$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9673cb91-81c4-38d8-8992-01ab4804e0a1.roa File: 9673cb91-81c4-38d8-8992-01ab4804e0a1.roa (raw, json) Hash identifier: KH/b2rS+cWEMkc8FpAbH3TKgcpSv44BIGzPo/uvBFQk= Subject key identifier: 43:76:F2:51:E6:02:DA:38:78:86:2E:53:19:A0:93:7D:0B:E0:C7:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E5396CDC16306D9CE7080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9673cb91-81c4-38d8-8992-01ab4804e0a1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.208.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:53:96:cd:c1:63:06:d9:ce:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0cc51765-3c4a-4441-8d20-e0296dafefde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:89:f4:8c:bf:54:80:dc:16:e2:5c:f2:db: 6c:ee:66:82:1d:d0:fb:13:29:e4:51:50:d8:95:43: 79:7e:3f:88:65:30:44:c4:1c:67:84:dd:74:39:25: 98:89:84:43:cf:12:90:33:3a:ec:1e:b7:26:10:6f: f3:4c:82:04:e9:e4:07:e7:ba:ec:4b:ad:0c:5d:29: 68:97:a5:f9:54:c0:3d:8d:6b:71:0f:4f:a6:e5:59: 27:51:4d:ef:eb:83:4b:9b:95:d4:3e:9e:5a:0a:01: fa:11:dc:0a:3b:89:a5:a2:2d:d1:3e:f3:29:71:db: 2c:64:87:2b:6f:5f:e4:db:06:a6:14:c7:18:1a:31: 7f:73:b3:f1:54:40:49:80:94:dd:a8:ea:47:2a:67: e4:82:cf:1f:72:f2:68:42:95:11:10:24:73:f7:2b: 20:47:2f:93:fe:d1:4f:38:f2:50:15:df:62:eb:19: b0:6c:e0:a5:61:39:fc:9f:7b:7e:2f:6d:40:ec:65: 60:9d:dd:8e:f6:b3:fa:fd:c1:85:9a:fe:bf:64:8e: f0:7a:ed:16:ce:87:09:69:54:93:41:31:32:cf:80: be:8c:bf:ee:7f:1c:21:07:a2:83:ee:4b:c5:43:9d: 18:1b:d1:48:d9:d5:21:a9:06:24:0d:63:86:0a:46: 13:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:F2:51:E6:02:DA:38:78:86:2E:53:19:A0:93:7D:0B:E0:C7:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9673cb91-81c4-38d8-8992-01ab4804e0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7f:a9:cd:86:8c:d7:1a:e9:9d:73:96:bb:82:ca:d2:7b:0a: 34:61:ef:7d:57:9b:11:4d:f1:66:a1:ac:95:e4:ac:1d:11:4c: dc:13:14:58:78:ff:6c:f9:40:03:cb:29:1d:a5:82:29:71:9b: 38:29:5c:03:dd:83:ca:d0:4c:bb:5a:62:79:8f:65:75:cf:11: 15:29:23:60:79:eb:b8:63:80:f7:c3:25:f3:06:c8:98:0d:70: f7:df:b6:95:bd:43:d1:3b:11:2a:7c:ec:ac:ea:a6:ce:76:52: 7f:56:29:4d:42:a9:f7:4d:b1:da:14:c9:4a:82:6f:ed:be:2e: a5:68:77:ad:ea:89:aa:67:4c:02:4c:5d:c0:0d:fb:b1:5c:8f: 4b:ea:69:86:a8:35:f8:48:6a:27:b4:2b:80:67:93:d6:5a:d0: 85:ac:60:f2:51:a7:1e:3f:00:09:56:2e:90:69:fe:5a:2b:5e: ea:83:d3:21:32:e4:42:68:8f:0c:3b:36:a9:d4:de:51:2f:48: 01:49:cd:2b:1f:e5:d1:96:48:25:26:fd:7f:bd:b7:82:99:40: 9f:35:82:0f:ae:55:29:15:48:e7:97:c9:b6:1f:98:cb:e0:43: 6c:44:59:b1:83:c3:53:ac:a1:a0:18:da:a5:41:3f:86:c4:d3: 22:ed:34:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JflOWzcFjBtnOcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGNjNTE3NjUtM2M0YS00NDQxLThkMjAtZTAyOTZkYWZlZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyKJ9Iy/VIDcFuJc8tts7maCHdD7EynkUVDY lUN5fj+IZTBExBxnhN10OSWYiYRDzxKQMzrsHrcmEG/zTIIE6eQH57rsS60MXSlo l6X5VMA9jWtxD0+m5VknUU3v64NLm5XUPp5aCgH6EdwKO4mloi3RPvMpcdssZIcr b1/k2wamFMcYGjF/c7PxVEBJgJTdqOpHKmfkgs8fcvJoQpURECRz9ysgRy+T/tFP OPJQFd9i6xmwbOClYTn8n3t+L21A7GVgnd2O9rP6/cGFmv6/ZI7weu0WzocJaVST QTEyz4C+jL/ufxwhB6KD7kvFQ50YG9FI2dUhqQYkDWOGCkYT3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN28lHmAto4eIYuUxmgk30L4MczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTY3M2NiOTEtODFjNC0z OGQ4LTg5OTItMDFhYjQ4MDRlMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9BkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp/qc2GjNca6Z1zlruCytJ7CjRh731XmxFN8WahrJXkrB0RTNwTFFh4 /2z5QAPLKR2lgilxmzgpXAPdg8rQTLtaYnmPZXXPERUpI2B567hjgPfDJfMGyJgN cPfftpW9Q9E7ESp87Kzqps52Un9WKU1CqfdNsdoUyUqCb+2+LqVod63qiapnTAJM XcAN+7Fcj0vqaYaoNfhIaie0K4Bnk9Za0IWsYPJRpx4/AAlWLpBp/lorXuqD0yEy 5EJojww7NqnU3lEvSAFJzSsf5dGWSCUm/X+9t4KZQJ81gg+uVSkVSOeXybYfmMvg Q2xEWbGDw1OsoaAY2qVBP4bE0yLtNHk= -----END CERTIFICATE-----Generated at Sat Oct 3 19:52:59 2026 by rpki-client