$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e406017-fc74-38c3-a4ed-56476faa916a.roa File: 4e406017-fc74-38c3-a4ed-56476faa916a.roa (raw, json) Hash identifier: IUZoxKwA/PZTgM+R+EW4nygMwW8AeeIQXMTzjPECbew= Subject key identifier: 82:7D:EF:A6:AE:9D:0E:D0:BE:3B:5C:8B:96:1A:7E:DE:B9:8E:C2:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49857A3594B0EC1FA1340EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e406017-fc74-38c3-a4ed-56476faa916a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.207.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:7a:35:94:b0:ec:1f:a1:34:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dfb949db-b44e-45dc-a6ef-a76f79222ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bd:11:5a:6f:68:7b:47:b1:c5:09:79:97:08: 5d:a2:30:2b:d1:ea:79:a4:97:cb:e7:59:82:a9:8e: a4:bc:19:d7:0f:c3:f0:9d:5b:a7:d6:19:fd:eb:ff: 00:b4:d9:08:1a:24:ac:18:61:22:2c:c6:f0:0f:c5: 2f:61:09:8e:17:e0:03:3b:72:19:5d:31:1b:d1:f7: d6:2e:28:09:7f:fe:a0:69:05:3d:e3:fa:1d:81:f9: 6a:95:0c:d6:a6:69:ef:a7:43:b9:d8:29:4b:c0:73: a6:0c:27:a1:f7:9c:fb:6a:85:3c:ce:25:97:7c:b9: 26:bd:81:54:3c:56:07:92:55:1e:52:b2:46:35:fc: ce:02:34:51:8c:52:b1:4b:fa:3b:a4:c2:17:0f:0e: aa:56:7b:7e:b4:6c:bc:31:38:8d:c1:0c:06:97:cb: ee:69:e2:37:5d:81:95:7a:22:b8:58:2a:98:0c:14: b6:4e:c6:37:d3:66:c6:fe:64:eb:af:fa:ca:53:c3: 55:76:b9:a8:4d:ab:70:4c:7b:3f:e3:87:78:a2:c2: 11:60:b5:cd:c7:57:52:ba:46:f9:97:cb:4b:bb:c3: 78:30:d8:fa:0f:1c:2e:2b:b3:9b:bd:67:af:f5:25: a7:e0:52:3f:a1:47:3c:d9:f7:68:43:4d:12:01:0d: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7D:EF:A6:AE:9D:0E:D0:BE:3B:5C:8B:96:1A:7E:DE:B9:8E:C2:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e406017-fc74-38c3-a4ed-56476faa916a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:31:c7:c1:16:bf:dc:f1:e0:29:ff:93:8d:2c:96:ca:06:cd: 3c:4d:5d:52:05:9f:d3:82:42:47:f6:34:ed:45:a5:5c:c9:ed: 26:a8:60:92:e0:fb:f5:c1:14:22:68:f5:90:61:9c:c6:d5:da: a3:40:2e:dd:dc:8f:0d:16:43:d3:2c:b6:30:97:17:55:31:23: bd:cb:d2:84:77:0b:0a:4d:65:de:8d:b1:f1:33:f9:d8:31:39: b0:65:9a:88:26:76:30:5e:a9:5c:14:18:41:77:77:0e:b4:7a: 22:d3:3b:86:0b:73:19:62:1e:5b:19:2a:76:9a:05:8b:69:a1: 86:ec:b7:63:81:b4:be:cf:66:b7:9a:96:d2:2d:58:fb:91:81: 26:94:8b:86:83:a4:9e:ac:83:cc:8e:d9:24:25:b5:fb:07:6c: c8:ba:d5:0a:58:56:b9:05:db:bf:ed:cf:a3:c4:e5:25:99:9d: 3e:6f:d2:23:e7:56:4f:9e:38:20:42:74:ac:2f:19:05:d5:09: 7b:d8:78:86:25:8d:38:98:32:d0:7b:24:0a:62:8b:a7:9c:99: da:6d:54:2b:bb:e5:9a:81:02:fb:dd:d4:7e:b9:a3:55:ff:b1: 47:07:f4:17:8d:5e:30:bc:45:97:83:1c:87:ca:7c:9c:a8:76: 28:a3:fa:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhXo1lLDsH6E0DsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGZiOTQ5ZGItYjQ0ZS00NWRjLWE2ZWYtYTc2Zjc5MjIyY2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib0RWm9oe0exxQl5lwhdojAr0ep5pJfL51mC qY6kvBnXD8PwnVun1hn96/8AtNkIGiSsGGEiLMbwD8UvYQmOF+ADO3IZXTEb0ffW LigJf/6gaQU94/odgflqlQzWpmnvp0O52ClLwHOmDCeh95z7aoU8ziWXfLkmvYFU PFYHklUeUrJGNfzOAjRRjFKxS/o7pMIXDw6qVnt+tGy8MTiNwQwGl8vuaeI3XYGV eiK4WCqYDBS2TsY302bG/mTrr/rKU8NVdrmoTatwTHs/44d4osIRYLXNx1dSukb5 l8tLu8N4MNj6DxwuK7ObvWev9SWn4FI/oUc82fdoQ00SAQ1EWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJ976aunQ7Qvjtci5Yaft65jsJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGU0MDYwMTctZmM3NC0z OGMzLWE0ZWQtNTY0NzZmYWE5MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMxx8EWv9zx4Cn/k40slsoGzTxNXVIFn9OCQkf2NO1FpVzJ7SaoYJLg +/XBFCJo9ZBhnMbV2qNALt3cjw0WQ9MstjCXF1UxI73L0oR3CwpNZd6NsfEz+dgx ObBlmogmdjBeqVwUGEF3dw60eiLTO4YLcxliHlsZKnaaBYtpoYbst2OBtL7PZrea ltItWPuRgSaUi4aDpJ6sg8yO2SQltfsHbMi61QpYVrkF27/tz6PE5SWZnT5v0iPn Vk+eOCBCdKwvGQXVCXvYeIYljTiYMtB7JApii6ecmdptVCu75ZqBAvvd1H65o1X/ sUcH9BeNXjC8RZeDHIfKfJyodiij+oc= -----END CERTIFICATE-----Generated at Thu Oct 8 13:28:29 2026 by rpki-client