$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56097b23-2a61-307d-94ad-a17014f89619.roa File: 56097b23-2a61-307d-94ad-a17014f89619.roa (raw, json) Hash identifier: eyphYqKoYckuYSxDGzvFajP2QMuBrD/lB+wv5j8tdfw= Subject key identifier: 3F:A2:C4:AE:B7:C5:E5:D0:BC:B5:10:B0:91:35:0C:E7:9C:87:6F:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985F7EFC2671B2EDE845400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56097b23-2a61-307d-94ad-a17014f89619.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.213.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:f7:ef:c2:67:1b:2e:de:84:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=28e9e614-b094-47e7-bc70-0c1950934531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c3:2a:76:1f:cf:4a:dd:4c:70:7b:9b:ac:2e: 22:e3:06:83:82:ff:8f:a3:2a:4f:73:ca:b5:bd:39: f8:8d:3f:ae:9f:b4:7e:11:b6:e3:b9:18:77:16:1a: 6b:c0:e2:f7:3f:68:73:12:59:d0:5f:c4:4e:5a:f9: ce:92:9b:fd:98:ab:db:07:01:03:53:6f:d7:bc:86: 19:20:32:72:8c:89:ec:8c:16:2e:84:79:4d:8e:55: c4:4e:1e:46:25:8c:29:ba:b4:a6:7f:5c:2f:57:60: ea:d3:33:58:2d:35:b5:9e:63:38:5c:07:3e:a4:ab: e8:ca:ae:12:10:11:92:32:bf:73:07:6e:a1:0d:b0: a4:18:6d:c9:53:1e:0a:31:b8:01:38:d3:bb:3a:00: 78:75:55:91:7b:0c:40:42:42:15:3c:dd:87:03:ca: 86:a5:b7:ba:21:28:0b:27:15:cb:cb:e9:dc:e4:b3: 79:f6:71:89:69:11:08:af:ff:53:13:ff:b1:50:d7: 5a:af:f3:32:81:4b:7e:8f:13:79:df:74:d5:73:90: cb:2b:f3:c9:49:3a:16:30:1e:e3:95:f3:63:08:11: 80:ba:18:9c:70:d1:0a:62:4a:f7:65:ee:8f:58:36: d0:c6:40:d2:e4:a0:90:18:97:6a:f8:08:49:6e:9b: 20:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A2:C4:AE:B7:C5:E5:D0:BC:B5:10:B0:91:35:0C:E7:9C:87:6F:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56097b23-2a61-307d-94ad-a17014f89619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:74:70:18:28:3c:2f:b5:07:32:91:52:73:db:ac:d7:4f:1a: a4:4c:6a:02:29:2d:48:e1:d7:26:9e:8a:9f:4e:96:a2:ad:52: f0:2c:3c:fd:43:77:6b:64:65:11:11:43:94:ca:e5:78:cc:35: 4c:2d:e3:51:96:ab:ce:7d:e5:00:a8:e3:27:36:a1:96:44:8d: 1a:3e:c1:95:aa:be:b6:5e:41:53:9c:8f:f7:c4:03:54:d4:e8: ad:c7:5a:98:d7:e3:97:8c:b6:1d:b9:62:f2:d8:04:fa:4d:51: a3:b2:0b:05:e5:60:1b:a5:2b:16:8c:25:61:9c:0c:3a:68:0b: 5f:cb:3a:18:f5:e8:ec:1b:b4:9b:75:f0:f2:a7:53:60:43:b7: d0:7c:63:3d:15:58:a9:00:49:c8:e3:b0:b6:0f:18:36:b1:b4: 23:00:98:c6:90:88:07:8b:22:4a:c2:d1:ac:c2:78:2a:02:fe: 92:21:e5:9c:1f:79:3a:df:aa:86:6f:3a:47:37:73:15:aa:1a: 54:6a:26:57:30:f1:7b:cb:73:fd:53:c2:16:fa:dd:f8:63:3d: 2e:63:f3:83:f9:7c:a7:a2:10:51:87:43:1d:6e:85:9c:0f:6e: 75:a9:d8:f6:00:7e:62:4c:75:9f:43:80:7c:58:e2:a8:57:3c: 6d:7e:24:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhffvwmcbLt6EVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjhlOWU2MTQtYjA5NC00N2U3LWJjNzAtMGMxOTUwOTM0NTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8Mqdh/PSt1McHubrC4i4waDgv+PoypPc8q1 vTn4jT+un7R+EbbjuRh3FhprwOL3P2hzElnQX8ROWvnOkpv9mKvbBwEDU2/XvIYZ IDJyjInsjBYuhHlNjlXETh5GJYwpurSmf1wvV2Dq0zNYLTW1nmM4XAc+pKvoyq4S EBGSMr9zB26hDbCkGG3JUx4KMbgBONO7OgB4dVWRewxAQkIVPN2HA8qGpbe6ISgL JxXLy+nc5LN59nGJaREIr/9TE/+xUNdar/MygUt+jxN533TVc5DLK/PJSToWMB7j lfNjCBGAuhiccNEKYkr3Ze6PWDbQxkDS5KCQGJdq+AhJbpsgiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+ixK63xeXQvLUQsJE1DOech2/sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTYwOTdiMjMtMmE2MS0z MDdkLTk0YWQtYTE3MDE0Zjg5NjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB90cBgoPC+1BzKRUnPbrNdPGqRMagIpLUjh1yaeip9OlqKtUvAsPP1D d2tkZRERQ5TK5XjMNUwt41GWq8595QCo4yc2oZZEjRo+wZWqvrZeQVOcj/fEA1TU 6K3HWpjX45eMth25YvLYBPpNUaOyCwXlYBulKxaMJWGcDDpoC1/LOhj16OwbtJt1 8PKnU2BDt9B8Yz0VWKkAScjjsLYPGDaxtCMAmMaQiAeLIkrC0azCeCoC/pIh5Zwf eTrfqoZvOkc3cxWqGlRqJlcw8XvLc/1Twhb63fhjPS5j84P5fKeiEFGHQx1uhZwP bnWp2PYAfmJMdZ9DgHxY4qhXPG1+JB8= -----END CERTIFICATE-----Generated at Sun Sep 27 06:46:46 2026 by rpki-client