$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cba2f53-3e33-3638-b956-8741fd5d62dc.roa File: 8cba2f53-3e33-3638-b956-8741fd5d62dc.roa (raw, json) Hash identifier: mi8wWNsJ8SQUw1zX1X9Z9UFRB6F2jOflyCMn3qh1K3s= Subject key identifier: 9B:3E:F4:F0:F5:B4:81:4C:D6:58:40:82:83:8E:CE:9B:54:36:B1:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497ED4D5F0FE3AA42041BD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cba2f53-3e33-3638-b956-8741fd5d62dc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.214.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:d4:d5:f0:fe:3a:a4:20:41:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6b32e1af-3f39-4efb-90dd-00b51c3098fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e7:f5:3b:46:7d:76:32:81:de:84:48:d9:c0: ba:ce:20:ab:47:41:51:c6:5b:e3:98:f9:99:0e:c0: 56:d4:97:58:27:2f:d5:ce:b1:b6:67:04:5d:c9:57: 63:1b:eb:d4:71:7f:86:9b:9e:58:94:dc:ae:0a:4d: 41:1b:08:ea:e6:32:a3:d9:97:93:e7:ec:8f:66:b1: ea:7e:7c:65:d8:9b:84:90:dc:f6:f4:72:7e:a0:4f: ef:07:17:48:f4:b4:3b:1e:b6:ac:b7:5e:bd:19:33: e5:40:91:25:8d:13:9b:8c:18:7a:e1:e1:86:23:a3: ab:b0:77:65:17:06:e4:50:54:ca:88:18:97:83:d3: ea:12:6f:58:5f:ca:e8:12:da:72:4b:6f:ab:2d:25: 71:50:8d:e5:c3:fd:51:2b:df:cf:9f:da:3c:9a:ed: 03:e8:2b:53:8c:6e:76:08:12:20:25:ae:c4:d5:de: a1:a6:1d:9d:69:ef:81:51:47:05:ee:34:b2:a0:53: 64:25:5b:b6:d5:4d:0b:06:c1:f4:3e:9a:d4:df:68: 61:47:da:76:f1:f3:f8:14:f7:86:cf:24:aa:d8:11: 32:13:1c:8c:a5:bd:f0:02:14:bf:70:e6:e8:29:7b: 80:6f:48:1a:ca:12:55:3e:75:92:a2:0b:d5:88:58: 4b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3E:F4:F0:F5:B4:81:4C:D6:58:40:82:83:8E:CE:9B:54:36:B1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cba2f53-3e33-3638-b956-8741fd5d62dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:05:51:5c:54:b1:56:e5:ec:84:3b:a2:da:a4:53:d8:47:97: a3:d5:ba:f9:d8:e3:a9:80:36:93:4c:84:52:97:5c:54:f0:03: cd:10:b4:48:0a:cd:69:72:df:cc:2f:57:fb:bf:06:c1:9f:ab: c8:3d:23:11:f1:3a:6e:6e:82:83:81:39:27:d0:c2:84:e3:93: af:e2:d1:59:0a:7c:43:7b:c8:c0:26:fb:a3:e5:72:5b:06:50: e0:db:e1:8f:de:29:88:47:81:87:d4:e6:33:72:3b:91:4b:85: 76:6e:9a:ea:78:ee:9f:24:8c:22:2f:c0:b7:e1:dc:e6:51:9c: ac:74:7b:c9:67:62:1e:38:83:af:a7:e9:2d:2e:2c:8e:9b:04: 19:63:8d:ff:6a:09:30:b3:9b:2a:13:8b:16:f4:3a:f2:75:f8: e5:31:1b:11:ec:69:c6:e5:a5:e8:08:e8:cc:38:9f:61:96:e7: b9:31:5f:4e:39:78:6b:6c:55:39:0b:d8:b3:fb:41:7d:44:15: 79:d8:33:d8:bd:fd:43:f6:94:c2:3a:96:e0:2e:a0:20:2b:3c: 08:b2:85:31:37:51:d9:f5:ed:fb:be:5e:fc:98:96:5f:a8:8a: e2:b5:0c:54:76:dd:e6:d3:46:f6:d0:8e:43:70:29:42:f3:20: 33:33:57:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JftTV8P46pCBBvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmIzMmUxYWYtM2YzOS00ZWZiLTkwZGQtMDBiNTFjMzA5OGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+f1O0Z9djKB3oRI2cC6ziCrR0FRxlvjmPmZ DsBW1JdYJy/VzrG2ZwRdyVdjG+vUcX+Gm55YlNyuCk1BGwjq5jKj2ZeT5+yPZrHq fnxl2JuEkNz29HJ+oE/vBxdI9LQ7Hrast169GTPlQJEljRObjBh64eGGI6OrsHdl FwbkUFTKiBiXg9PqEm9YX8roEtpyS2+rLSVxUI3lw/1RK9/Pn9o8mu0D6CtTjG52 CBIgJa7E1d6hph2dae+BUUcF7jSyoFNkJVu21U0LBsH0PprU32hhR9p28fP4FPeG zySq2BEyExyMpb3wAhS/cOboKXuAb0gayhJVPnWSogvViFhLgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs+9PD1tIFM1lhAgoOOzptUNrEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGNiYTJmNTMtM2UzMy0z NjM4LWI5NTYtODc0MWZkNWQ2MmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9ZGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYFUVxUsVbl7IQ7otqkU9hHl6PVuvnY46mANpNMhFKXXFTwA80QtEgK zWly38wvV/u/BsGfq8g9IxHxOm5ugoOBOSfQwoTjk6/i0VkKfEN7yMAm+6PlclsG UODb4Y/eKYhHgYfU5jNyO5FLhXZumup47p8kjCIvwLfh3OZRnKx0e8lnYh44g6+n 6S0uLI6bBBljjf9qCTCzmyoTixb0OvJ1+OUxGxHsacblpegI6Mw4n2GW57kxX045 eGtsVTkL2LP7QX1EFXnYM9i9/UP2lMI6luAuoCArPAiyhTE3Udn17fu+XvyYll+o iuK1DFR23ebTRvbQjkNwKULzIDMzVxI= -----END CERTIFICATE-----Generated at Sun Sep 27 06:37:50 2026 by rpki-client