$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cffc1fe-2b48-3a24-8257-8c1335167c03.roa File: 4cffc1fe-2b48-3a24-8257-8c1335167c03.roa (raw, json) Hash identifier: PANtLxOtcNqF1Tmyga9FGhoz+gzkFH4CPgwxm6+dK6g= Subject key identifier: 1E:7D:8A:C6:A4:39:9A:11:BC:C1:59:3C:55:01:3B:4B:42:09:E3:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985FCCB4FF5ADEA69D24F10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cffc1fe-2b48-3a24-8257-8c1335167c03.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.215.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:fc:cb:4f:f5:ad:ea:69:d2:4f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0cd1fed6-ec8a-4c8b-84fc-3b03c4c90702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:06:b4:db:3e:a8:d9:e9:69:a6:99:4f:70: f5:10:fe:f1:d3:98:90:13:dd:69:79:8b:3c:94:97: 37:42:2e:07:ff:02:e2:e2:ef:ff:b1:7b:b4:d2:f5: 37:99:c2:9e:04:d8:02:e5:dd:dc:33:1f:00:10:66: e2:9c:cf:63:2f:af:d6:36:4e:54:7d:15:e7:d6:54: e8:eb:95:41:47:1e:22:9a:5d:76:08:c5:99:0d:96: b3:62:97:35:cc:7c:79:e9:48:31:cd:65:8c:e2:f6: 06:ad:85:f7:b0:02:9a:09:e4:81:4d:d2:48:6b:50: 61:84:1f:d8:e7:bf:03:b9:0e:8b:9f:d6:3c:b9:22: a1:46:d2:ac:9d:48:4a:56:4e:a3:96:3b:0e:30:b1: 3b:97:eb:b2:9a:58:6a:59:37:76:8b:e3:7a:c7:d0: 5b:f7:7b:9d:94:b3:c8:e3:12:56:06:7c:e4:60:c2: 3b:87:73:f5:e8:b9:58:7c:a3:18:cc:00:da:a8:7a: ef:be:07:6d:bd:dc:69:5e:6c:d8:c7:b8:78:bf:ac: 55:4d:1a:8a:ba:28:70:54:65:31:82:b2:ff:7b:c2: c6:5e:fa:6f:de:a1:4a:16:23:80:6e:18:fb:86:f0: 67:05:b5:c2:76:b6:08:d2:8f:ef:00:f9:15:cd:16: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7D:8A:C6:A4:39:9A:11:BC:C1:59:3C:55:01:3B:4B:42:09:E3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cffc1fe-2b48-3a24-8257-8c1335167c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:01:a4:6f:b6:e5:0f:0c:81:40:82:11:20:97:09:a0:11:80: cb:44:7a:8f:b5:75:80:3b:60:52:08:70:d0:b9:bd:88:3e:47: 38:eb:b1:16:cb:75:52:14:41:90:a4:7c:5f:64:d5:7f:f1:33: 02:2f:54:f3:51:0c:db:21:21:59:78:e0:37:38:f9:4f:51:c0: d9:2c:78:f1:d7:53:39:79:71:31:8a:c1:9c:c4:c0:4d:0d:73: f6:b9:11:11:15:75:56:8f:cb:df:57:85:e0:e1:40:ae:e0:9c: f5:3b:10:b2:36:21:03:52:a6:25:0f:b2:a0:d3:5f:68:34:39: 2e:b4:e4:3c:5d:0d:74:d8:54:ee:c8:01:92:4d:f8:4a:ee:a3: a6:a7:8d:a0:6b:b7:8d:11:65:ec:a0:b1:55:65:8e:96:95:78: dc:9f:2b:bc:2c:30:31:d0:6f:3a:3a:d4:ae:54:aa:8f:e8:aa: 61:d1:e5:72:05:44:e7:d4:7e:93:c2:0b:8b:90:85:e3:25:fe: 50:ee:d8:26:91:7f:29:4b:6b:41:2d:cf:4a:74:fb:94:42:af: b1:f0:58:42:42:9b:ce:be:2e:82:29:6f:d7:00:eb:26:65:2a: a0:3a:5b:88:66:57:68:e1:f9:36:49:3d:79:2b:69:f9:18:25: 36:d0:bb:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhfzLT/Wt6mnSTxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGNkMWZlZDYtZWM4YS00YzhiLTg0ZmMtM2IwM2M0YzkwNzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUAGtNs+qNnpaaaZT3D1EP7x05iQE91peYs8 lJc3Qi4H/wLi4u//sXu00vU3mcKeBNgC5d3cMx8AEGbinM9jL6/WNk5UfRXn1lTo 65VBRx4iml12CMWZDZazYpc1zHx56UgxzWWM4vYGrYX3sAKaCeSBTdJIa1BhhB/Y 578DuQ6Ln9Y8uSKhRtKsnUhKVk6jljsOMLE7l+uymlhqWTd2i+N6x9Bb93udlLPI 4xJWBnzkYMI7h3P16LlYfKMYzADaqHrvvgdtvdxpXmzYx7h4v6xVTRqKuihwVGUx grL/e8LGXvpv3qFKFiOAbhj7hvBnBbXCdrYI0o/vAPkVzRYVZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB59isakOZoRvMFZPFUBO0tCCeM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNmZmMxZmUtMmI0OC0z YTI0LTgyNTctOGMxMzM1MTY3YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9d2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4BpG+25Q8MgUCCESCXCaARgMtEeo+1dYA7YFIIcNC5vYg+RzjrsRbL dVIUQZCkfF9k1X/xMwIvVPNRDNshIVl44Dc4+U9RwNksePHXUzl5cTGKwZzEwE0N c/a5EREVdVaPy99XheDhQK7gnPU7ELI2IQNSpiUPsqDTX2g0OS605DxdDXTYVO7I AZJN+Eruo6anjaBrt40RZeygsVVljpaVeNyfK7wsMDHQbzo61K5Uqo/oqmHR5XIF ROfUfpPCC4uQheMl/lDu2CaRfylLa0Etz0p0+5RCr7HwWEJCm86+LoIpb9cA6yZl KqA6W4hmV2jh+TZJPXkrafkYJTbQu/U= -----END CERTIFICATE-----Generated at Sun Sep 27 06:42:38 2026 by rpki-client