$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa File: 8d7f9546-cc31-32f9-a120-101671b4588c.roa (raw, json) Hash identifier: mxWKb1MomYXChtmEOt/oI/CXyDCVx0N1dpzOzG6Bu/A= Subject key identifier: CD:31:A9:3A:02:E6:5A:DE:A7:F5:0A:B0:3E:F1:FB:17:CC:AD:BF:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D62D4D45EE2A800B975A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 9498 IP address blocks: 23.223.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:62:d4:d4:5e:e2:a8:00:b9:75:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=d906fc9a-f849-4ff5-9e95-07d135068689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:65:45:bb:29:68:d1:9e:5a:15:49:64:c3: 18:72:48:5a:a0:58:5b:77:a3:ea:9a:35:54:fe:cd: 01:34:38:8e:1f:2c:29:e3:0c:b1:e5:ad:c4:9f:ca: 22:af:e2:43:4a:76:2c:1d:62:e2:4c:9b:55:29:17: e7:eb:4e:0a:e5:b8:72:f8:77:6a:f4:b8:9d:dc:d1: 39:88:bf:d3:9a:9f:55:ab:ba:96:7f:a9:f1:cf:bf: 2a:48:b0:bb:46:a6:37:77:8d:a2:e4:d6:f7:7b:b1: d0:7c:91:38:1c:35:dc:af:2a:92:a0:d3:05:94:b1: 75:41:f4:67:60:19:6c:c0:00:d6:b0:98:41:a3:4e: 17:8e:0d:fd:b2:a8:35:9e:52:79:6f:74:92:73:24: 65:3a:0f:ac:80:68:d9:23:84:ab:a3:b2:f0:03:e5: 75:bd:b9:55:bc:b3:b4:92:b5:c2:cb:63:46:ab:f5: 8b:70:85:e1:03:ef:36:e1:32:29:ed:59:a7:e4:c9: 16:55:7e:75:cd:63:f9:54:39:1a:14:9f:ac:1c:b7: a0:80:46:ac:68:e7:e4:9f:60:18:05:11:4d:1d:d7: ee:74:65:6e:58:a9:ac:ee:a5:7c:d3:1b:40:05:da: 3a:1c:10:6e:ce:63:db:47:d0:47:db:5c:90:bf:04: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:A9:3A:02:E6:5A:DE:A7:F5:0A:B0:3E:F1:FB:17:CC:AD:BF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d7f9546-cc31-32f9-a120-101671b4588c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:55:8b:3b:0e:af:b1:32:44:3e:46:b1:75:36:0c:17:35:b7: 32:b4:1b:b7:01:c6:56:02:5b:fc:62:b2:b4:2a:dc:e1:2b:8d: 3d:04:9c:ef:d2:ff:e1:6e:24:37:d5:19:a4:e9:b1:fd:79:76: 81:ac:fd:a7:6c:44:fd:24:74:c5:f4:36:15:f7:f5:af:fa:5a: b6:e4:4c:eb:dd:e2:37:1d:91:15:18:96:a2:ed:8f:cc:9d:5c: 04:fa:9e:d7:89:36:4e:38:ee:d9:76:d3:88:f8:8e:aa:87:c5: be:6e:27:bb:37:8b:af:64:fb:f0:4b:fe:bd:42:f3:e4:65:dc: 5c:8d:96:3f:a7:7f:8c:6c:62:1e:c7:81:e1:c4:95:20:c3:71: b9:6f:e8:ce:a1:2f:e5:e0:13:95:5f:22:2f:92:11:20:1e:9f: 55:f0:43:1b:bf:08:27:4f:c1:00:23:a0:57:26:63:1b:54:0e: 6d:a8:bb:0d:04:86:57:14:d9:a8:c3:83:5d:3c:1e:d1:58:25: 74:78:e2:fa:a6:9e:6a:5e:db:64:83:9b:79:80:bf:56:fe:c5: 01:fd:ad:33:7d:23:2c:58:c7:bd:8a:23:76:e1:ff:3f:a3:39: c4:b6:56:34:cf:67:58:f0:c7:a5:01:ae:47:52:d5:38:10:b3: aa:b7:bd:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWLU1F7iqAC5daAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDkwNmZjOWEtZjg0OS00ZmY1LTllOTUtMDdkMTM1MDY4Njg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFllRbspaNGeWhVJZMMYckhaoFhbd6PqmjVU /s0BNDiOHywp4wyx5a3En8oir+JDSnYsHWLiTJtVKRfn604K5bhy+Hdq9Lid3NE5 iL/Tmp9Vq7qWf6nxz78qSLC7RqY3d42i5Nb3e7HQfJE4HDXcryqSoNMFlLF1QfRn YBlswADWsJhBo04Xjg39sqg1nlJ5b3SScyRlOg+sgGjZI4Sro7LwA+V1vblVvLO0 krXCy2NGq/WLcIXhA+824TIp7Vmn5MkWVX51zWP5VDkaFJ+sHLeggEasaOfkn2AY BRFNHdfudGVuWKms7qV80xtABdo6HBBuzmPbR9BH21yQvwQCxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0xqToC5lrep/UKsD7x+xfMrb8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ3Zjk1NDYtY2MzMS0z MmY5LWExMjAtMTAxNjcxYjQ1ODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5VizsOr7EyRD5GsXU2DBc1tzK0G7cBxlYCW/xisrQq3OErjT0EnO/S /+FuJDfVGaTpsf15doGs/adsRP0kdMX0NhX39a/6WrbkTOvd4jcdkRUYlqLtj8yd XAT6nteJNk447tl204j4jqqHxb5uJ7s3i69k+/BL/r1C8+Rl3FyNlj+nf4xsYh7H geHElSDDcblv6M6hL+XgE5VfIi+SESAen1XwQxu/CCdPwQAjoFcmYxtUDm2ouw0E hlcU2ajDg108HtFYJXR44vqmnmpe22SDm3mAv1b+xQH9rTN9IyxYx72KI3bh/z+j OcS2VjTPZ1jwx6UBrkdS1TgQs6q3vfk= -----END CERTIFICATE-----Generated at Thu Oct 8 06:13:22 2026 by rpki-client