$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf23004-36d4-3d51-b88e-c1b3e2f919c5.roa File: 8bf23004-36d4-3d51-b88e-c1b3e2f919c5.roa (raw, json) Hash identifier: imAMcZPbFVEx6V2gJOcQg00xYciI9j1Y2Wghx3YP9+Q= Subject key identifier: 45:54:5B:B0:6F:A1:A4:37:17:0C:AB:33:33:3F:87:25:EF:A1:4F:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E4790356E5E11D82D9600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf23004-36d4-3d51-b88e-c1b3e2f919c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.204.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:47:90:35:6e:5e:11:d8:2d:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f517b220-669a-44d0-8b0e-f8a4b05218f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:b3:30:ea:4d:28:8e:0e:d1:24:84:1e:88: 7a:67:ff:f2:9d:29:e3:41:b8:7a:90:13:d4:d7:22: 55:13:84:64:f5:eb:07:94:ed:1d:aa:2d:12:04:48: 2e:90:7a:33:dc:31:b6:78:b3:60:8b:ef:84:18:4c: 9e:12:93:97:b0:b0:7a:e5:6d:0c:b0:57:d8:0e:f2: 04:49:ed:7c:f9:f4:94:42:cf:19:38:9d:67:26:c5: e9:3f:6e:ad:57:c2:9d:e5:99:57:c8:9f:55:03:84: 88:da:2e:75:6e:23:72:fd:a9:7c:5f:4f:ec:ba:f0: 5e:fe:d6:50:f7:a3:d8:b2:b7:a4:5c:3c:6f:fd:93: 73:38:c0:f0:1c:c7:4b:fe:1c:2d:88:3b:33:a8:ff: 03:34:cb:0b:e8:30:19:4f:c7:48:7c:25:bf:73:98: 9b:63:f0:4e:26:05:3b:b9:9b:c0:85:0c:89:81:b1: 68:88:4c:18:7f:3d:15:5c:6a:b8:3a:b2:87:0c:29: a9:a2:a8:7a:95:1e:6d:3f:86:88:0c:de:8e:df:8c: be:60:cd:0e:ff:25:cf:10:58:3a:18:8e:0b:be:8f: 8f:8e:cc:57:46:a0:d3:ca:aa:7f:34:61:8d:93:fe: 1d:bf:ad:45:3e:7d:88:84:41:43:c8:6f:72:c5:ce: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:54:5B:B0:6F:A1:A4:37:17:0C:AB:33:33:3F:87:25:EF:A1:4F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf23004-36d4-3d51-b88e-c1b3e2f919c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:20:88:76:d0:b6:52:a7:6e:c7:77:93:02:86:93:e7:76:6c: 17:aa:d8:c2:d9:a9:02:42:f3:ac:7a:35:af:87:2b:49:5e:85: 46:df:6a:81:68:87:89:9f:b1:48:56:3c:d3:2e:1e:4b:25:00: f4:d0:79:29:47:74:f6:c4:88:4a:3a:53:3b:41:bf:c8:fb:fd: 69:b8:b7:b2:05:80:d0:be:46:b2:0c:38:6e:9b:3c:29:c6:b5: a8:c8:eb:30:72:7f:c5:c1:34:79:89:23:51:40:0b:f7:5b:79: 0b:ba:5a:ab:dd:00:a8:08:0e:9e:cf:aa:e5:44:24:b1:e5:b5: 8b:1f:b7:06:c7:10:ee:31:f0:f0:52:56:a4:1d:6a:23:6e:11: 2d:4d:24:c2:85:aa:21:2d:79:b7:10:0f:27:b6:92:b5:c1:67: 99:7e:96:62:db:d3:64:d6:5d:93:9e:58:55:c6:1c:26:92:48: 48:53:89:a8:77:5d:1a:41:da:c9:77:85:d8:2c:19:16:83:fe: c3:6e:2b:13:79:27:03:14:c1:0b:88:34:9f:c9:31:3b:e0:56: 90:7f:0e:75:0c:e7:c0:13:81:bb:08:7c:8b:1b:fa:b1:10:95: f6:b4:7c:2f:35:44:ff:2c:19:ee:38:74:b5:8f:04:d4:e7:ef: 80:03:b2:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfkeQNW5eEdgtlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjUxN2IyMjAtNjY5YS00NGQwLThiMGUtZjhhNGIwNTIxOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXCzMOpNKI4O0SSEHoh6Z//ynSnjQbh6kBPU 1yJVE4Rk9esHlO0dqi0SBEgukHoz3DG2eLNgi++EGEyeEpOXsLB65W0MsFfYDvIE Se18+fSUQs8ZOJ1nJsXpP26tV8Kd5ZlXyJ9VA4SI2i51biNy/al8X0/suvBe/tZQ 96PYsrekXDxv/ZNzOMDwHMdL/hwtiDszqP8DNMsL6DAZT8dIfCW/c5ibY/BOJgU7 uZvAhQyJgbFoiEwYfz0VXGq4OrKHDCmpoqh6lR5tP4aIDN6O34y+YM0O/yXPEFg6 GI4Lvo+PjsxXRqDTyqp/NGGNk/4dv61FPn2IhEFDyG9yxc5qDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVUW7BvoaQ3FwyrMzM/hyXvoU8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJmMjMwMDQtMzZkNC0z ZDUxLWI4OGUtYzFiM2UyZjkxOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQgiHbQtlKnbsd3kwKGk+d2bBeq2MLZqQJC86x6Na+HK0lehUbfaoFo h4mfsUhWPNMuHkslAPTQeSlHdPbEiEo6UztBv8j7/Wm4t7IFgNC+RrIMOG6bPCnG tajI6zByf8XBNHmJI1FAC/dbeQu6WqvdAKgIDp7PquVEJLHltYsftwbHEO4x8PBS VqQdaiNuES1NJMKFqiEtebcQDye2krXBZ5l+lmLb02TWXZOeWFXGHCaSSEhTiah3 XRpB2sl3hdgsGRaD/sNuKxN5JwMUwQuINJ/JMTvgVpB/DnUM58ATgbsIfIsb+rEQ lfa0fC81RP8sGe44dLWPBNTn74ADsg8= -----END CERTIFICATE-----Generated at Sun Sep 27 04:55:39 2026 by rpki-client