8c:a5:b2:c6:bb:89:57:78: 4b:28:04:c0:9e:f9:67:08:dd:c7:c6:6a:72:6c:22:4f:b5:63: 75:61:fb:8f:b6:7a:65:26:13:7a:0f:91:2f:e8:3d:30:db:d8: e0:7e:81:9d:75:63:2a:23:bc:46:12:c7:73:42:69:56:64:01: 32:07:83:30:a6:79:10:1e:23:59:03:de:fa:7f:cd:bd:8f:41: 17:03:7a:79:bd:3b:64:ce:23:26:22:14:c0:a4:8c:b7:06:17: 57:d3:e8:ec:70:79:bd:6c:ce:52:70:b1:cf:24:3d:d4:2f:c5: 77:26:04:7e:a9:b2:76:d9:28:b0:38:dc:07:9e:0f:f7:06:a8: e8:fe:a1:66:89:06:bc:c5:ed:48:d7:5f:b8:2e:6f:9e:72:71: 24:1c:0d:b3:bb:bf:87:a7:5a:ae:ce:ac:be:2d:6c:f2:1f:6d: db:c1:37:d2:cf:66:f5:fd:57:77:f2:46:da:40:25:41:86:a7: d2:d4:ee:06:74:9a:88:9e:fd:37:eb:ef:f0:9a:03:6b:18:ae: 82:70:29:d7:9b:5c:95:78:25:54:01:ac:64:0f:64:6c:bf:e4: 6d:1f:32:40:8a:23:ad:0d:69:3a:b9:cc:bd:95:9b:d3:93:aa: 2d:3f:c5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhcHCnvLux5/qyXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM3NGE3N2QtMDYyMC00MDUwLWE5YTAtNzM4ZDRhNzE4Y2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMxvTMabDw1O2nHLo0nhlTApG6yRx67HXj1+ DHBAbmrHZ12NC3t6HTMLOrDrdSIkU0I/d5qj/Gbbxzp3TPjf4SAH/+gK3p29Yfvk m+ifYrMmdP2d58j2nNYSS/kutnbKFDfM2OUqHj6XcBH8YCNOpyJkmEFqvVv3tgqL WXZDgKvdFq5nMlGtaackiViMUCyT6yYOyIV6+gN5xLblOBEC+CMLVh6WQ8T23jmZ vYCnKkDaoPr+nQ5QdcmDvhLZ6NConG1cwoxNtQBB1ivee1eWQkTwHJMWcyydxZjx 4zTt3Zn+7Vh2OJXQyNtWvgSXlKcpgjwb3urxh56yh2DmDW4IqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRmqhiopiK0HhQZdi8DXdn9cYc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDYwZTNlNWItNmNmMS0z MmM3LTk0ODYtMDRiMWM0ZjhhNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8umMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz2g7MCXS3h1Y6MpbLGu4lXeEsoBMCe+WcI3cfGanJsIk+1Y3Vh+4+2 emUmE3oPkS/oPTDb2OB+gZ11YyojvEYSx3NCaVZkATIHgzCmeRAeI1kD3vp/zb2P QRcDenm9O2TOIyYiFMCkjLcGF1fT6Oxweb1szlJwsc8kPdQvxXcmBH6psnbZKLA4 3AeeD/cGqOj+oWaJBrzF7UjXX7gub55ycSQcDbO7v4enWq7OrL4tbPIfbdvBN9LP ZvX9V3fyRtpAJUGGp9LU7gZ0moie/Tfr7/CaA2sYroJwKdebXJV4JVQBrGQPZGy/ 5G0fMkCKI60NaTq5zL2Vm9OTqi0/xVk= -----END CERTIFICATE-----Generated at Fri Sep 25 23:11:38 2026 by rpki-client