$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46898293-22e0-34e2-918a-a8f84b6a8ada.roa File: 46898293-22e0-34e2-918a-a8f84b6a8ada.roa (raw, json) Hash identifier: hA8OW6OByfA5RYtP4XTGD2t4refUAIyWMG/+l15WrS4= Subject key identifier: 85:43:9A:9E:E5:AC:BA:17:94:55:58:0A:95:1F:F6:81:D4:4D:C6:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F2EED1445E95FFA11B5C0D300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46898293-22e0-34e2-918a-a8f84b6a8ada.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.209.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:14:45:e9:5f:fa:11:b5:c0:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=df14439a-5645-439a-a64f-8f74ced64dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:05:95:b8:50:45:76:4b:17:c6:4a:77:44: 76:3b:61:c1:aa:8d:a4:af:26:4f:be:e8:19:cb:d7: 4c:a8:80:a5:9f:00:30:1e:25:ee:67:df:b8:de:1c: ec:a8:ae:3c:9d:ab:29:c8:e1:4a:fd:b5:63:13:1a: 44:77:5d:b5:e4:20:87:17:62:e4:e9:66:50:fe:a2: 63:79:b3:a5:10:c5:5c:07:21:fe:8d:14:5b:7c:98: 1a:a9:22:a5:15:c9:93:f9:2f:01:20:8b:23:25:75: ad:cf:44:43:eb:40:41:71:01:56:d4:44:b1:7b:bc: fc:c0:25:4b:9c:24:a7:ce:fe:a4:d8:b5:93:c5:90: 71:1a:61:47:0e:1f:58:2d:f2:03:3b:da:a7:0b:23: 4a:85:20:66:59:71:06:63:24:de:7d:5f:29:ed:67: c5:21:aa:b4:ab:b8:73:5f:de:00:ef:ba:f8:bd:5e: 33:73:b4:95:b9:a9:20:f8:cf:34:56:ed:7b:4c:c6: 34:d9:95:66:66:d1:a2:92:c8:62:e3:a4:0c:e6:dc: 9f:3a:b6:e6:c4:49:c1:67:52:25:48:bd:fc:b2:21: 23:b5:65:e4:1a:45:86:36:4b:f6:72:1c:e9:dd:8b: fc:ce:9a:4e:e8:55:80:a4:3a:f3:17:30:4a:17:27: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:43:9A:9E:E5:AC:BA:17:94:55:58:0A:95:1F:F6:81:D4:4D:C6:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46898293-22e0-34e2-918a-a8f84b6a8ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9d:28:ab:9c:5d:44:82:79:c1:ad:5c:b9:68:86:78:6a:a5: 5b:7a:0f:df:2b:30:f2:d5:5a:d8:20:a9:b6:04:e1:fb:90:1a: 0c:53:d2:ca:ae:f1:0f:b5:38:98:6c:44:81:51:66:1d:c8:3a: 00:ea:cc:3c:a1:07:0c:b6:c8:14:9a:14:ef:3d:2d:2f:4b:78: 40:30:bd:44:30:b7:47:86:91:b7:13:23:dc:89:17:ed:eb:14: 85:e5:89:a8:22:01:41:0a:79:60:1e:61:e1:00:7f:7d:92:01: fa:9c:b9:23:31:47:5b:62:d8:fb:4c:d8:20:9a:01:09:f0:d6: 03:91:7b:66:0a:2e:1a:13:d9:3d:64:40:09:96:c7:fb:ef:1c: 70:4b:c2:02:12:6d:45:fb:ed:4e:18:0b:44:3f:ea:28:12:63: 63:5a:85:5f:45:2b:9b:c9:c4:a7:fa:c1:53:d1:20:75:4b:c7: 0e:f9:62:7f:82:94:45:6c:2b:ef:cd:88:fb:1c:b3:7a:c9:b0: fb:08:60:bf:da:30:20:dd:b2:d6:65:94:de:0e:20:e7:ae:49: ac:58:24:07:15:88:4a:8f:cb:f7:f3:a4:0d:08:5d:fa:12:a8: 55:96:cb:88:d5:d8:39:b1:e4:6b:b8:f5:c0:07:60:58:da:08: 12:24:cd:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RRF6V/6EbXA0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZGYxNDQzOWEtNTY0NS00MzlhLWE2NGYtOGY3NGNlZDY0ZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQgFlbhQRXZLF8ZKd0R2O2HBqo2kryZPvugZ y9dMqIClnwAwHiXuZ9+43hzsqK48naspyOFK/bVjExpEd1215CCHF2Lk6WZQ/qJj ebOlEMVcByH+jRRbfJgaqSKlFcmT+S8BIIsjJXWtz0RD60BBcQFW1ESxe7z8wCVL nCSnzv6k2LWTxZBxGmFHDh9YLfIDO9qnCyNKhSBmWXEGYyTefV8p7WfFIaq0q7hz X94A77r4vV4zc7SVuakg+M80Vu17TMY02ZVmZtGikshi46QM5tyfOrbmxEnBZ1Il SL38siEjtWXkGkWGNkv2chzp3Yv8zppO6FWApDrzFzBKFyeoDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVDmp7lrLoXlFVYCpUf9oHUTcaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDY4OTgyOTMtMjJlMC0z NGUyLTkxOGEtYThmODRiNmE4YWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9HYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOdKKucXUSCecGtXLlohnhqpVt6D98rMPLVWtggqbYE4fuQGgxT0squ 8Q+1OJhsRIFRZh3IOgDqzDyhBwy2yBSaFO89LS9LeEAwvUQwt0eGkbcTI9yJF+3r FIXliagiAUEKeWAeYeEAf32SAfqcuSMxR1ti2PtM2CCaAQnw1gORe2YKLhoT2T1k QAmWx/vvHHBLwgISbUX77U4YC0Q/6igSY2NahV9FK5vJxKf6wVPRIHVLxw75Yn+C lEVsK+/NiPscs3rJsPsIYL/aMCDdstZllN4OIOeuSaxYJAcViEqPy/fzpA0IXfoS qFWWy4jV2Dmx5Gu49cAHYFjaCBIkzYk= -----END CERTIFICATE-----Generated at Sat Sep 26 07:37:05 2026 by rpki-client