$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89063bbb-7e86-31aa-b924-0c721790162c.roa File: 89063bbb-7e86-31aa-b924-0c721790162c.roa (raw, json) Hash identifier: E1TFtz9xatxtGj6nQBbhTPDdEHL357MJYnhkQs7Fn1Y= Subject key identifier: 6C:5B:45:E9:C0:2F:42:EC:C2:45:A8:32:5D:76:7C:28:D5:57:59:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F0AA2258AC716C618732B2100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89063bbb-7e86-31aa-b924-0c721790162c.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.220.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:25:8a:c7:16:c6:18:73:2b:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=5e64d99e-f212-4fd5-aa80-4085ef08fb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:8f:eb:7d:4e:7b:05:55:0c:64:f8:9d:9c: 33:c8:a7:cb:41:d7:9c:15:eb:7a:e9:11:0e:05:e1: 93:15:74:9d:61:0e:75:fd:9f:44:b2:58:6a:4b:35: f9:0d:c2:dc:bd:55:d7:36:0e:0a:a2:66:e7:e3:50: 61:66:84:ce:7e:b3:2e:7a:03:c1:e3:0a:a6:92:bc: a5:77:e6:19:a4:77:4c:24:53:14:b6:84:0b:f3:04: ed:e0:46:a6:7a:93:e0:dc:62:85:e8:ba:df:4e:58: 7c:d2:1e:bc:be:d8:53:60:57:28:b8:b9:ed:fe:4c: 0b:37:a2:f6:b3:27:03:85:5f:0c:f4:3e:74:f8:d0: 6d:21:5b:34:93:82:d1:bb:91:51:d7:c5:9b:8a:24: 92:5b:a6:70:0d:92:79:18:a9:fa:47:72:5d:32:76: d7:3c:82:58:db:b9:20:72:7f:04:9b:64:21:51:41: f6:c4:61:00:2d:55:95:1f:ad:5c:b4:9a:3c:22:fe: 46:7e:b2:bf:ed:b9:90:51:f8:c7:9e:d8:c3:00:bb: 84:9f:7f:ae:0d:ef:ef:bf:13:e5:d5:cf:ac:86:80: 6c:4f:cd:7c:46:ef:07:3f:2e:98:c1:2b:c8:b4:a8: 3d:32:40:5e:c1:02:3a:92:99:b9:b0:e3:9c:17:4a: 91:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5B:45:E9:C0:2F:42:EC:C2:45:A8:32:5D:76:7C:28:D5:57:59:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89063bbb-7e86-31aa-b924-0c721790162c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c3:c0:7b:0b:bf:2b:cd:1b:1b:f6:07:5c:a3:ae:43:88:ad: 16:62:2c:04:1a:20:6c:08:9c:01:57:62:39:9a:aa:43:53:fb: 19:82:92:82:c3:1d:5c:15:a9:ce:30:4a:75:f8:95:95:13:aa: 6e:90:25:c4:6a:b9:d4:62:f8:01:39:67:82:fa:c5:9c:26:2f: 5a:fa:ba:b7:38:5d:04:65:f3:e8:cc:1a:04:c3:09:c5:4c:2d: e1:0b:66:88:66:c8:d7:92:be:24:f9:36:85:95:23:39:65:24: 87:7e:ee:b3:4e:dc:34:d6:54:47:3b:c2:ec:ac:f3:1a:53:14: 7c:2e:7c:55:bf:95:e4:61:cd:fa:58:35:e0:da:9e:1e:de:bf: 66:87:a2:31:9c:91:cd:13:91:7a:ef:05:95:67:c6:53:43:c3: cf:85:d8:c1:58:59:12:8c:0b:cd:5a:11:f4:e8:0f:a7:f8:e9: e5:21:67:63:d7:93:4f:0c:c1:70:db:d4:2f:d3:52:b6:6d:fc: 3f:9d:a5:93:f2:2e:d9:58:55:53:dd:ca:0d:18:be:dc:8c:eb: 46:48:ab:08:3d:a0:c0:50:95:ee:8f:dd:d8:27:fb:57:98:37: 7d:8f:f9:78:41:54:ab:38:d7:05:fe:b8:93:5a:dc:8f:b2:0c: 2c:ef:98:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoiWKxxbGGHMrIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk NWU2NGQ5OWUtZjIxMi00ZmQ1LWFhODAtNDA4NWVmMDhmYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNyP631OewVVDGT4nZwzyKfLQdecFet66REO BeGTFXSdYQ51/Z9EslhqSzX5DcLcvVXXNg4Kombn41BhZoTOfrMuegPB4wqmkryl d+YZpHdMJFMUtoQL8wTt4EamepPg3GKF6LrfTlh80h68vthTYFcouLnt/kwLN6L2 sycDhV8M9D50+NBtIVs0k4LRu5FR18WbiiSSW6ZwDZJ5GKn6R3JdMnbXPIJY27kg cn8Em2QhUUH2xGEALVWVH61ctJo8Iv5GfrK/7bmQUfjHntjDALuEn3+uDe/vvxPl 1c+shoBsT818Ru8HPy6YwSvItKg9MkBewQI6kpm5sOOcF0qR/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxbRenAL0LswkWoMl12fCjVV1l/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODkwNjNiYmItN2U4Ni0z MWFhLWI5MjQtMGM3MjE3OTAxNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9xkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXDwHsLvyvNGxv2B1yjrkOIrRZiLAQaIGwInAFXYjmaqkNT+xmCkoLD HVwVqc4wSnX4lZUTqm6QJcRqudRi+AE5Z4L6xZwmL1r6urc4XQRl8+jMGgTDCcVM LeELZohmyNeSviT5NoWVIzllJId+7rNO3DTWVEc7wuys8xpTFHwufFW/leRhzfpY NeDanh7ev2aHojGckc0TkXrvBZVnxlNDw8+F2MFYWRKMC81aEfToD6f46eUhZ2PX k08MwXDb1C/TUrZt/D+dpZPyLtlYVVPdyg0YvtyM60ZIqwg9oMBQle6P3dgn+1eY N32P+XhBVKs41wX+uJNa3I+yDCzvmIo= -----END CERTIFICATE-----Generated at Sat Oct 3 06:26:22 2026 by rpki-client