$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa File: 864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa (raw, json) Hash identifier: AImf0NTuCWW8T7mMDISQv+8hQoouvsOriokiZJr7sxA= Subject key identifier: A6:F6:11:4E:8D:07:FA:19:36:9F:CE:18:17:36:E0:67:3C:5F:B3:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985DCBCFC99722A278ED5B8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.207.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:dc:bc:fc:99:72:2a:27:8e:d5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4a37c57-de16-4c2d-ac8d-6f46ded3afc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:21:50:26:bc:90:23:9e:ab:5a:1b:d6:30:8a: e6:e2:e0:9c:64:0b:76:f2:41:d4:78:0d:c4:39:ca: 52:84:86:e6:04:aa:a0:f7:7d:bc:89:cd:5b:45:16: 4b:86:8c:1e:9c:7c:ba:af:5b:4a:80:5a:6b:6a:46: 60:4b:55:b5:15:30:30:fc:09:9a:fc:d3:25:c9:48: 43:4f:ad:bc:12:49:77:1f:2e:69:eb:0a:e7:33:af: 0b:97:10:a8:53:fe:4c:23:bb:d7:46:87:d3:42:ee: 18:66:61:18:11:a9:47:78:22:20:10:fe:3f:15:b4: d5:b1:ff:64:ac:91:fc:e2:22:4b:70:0b:d2:0f:88: cb:ed:57:b9:96:f9:77:4c:f1:dc:78:d5:ce:ce:ca: 9b:62:3d:fc:80:26:fe:c5:f4:df:2b:62:d0:34:37: 72:80:ce:39:d7:c9:d3:39:79:6a:51:dc:c4:34:f3: d8:2a:c7:12:23:b0:e0:36:6c:a7:e1:a2:a2:fe:a9: 5a:ea:6a:51:32:fd:0b:c1:9a:05:56:64:06:6f:ff: be:0a:d8:5d:7a:0c:99:43:c6:59:5b:fa:77:bf:36: 76:dd:5d:3a:e9:ea:ed:b3:89:e8:e5:1d:db:3b:e9: ec:39:09:2a:62:ea:35:6b:17:d4:8d:14:04:a9:9c: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F6:11:4E:8D:07:FA:19:36:9F:CE:18:17:36:E0:67:3C:5F:B3:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/864fc4b4-bb28-3388-b086-8f6e2ad09c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ff:31:6e:9f:26:ef:6b:93:6d:89:d1:df:df:01:1a:85:74: e0:3f:35:00:76:dd:c2:ee:87:c8:97:01:47:99:07:49:65:58: 06:df:9d:ef:64:cc:7d:ce:e0:39:94:c2:f5:ff:a4:b3:ea:41: b9:c1:ad:1c:81:f8:28:70:e1:69:ed:31:a5:45:6c:0c:55:6e: 0c:00:1f:fa:92:c3:10:9c:3d:92:32:95:1a:68:58:a6:f9:0e: 90:90:df:82:92:2a:17:33:f9:12:c4:de:38:9a:b2:ff:5f:a8: 50:79:90:87:ff:ed:27:84:31:68:16:84:70:c8:b6:9a:3e:0c: a3:d5:21:f4:e6:07:d0:9d:d1:40:ca:7e:9f:df:df:f9:9b:21: 3c:03:c0:f9:ec:49:aa:6e:ca:77:1c:02:39:4e:6a:a4:8e:d0: 7c:8a:94:cd:a9:de:75:bf:87:8b:32:1c:81:65:59:4b:00:17: f0:d4:70:84:29:04:ac:8c:29:a3:68:fb:b0:31:dd:0b:e0:97: dc:c5:6a:25:74:e1:f3:83:5b:8d:40:e7:40:e8:c1:77:78:52: e6:a9:51:49:26:fb:f6:53:65:3c:6c:31:54:86:7f:8f:0d:83: 7a:ba:46:90:44:cf:47:4f:03:5e:d9:33:97:ac:1b:ba:89:86: 38:97:da:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhdy8/JlyKieO1bgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRhMzdjNTctZGUxNi00YzJkLWFjOGQtNmY0NmRlZDNhZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SFQJryQI56rWhvWMIrm4uCcZAt28kHUeA3E OcpShIbmBKqg9328ic1bRRZLhowenHy6r1tKgFprakZgS1W1FTAw/Ama/NMlyUhD T628Ekl3Hy5p6wrnM68LlxCoU/5MI7vXRofTQu4YZmEYEalHeCIgEP4/FbTVsf9k rJH84iJLcAvSD4jL7Ve5lvl3TPHceNXOzsqbYj38gCb+xfTfK2LQNDdygM4518nT OXlqUdzENPPYKscSI7DgNmyn4aKi/qla6mpRMv0LwZoFVmQGb/++CthdegyZQ8ZZ W/p3vzZ23V066erts4no5R3bO+nsOQkqYuo1axfUjRQEqZx5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb2EU6NB/oZNp/OGBc24Gc8X7P5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODY0ZmM0YjQtYmIyOC0z Mzg4LWIwODYtOGY2ZTJhZDA5YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv/MW6fJu9rk22J0d/fARqFdOA/NQB23cLuh8iXAUeZB0llWAbfne9k zH3O4DmUwvX/pLPqQbnBrRyB+Chw4WntMaVFbAxVbgwAH/qSwxCcPZIylRpoWKb5 DpCQ34KSKhcz+RLE3jiasv9fqFB5kIf/7SeEMWgWhHDItpo+DKPVIfTmB9Cd0UDK fp/f3/mbITwDwPnsSapuynccAjlOaqSO0HyKlM2p3nW/h4syHIFlWUsAF/DUcIQp BKyMKaNo+7Ax3Qvgl9zFaiV04fODW41A50DowXd4UuapUUkm+/ZTZTxsMVSGf48N g3q6RpBEz0dPA17ZM5esG7qJhjiX2hg= -----END CERTIFICATE-----Generated at Sun Sep 27 14:48:53 2026 by rpki-client