$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/532387df-aa9b-315a-b943-6e4aba991842.roa File: 532387df-aa9b-315a-b943-6e4aba991842.roa (raw, json) Hash identifier: V/C0VE5VqLnX+cRATGOoaeq7LYnM0ZRBE4Ql5bBVMAg= Subject key identifier: 5D:F8:91:F9:62:51:B4:9E:3C:15:07:A9:3B:E6:10:FA:51:03:7A:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985E38C6CBD72E868684800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/532387df-aa9b-315a-b943-6e4aba991842.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8966 IP address blocks: 23.208.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:e3:8c:6c:bd:72:e8:68:68:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d649c695-e0dd-422c-9537-9a247f52fbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5d:66:77:8d:d3:31:0e:71:c3:c8:8a:7b:89: 82:46:eb:4c:2e:ea:13:a6:f2:17:36:c8:53:d8:e0: f8:ab:32:a4:16:a2:a6:d5:55:ff:65:42:71:28:db: 2c:9e:48:5d:b1:3e:7a:82:11:ea:7f:3e:2d:6a:18: 42:7c:56:fa:9e:0f:c1:55:96:26:96:02:6a:e7:50: f0:d3:67:96:9e:c9:58:de:2b:7f:9d:10:48:de:ef: ca:0a:28:1a:7a:96:57:94:9a:aa:24:81:c3:a6:1e: 9f:1c:93:a8:33:e5:4c:0b:38:3d:f7:97:8d:e9:55: e8:6b:9b:35:26:c5:21:0f:82:b4:b0:2a:5e:c4:c3: 7f:ce:fc:03:34:ce:bd:4c:45:a1:72:f0:67:3e:5d: ed:2c:a5:e2:9f:8f:bb:74:b1:b5:53:b9:55:e8:c7: a2:b8:23:61:8e:11:1c:16:90:a8:bb:19:14:12:ff: b9:eb:c9:a8:52:95:8e:d7:e7:c6:67:e0:d3:34:ab: 15:cc:5f:57:52:a7:50:08:bf:c7:cb:4d:d0:eb:20: 5b:d5:53:02:ea:21:32:49:0a:c8:2f:aa:bd:7b:d7: 92:ce:c6:b1:53:35:ee:5d:04:9b:64:0f:54:c8:f0: 0c:66:87:8b:ec:1a:98:71:d9:65:40:ed:af:65:2c: 98:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F8:91:F9:62:51:B4:9E:3C:15:07:A9:3B:E6:10:FA:51:03:7A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/532387df-aa9b-315a-b943-6e4aba991842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ed:bf:3f:fc:6b:6d:56:4f:99:da:1d:48:67:0f:3c:6f:ce: 3a:b1:54:66:aa:6a:bb:9f:a2:04:cf:84:fd:15:c0:91:ae:45: e5:e9:92:52:4a:7f:63:de:31:34:bb:f2:b0:b6:99:88:4d:9b: 05:23:9e:84:b5:6b:c4:ce:6a:c0:a6:d5:e4:b7:92:42:34:30: ff:9a:dc:a5:a8:76:43:1f:7f:3f:d0:b1:9e:80:72:90:d0:13: 81:30:fa:b7:37:b8:37:71:f5:94:6d:8c:4d:68:94:f7:5b:00: 0d:79:a3:19:6c:c7:cf:e2:c0:01:f1:74:5d:84:0e:18:9f:95: 64:8d:8a:27:13:03:9f:fa:d7:24:9d:a1:43:d9:ff:38:8a:ec: 9f:f7:70:ad:5b:2e:ad:42:52:72:66:7c:d5:74:e3:ec:8e:17: fb:4e:24:ac:d8:7b:6a:44:4b:fc:ef:e1:e8:6e:15:07:c5:6e: e7:44:50:d7:2a:f6:57:70:eb:59:d3:59:fb:9b:92:ed:24:4a: 3d:b6:aa:f7:30:97:9b:94:fd:da:7d:d6:b0:e4:c1:55:2b:54: bc:01:06:97:be:12:69:0f:41:34:13:06:2e:40:e0:ff:68:5e: 6d:cf:c2:db:53:92:77:93:08:4a:ca:6d:91:7e:96:f1:cc:2f: 2e:1e:7a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JheOMbL1y6GhoSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDY0OWM2OTUtZTBkZC00MjJjLTk1MzctOWEyNDdmNTJmYmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV1md43TMQ5xw8iKe4mCRutMLuoTpvIXNshT 2OD4qzKkFqKm1VX/ZUJxKNssnkhdsT56ghHqfz4tahhCfFb6ng/BVZYmlgJq51Dw 02eWnslY3it/nRBI3u/KCigaepZXlJqqJIHDph6fHJOoM+VMCzg995eN6VXoa5s1 JsUhD4K0sCpexMN/zvwDNM69TEWhcvBnPl3tLKXin4+7dLG1U7lV6MeiuCNhjhEc FpCouxkUEv+568moUpWO1+fGZ+DTNKsVzF9XUqdQCL/Hy03Q6yBb1VMC6iEySQrI L6q9e9eSzsaxUzXuXQSbZA9UyPAMZoeL7BqYcdllQO2vZSyY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF34kfliUbSePBUHqTvmEPpRA3qFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTMyMzg3ZGYtYWE5Yi0z MTVhLWI5NDMtNmU0YWJhOTkxODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbtvz/8a21WT5naHUhnDzxvzjqxVGaqarufogTPhP0VwJGuReXpklJK f2PeMTS78rC2mYhNmwUjnoS1a8TOasCm1eS3kkI0MP+a3KWodkMffz/QsZ6AcpDQ E4Ew+rc3uDdx9ZRtjE1olPdbAA15oxlsx8/iwAHxdF2EDhiflWSNiicTA5/61ySd oUPZ/ziK7J/3cK1bLq1CUnJmfNV04+yOF/tOJKzYe2pES/zv4ehuFQfFbudEUNcq 9ldw61nTWfubku0kSj22qvcwl5uU/dp91rDkwVUrVLwBBpe+EmkPQTQTBi5A4P9o Xm3PwttTkneTCErKbZF+lvHMLy4eeqg= -----END CERTIFICATE-----Generated at Sun Sep 27 04:16:47 2026 by rpki-client