$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ad9fb7f-e35a-3ab2-982d-ff8a3be098f1.roa File: 4ad9fb7f-e35a-3ab2-982d-ff8a3be098f1.roa (raw, json) Hash identifier: cErRXZcF1OrMoe7dOG+0F3uTx5otvVo5tILVthdaYoo= Subject key identifier: 24:1E:F2:1D:D9:B1:7E:1E:AF:69:E6:DA:50:0F:69:1D:29:D7:6C:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D4AEAAD2009ADDDF05D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ad9fb7f-e35a-3ab2-982d-ff8a3be098f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.59.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:4a:ea:ad:20:09:ad:dd:f0:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f4c7cd38-55ba-4a38-9818-1cda9dbea2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:71:a9:e7:48:23:a4:60:b8:93:d3:15:c6:ab: b3:68:14:f1:3b:a8:f7:f1:e6:37:2f:e3:a3:9e:2e: 04:a5:be:55:48:98:a3:95:b7:66:8c:bd:64:67:ef: 9d:09:0b:2f:81:61:f8:11:b3:3b:94:47:c0:e4:61: bd:0d:3c:7b:e1:b6:51:5e:ec:14:e9:74:75:4f:f6: de:2e:b0:3c:0b:56:21:e9:94:ee:13:41:f8:8e:8b: ef:df:0d:12:37:0a:f8:01:1d:23:2f:25:ff:08:55: 72:f5:45:64:72:59:d4:44:55:9d:c1:8c:c5:b7:4e: 86:98:6e:05:66:13:6c:1e:6b:da:31:46:83:d9:17: 98:a1:d8:5a:9e:15:70:5c:15:e1:80:4b:38:06:57: 08:d7:74:d7:55:3b:86:4a:1c:14:70:b7:ed:6a:71: 4a:17:e7:85:fb:d7:7b:af:3c:9a:ae:c4:13:ea:99: 8a:26:68:6e:a7:89:33:f1:8b:ff:3f:a7:d4:3a:c6: b3:40:fc:ed:25:71:d6:83:d2:3f:c4:72:87:d0:6f: 36:e5:d2:af:6c:95:3b:9f:24:d0:94:73:0f:97:7c: 1e:65:38:19:6d:1d:89:70:02:9a:16:3e:f9:62:c4: 33:dc:f1:0a:19:24:f8:9d:84:9c:9d:4c:21:b2:8e: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1E:F2:1D:D9:B1:7E:1E:AF:69:E6:DA:50:0F:69:1D:29:D7:6C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ad9fb7f-e35a-3ab2-982d-ff8a3be098f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d2:9e:9b:b6:c0:8a:25:c0:ab:b2:de:30:6b:02:28:38:a3: 6e:2c:18:f3:02:a3:57:5d:5a:0f:fe:51:01:95:36:53:80:a9: 95:38:7b:02:6d:cd:bd:ea:3d:ee:9b:97:fe:54:62:cc:92:85: a2:b9:2d:b5:39:e5:86:9e:aa:50:b0:44:12:49:03:9c:10:fe: 6a:d0:a5:aa:58:07:70:c9:55:f8:7d:2e:61:94:e5:38:cf:77: 03:1e:04:eb:7b:7a:31:27:7a:02:2d:5b:8c:88:c9:92:00:df: 2f:9d:00:c2:8c:e2:84:06:dd:18:f2:2c:14:1e:c9:0d:d2:ec: 90:ad:21:99:00:29:7e:ad:c5:1f:fd:87:d3:d9:22:4f:d0:05: f5:b7:0a:d1:e1:7d:79:b7:20:7c:cf:4d:0b:02:51:a4:5e:c6: 05:be:00:b8:54:4e:05:98:cd:08:ee:0f:a3:b7:2f:5e:7e:9c: c1:60:ed:23:90:32:e2:d1:93:bf:2a:b6:8c:e7:6f:9a:63:ba: 7e:62:f7:df:f2:7a:bc:ff:a3:02:0c:46:dd:3d:16:c3:01:f6: 18:30:76:98:ef:40:bf:ad:46:76:45:a4:e5:8e:14:6f:1f:9a: c3:8d:6e:65:3f:4d:41:87:db:f5:03:36:fe:80:9b:7d:2c:f3: 0f:a4:bd:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfUrqrSAJrd3wXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjRjN2NkMzgtNTViYS00YTM4LTk4MTgtMWNkYTlkYmVhMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXGp50gjpGC4k9MVxquzaBTxO6j38eY3L+Oj ni4Epb5VSJijlbdmjL1kZ++dCQsvgWH4EbM7lEfA5GG9DTx74bZRXuwU6XR1T/be LrA8C1Yh6ZTuE0H4jovv3w0SNwr4AR0jLyX/CFVy9UVkclnURFWdwYzFt06GmG4F ZhNsHmvaMUaD2ReYodhanhVwXBXhgEs4BlcI13TXVTuGShwUcLftanFKF+eF+9d7 rzyarsQT6pmKJmhup4kz8Yv/P6fUOsazQPztJXHWg9I/xHKH0G825dKvbJU7nyTQ lHMPl3weZTgZbR2JcAKaFj75YsQz3PEKGST4nYScnUwhso4KBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQe8h3ZsX4er2nm2lAPaR0p12x4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFkOWZiN2YtZTM1YS0z YWIyLTk4MmQtZmY4YTNiZTA5OGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvSnpu2wIolwKuy3jBrAig4o24sGPMCo1ddWg/+UQGVNlOAqZU4ewJt zb3qPe6bl/5UYsyShaK5LbU55YaeqlCwRBJJA5wQ/mrQpapYB3DJVfh9LmGU5TjP dwMeBOt7ejEnegItW4yIyZIA3y+dAMKM4oQG3RjyLBQeyQ3S7JCtIZkAKX6txR/9 h9PZIk/QBfW3CtHhfXm3IHzPTQsCUaRexgW+ALhUTgWYzQjuD6O3L15+nMFg7SOQ MuLRk78qtoznb5pjun5i99/yerz/owIMRt09FsMB9hgwdpjvQL+tRnZFpOWOFG8f msONbmU/TUGH2/UDNv6Am30s8w+kvaU= -----END CERTIFICATE-----Generated at Fri Sep 25 19:52:25 2026 by rpki-client