$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f59f28a-b976-3a47-be82-92735952419c.roa File: 7f59f28a-b976-3a47-be82-92735952419c.roa (raw, json) Hash identifier: IUGKwxzXAjFJqB8ivW+aAGdXiWTj0y5tZpbma5e0k+g= Subject key identifier: 80:89:55:68:5D:C2:06:6C:D1:E3:F6:CC:86:AA:8E:67:1C:7C:F9:BF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49858202ABB72967C6528880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f59f28a-b976-3a47-be82-92735952419c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4788 IP address blocks: 23.220.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:82:02:ab:b7:29:67:c6:52:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5702695b-5dc7-4b3f-b1a3-34276061b645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c4:ca:90:45:df:6d:50:72:9f:1a:a1:a0:e2: 50:4a:09:31:37:28:41:5b:e7:5f:8d:12:27:89:66: 61:59:99:bf:ca:ab:2d:f1:22:5f:8f:2e:e2:13:5c: c0:26:e2:ea:54:91:51:ab:21:0b:76:d1:bc:9d:b3: cd:f9:bf:39:82:03:ca:37:d2:7b:3a:88:86:fe:55: 5e:b5:03:d9:0d:8a:ea:f8:dc:7f:57:20:2d:67:67: 9a:81:24:15:bb:9d:f2:ab:e7:b7:79:d0:ac:3e:67: 20:62:54:dd:f3:79:bb:44:21:1a:95:36:1c:4c:f6: 08:b6:fd:d4:33:5a:47:73:9c:a0:56:98:f3:b7:78: 73:81:e2:c3:c4:a0:96:2f:44:d3:b4:1c:9a:97:90: 87:8b:c9:26:58:e8:16:d8:84:97:53:ae:a4:90:85: 73:3f:bb:e8:3a:4b:44:42:d7:36:3a:f4:62:89:ec: 54:e5:dd:31:bd:20:b2:18:6f:a4:77:ab:82:8a:83: b2:d2:40:d2:1c:b4:3d:df:51:ab:eb:a2:fd:1b:3c: 8a:ac:bf:0e:94:5a:80:23:ef:e5:79:32:ce:ac:03: b7:31:3b:3d:08:ab:41:be:dc:48:7d:c2:58:f6:ea: ad:d8:5c:4b:74:f7:36:dc:79:19:bf:bd:d6:4d:5e: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:89:55:68:5D:C2:06:6C:D1:E3:F6:CC:86:AA:8E:67:1C:7C:F9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f59f28a-b976-3a47-be82-92735952419c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b6:ff:3e:09:2b:fb:10:72:59:b5:01:c1:11:1d:12:82:9f: 31:45:07:04:0f:59:4d:d7:a8:f2:fa:23:18:aa:16:60:65:9a: de:7b:58:14:22:d7:64:59:c4:95:13:1f:52:72:fa:be:c8:bc: d4:f2:c1:73:a8:54:58:86:e3:74:a8:0d:59:3a:37:be:e4:e5: 58:88:50:75:bc:31:c0:aa:ef:ef:75:dc:c6:b6:5d:3f:7c:c3: 4e:02:7c:8b:53:d1:3d:fa:c5:69:25:77:77:06:7a:03:24:46: 50:f0:df:e5:77:9a:76:8f:0c:b5:26:e9:4d:62:32:eb:43:52: cf:21:62:42:f3:36:98:56:bc:12:0a:c9:78:de:cf:01:6d:36: 71:ec:ec:33:01:b4:22:c5:19:dd:14:36:46:80:af:f9:57:05: f8:a4:18:52:63:9e:87:23:35:53:2c:2b:0e:16:80:70:2e:3d: b6:37:06:bc:ea:66:a8:57:d1:07:83:5e:4c:91:85:e8:60:63: 42:3a:db:4e:a9:db:db:99:d5:0b:87:70:2e:e0:29:63:1e:c8: d7:c0:9d:99:e1:a0:a4:b9:42:9e:18:87:f4:47:f1:be:0a:10: a9:7f:9f:24:08:46:ea:bf:b6:38:93:03:bc:3d:55:76:7c:c8: 86:72:cc:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhYICq7cpZ8ZSiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTcwMjY5NWItNWRjNy00YjNmLWIxYTMtMzQyNzYwNjFiNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcTKkEXfbVBynxqhoOJQSgkxNyhBW+dfjRIn iWZhWZm/yqst8SJfjy7iE1zAJuLqVJFRqyELdtG8nbPN+b85ggPKN9J7OoiG/lVe tQPZDYrq+Nx/VyAtZ2eagSQVu53yq+e3edCsPmcgYlTd83m7RCEalTYcTPYItv3U M1pHc5ygVpjzt3hzgeLDxKCWL0TTtByal5CHi8kmWOgW2ISXU66kkIVzP7voOktE Qtc2OvRiiexU5d0xvSCyGG+kd6uCioOy0kDSHLQ931Gr66L9GzyKrL8OlFqAI+/l eTLOrAO3MTs9CKtBvtxIfcJY9uqt2FxLdPc23HkZv73WTV5KuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICJVWhdwgZs0eP2zIaqjmccfPm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2Y1OWYyOGEtYjk3Ni0z YTQ3LWJlODItOTI3MzU5NTI0MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC2/z4JK/sQclm1AcERHRKCnzFFBwQPWU3XqPL6IxiqFmBlmt57WBQi 12RZxJUTH1Jy+r7IvNTywXOoVFiG43SoDVk6N77k5ViIUHW8McCq7+913Ma2XT98 w04CfItT0T36xWkld3cGegMkRlDw3+V3mnaPDLUm6U1iMutDUs8hYkLzNphWvBIK yXjezwFtNnHs7DMBtCLFGd0UNkaAr/lXBfikGFJjnocjNVMsKw4WgHAuPbY3Brzq ZqhX0QeDXkyRhehgY0I6206p29uZ1QuHcC7gKWMeyNfAnZnhoKS5Qp4Yh/RH8b4K EKl/nyQIRuq/tjiTA7w9VXZ8yIZyzIg= -----END CERTIFICATE-----Generated at Sun Sep 27 05:13:06 2026 by rpki-client