$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9caf0331-3eab-3628-b298-597d125aa189.roa File: 9caf0331-3eab-3628-b298-597d125aa189.roa (raw, json) Hash identifier: Rhsa7BAoJmDN9BTtvHK4mh3TycRSlmDVj3vneqkxxck= Subject key identifier: AF:18:2B:BA:09:27:EB:40:83:0B:07:68:FB:F0:67:B3:33:6C:98:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49857ED1C4E1E1AE0DAAC800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9caf0331-3eab-3628-b298-597d125aa189.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 35994 IP address blocks: 23.213.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:7e:d1:c4:e1:e1:ae:0d:aa:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=742d9c33-dd08-47ec-b845-20a16b814201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ea:ff:95:ac:95:e3:f4:14:2a:86:74:1e:01: 28:35:12:cf:f9:3a:35:60:81:54:2e:a4:84:31:92: b0:16:d5:c8:a4:8f:72:5b:80:85:50:bb:f0:c4:fb: bf:15:de:70:ea:66:5a:b7:fd:4f:1f:1f:27:a0:7e: e9:50:b5:95:18:6c:12:da:db:a4:72:e3:88:06:be: 0a:67:14:3d:16:80:60:3e:26:aa:ed:17:4d:87:f1: 34:39:1a:8d:f9:ef:58:21:95:65:e7:21:5e:a9:e5: 78:a7:59:06:eb:35:d5:60:fd:fb:e8:bc:36:2e:35: f1:6b:ce:3c:72:ec:0b:30:06:b7:8b:fc:29:01:83: b6:57:c4:57:0d:bf:75:cc:fa:26:f7:ba:99:8a:7c: 01:05:4f:45:4d:be:a7:4d:ba:d0:02:98:92:d1:71: 83:b2:b3:a9:ec:e4:3a:fb:f4:fd:71:19:b4:69:88: a8:01:e5:c1:de:b9:cf:70:df:de:23:95:57:e0:d8: 0c:81:00:9a:e4:ce:8b:38:83:a5:c9:19:a8:f6:be: cb:53:f3:c6:0e:5a:a2:0b:26:fc:0d:92:c8:ec:85: 80:46:aa:a7:af:62:49:65:37:20:a2:02:9d:d4:ee: 94:25:9f:1f:74:bb:9b:b0:64:ec:bf:04:84:ef:da: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:18:2B:BA:09:27:EB:40:83:0B:07:68:FB:F0:67:B3:33:6C:98:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9caf0331-3eab-3628-b298-597d125aa189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:08:15:14:38:90:16:2e:4d:11:b7:89:8a:56:42:b2:d1:46: 6b:05:c0:b8:ab:bd:31:c2:25:7c:32:ab:68:7a:be:bb:03:b3: 4c:21:a1:bc:f9:7b:a4:b8:fb:fc:00:65:9a:de:5f:b9:49:2d: 1f:6c:79:33:29:27:01:31:36:8b:1f:d0:6b:76:c2:a8:58:79: 77:a6:a0:1c:88:4d:16:45:63:4b:46:71:aa:5c:b7:ac:67:84: f3:3f:53:4c:f3:18:79:76:5f:f2:f0:77:48:f4:0f:85:da:e4: 12:40:0a:65:0e:2a:a9:68:a6:8b:bd:7b:0c:7b:9c:e5:7e:49: 9e:97:74:28:2c:98:6f:fe:5d:75:d4:04:53:4f:5b:b0:d0:86: ba:c0:50:e9:3f:9a:2b:e6:5f:7b:1e:9e:75:cb:fd:b5:c5:f8: 50:e9:c1:37:2c:4c:fb:5a:99:1a:f6:95:3d:73:be:2e:5d:bc: a9:82:fd:11:24:74:15:43:03:fc:60:5c:62:0e:db:d9:8a:3a: a2:67:f2:77:02:60:e6:4e:45:98:df:fe:1f:d3:09:3e:8d:92: fd:43:fa:90:fd:a7:3d:fb:c0:45:5b:8d:f2:21:9c:36:99:06: 65:13:39:f3:14:5c:53:4d:b8:7e:83:9f:01:71:f0:96:65:6d: 42:67:d8:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhX7RxOHhrg2qyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzQyZDljMzMtZGQwOC00N2VjLWI4NDUtMjBhMTZiODE0MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOr/layV4/QUKoZ0HgEoNRLP+To1YIFULqSE MZKwFtXIpI9yW4CFULvwxPu/Fd5w6mZat/1PHx8noH7pULWVGGwS2tukcuOIBr4K ZxQ9FoBgPiaq7RdNh/E0ORqN+e9YIZVl5yFeqeV4p1kG6zXVYP376Lw2LjXxa848 cuwLMAa3i/wpAYO2V8RXDb91zPom97qZinwBBU9FTb6nTbrQApiS0XGDsrOp7OQ6 +/T9cRm0aYioAeXB3rnPcN/eI5VX4NgMgQCa5M6LOIOlyRmo9r7LU/PGDlqiCyb8 DZLI7IWARqqnr2JJZTcgogKd1O6UJZ8fdLubsGTsvwSE79rqpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8YK7oJJ+tAgwsHaPvwZ7MzbJj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWNhZjAzMzEtM2VhYi0z NjI4LWIyOTgtNTk3ZDEyNWFhMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkIFRQ4kBYuTRG3iYpWQrLRRmsFwLirvTHCJXwyq2h6vrsDs0whobz5 e6S4+/wAZZreX7lJLR9seTMpJwExNosf0Gt2wqhYeXemoByITRZFY0tGcapct6xn hPM/U0zzGHl2X/Lwd0j0D4Xa5BJACmUOKqlopou9ewx7nOV+SZ6XdCgsmG/+XXXU BFNPW7DQhrrAUOk/mivmX3sennXL/bXF+FDpwTcsTPtamRr2lT1zvi5dvKmC/REk dBVDA/xgXGIO29mKOqJn8ncCYOZORZjf/h/TCT6Nkv1D+pD9pz37wEVbjfIhnDaZ BmUTOfMUXFNNuH6DnwFx8JZlbUJn2IM= -----END CERTIFICATE-----Generated at Mon Sep 28 12:25:26 2026 by rpki-client