$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e31207c-7d4d-39ec-a200-a4a99d81de25.roa File: 6e31207c-7d4d-39ec-a200-a4a99d81de25.roa (raw, json) Hash identifier: tJ0jlmxghWaDPU01Y89bhxhP09SVQonoD0nEOXdcs/k= Subject key identifier: 47:99:76:07:2D:15:05:C5:F3:FF:F4:02:17:15:D3:E1:BA:7E:18:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4F082702E7BE4022976E3E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e31207c-7d4d-39ec-a200-a4a99d81de25.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.219.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:27:02:e7:be:40:22:97:6e:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=d30cec1b-75b8-4610-93da-41095a560a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:73:31:e1:84:03:32:01:90:90:de:36:ae:da: 01:fa:c2:e9:95:4b:90:f0:67:9f:15:22:1c:04:f7: 88:c3:6d:12:8b:c4:3f:6d:94:b3:b6:66:cb:be:b6: a1:7f:6f:d6:1f:30:d0:bb:55:af:a2:84:17:50:e9: 40:e2:1a:91:6d:57:2e:92:53:b9:37:2b:33:0a:6f: a2:82:2c:23:89:ba:37:7a:a1:0f:1b:33:de:c9:40: b8:59:22:23:3f:04:41:7b:e8:08:e8:98:69:7a:71: d2:5c:cc:6a:28:35:57:c8:d5:ca:2e:6f:d1:4d:2b: ac:c3:9b:14:ec:fd:21:ea:bf:ad:a9:66:22:23:40: 1b:9a:51:56:d3:fe:80:7a:cb:16:0f:80:82:f1:c7: b5:fe:9c:07:2f:f0:41:98:83:e6:8a:59:f9:26:6a: b5:de:a4:b9:e6:35:0b:1e:54:72:84:14:07:e9:32: d2:fd:d9:0c:2e:0b:7a:b7:ba:e0:1a:ac:ee:34:04: 06:24:5a:42:d4:85:61:d7:9a:a6:58:18:e3:a4:aa: 1a:22:2c:60:8a:9d:c0:f6:4d:e8:72:34:25:c1:47: e6:36:7f:d4:f1:41:34:9f:27:6e:2f:97:2d:2f:40: 16:05:7b:5b:29:46:fe:32:da:7d:7d:74:f6:84:f8: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:99:76:07:2D:15:05:C5:F3:FF:F4:02:17:15:D3:E1:BA:7E:18:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e31207c-7d4d-39ec-a200-a4a99d81de25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8e:22:06:3c:83:3b:5f:0e:dc:3f:e1:c0:37:f2:46:20:1f: 19:bf:70:20:29:7e:ed:8e:d5:52:be:a3:24:e7:dc:26:37:7f: 7b:a3:c1:92:20:ca:a4:b6:0d:81:f1:c6:86:84:ed:ab:e9:be: 6a:cb:79:06:fb:64:6b:9d:a9:d5:9f:b5:ca:0e:6c:25:2f:b9: 50:5a:17:35:b0:18:37:cb:8a:fb:55:f4:80:74:00:6f:13:09: 00:6c:7b:24:a5:e6:6d:24:57:9c:1e:35:5a:16:17:6c:df:26: 90:8a:29:ef:1b:c0:89:16:53:c7:88:27:47:2a:d4:0d:7d:2c: 67:1c:9a:fe:86:ad:f7:1b:8c:ea:20:ae:93:1f:e7:70:4c:ee: 16:17:74:88:30:46:bf:b1:a4:48:4e:48:8f:7e:82:39:a5:12: 8e:f1:26:c3:9d:82:19:8e:b7:f0:46:58:54:79:81:39:fd:7f: 36:d5:22:1b:98:f4:f8:54:77:6b:97:c9:bf:2e:6e:a2:f6:e6: 71:39:e0:8d:8a:ee:9e:bc:24:96:99:b9:e0:e0:0f:65:85:c6: 8b:ec:e7:b6:e0:70:89:15:bd:2d:ed:6e:3f:9d:80:0f:f5:4b: 5c:e0:90:37:4c:c9:a5:ff:22:af:b4:65:f4:af:6c:57:82:88: 1f:9f:8d:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCCcC575AIpduPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZDMwY2VjMWItNzViOC00NjEwLTkzZGEtNDEwOTVhNTYwYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXMx4YQDMgGQkN42rtoB+sLplUuQ8GefFSIc BPeIw20Si8Q/bZSztmbLvrahf2/WHzDQu1WvooQXUOlA4hqRbVcuklO5NyszCm+i giwjibo3eqEPGzPeyUC4WSIjPwRBe+gI6JhpenHSXMxqKDVXyNXKLm/RTSusw5sU 7P0h6r+tqWYiI0AbmlFW0/6AessWD4CC8ce1/pwHL/BBmIPmiln5Jmq13qS55jUL HlRyhBQH6TLS/dkMLgt6t7rgGqzuNAQGJFpC1IVh15qmWBjjpKoaIixgip3A9k3o cjQlwUfmNn/U8UE0nyduL5ctL0AWBXtbKUb+Mtp9fXT2hPiKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEeZdgctFQXF8//0AhcV0+G6fhh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmUzMTIwN2MtN2Q0ZC0z OWVjLWEyMDAtYTRhOTlkODFkZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9uqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaOIgY8gztfDtw/4cA38kYgHxm/cCApfu2O1VK+oyTn3CY3f3ujwZIg yqS2DYHxxoaE7avpvmrLeQb7ZGudqdWftcoObCUvuVBaFzWwGDfLivtV9IB0AG8T CQBseySl5m0kV5weNVoWF2zfJpCKKe8bwIkWU8eIJ0cq1A19LGccmv6GrfcbjOog rpMf53BM7hYXdIgwRr+xpEhOSI9+gjmlEo7xJsOdghmOt/BGWFR5gTn9fzbVIhuY 9PhUd2uXyb8ubqL25nE54I2K7p68JJaZueDgD2WFxovs57bgcIkVvS3tbj+dgA/1 S1zgkDdMyaX/Iq+0ZfSvbFeCiB+fjdk= -----END CERTIFICATE-----Generated at Mon Sep 28 22:49:37 2026 by rpki-client