$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8386c20-44b6-35c1-8995-75d3f78ffde7.roa File: a8386c20-44b6-35c1-8995-75d3f78ffde7.roa (raw, json) Hash identifier: 1tJ1Pgg8isoNg0eYuenvSwgxq7NvPJ95seLNd7aUpTE= Subject key identifier: 03:6D:46:3C:1F:D3:DE:1F:83:BA:F4:31:CB:32:F7:95:39:C9:B8:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497EDC4B34058237C338D700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8386c20-44b6-35c1-8995-75d3f78ffde7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.215.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:dc:4b:34:05:82:37:c3:38:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ad7634e8-f883-417d-8907-a90e4489e630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d3:7e:6a:9d:11:69:ae:60:89:fb:4b:f5:0d: 69:b3:ee:2e:b0:04:99:9f:0e:89:c6:80:8a:d3:38: 9c:49:7b:5a:29:2f:00:1d:e9:ab:7c:de:23:fa:a2: 66:61:9f:a8:f2:a5:be:2a:fe:b4:79:2e:9e:a0:ef: aa:4d:c1:a9:61:82:d9:c9:25:7e:81:e4:57:88:fd: 6a:09:40:f5:67:c6:1d:bd:99:10:76:b0:c3:ae:03: 76:b3:9c:2e:08:47:4c:b6:5e:bf:0a:f0:e4:e4:21: 44:17:7f:be:91:28:ed:ac:e3:98:d7:ac:6f:25:c3: 70:4a:bf:5c:d3:04:3e:b7:4f:4f:fa:04:1c:af:8a: 87:05:3e:21:56:92:eb:50:48:6d:c1:72:ed:a4:15: ba:8e:1f:f2:ab:50:1b:ee:8f:3e:43:85:1c:ab:0c: 25:e4:a1:82:97:48:9c:c9:11:ff:1a:31:38:72:a3: b5:08:7f:66:f3:2d:2c:3d:11:34:b7:02:d5:3f:dc: 10:c3:ad:31:19:46:6f:0c:7a:84:61:40:77:9a:93: 2d:2d:fa:c9:ab:cf:56:ce:32:fe:c3:cd:4f:74:75: 7b:84:15:3b:e6:5c:e7:02:91:81:92:95:6b:66:65: 89:36:dd:c9:29:07:1b:1b:cf:68:6e:54:17:9a:ac: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6D:46:3C:1F:D3:DE:1F:83:BA:F4:31:CB:32:F7:95:39:C9:B8:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8386c20-44b6-35c1-8995-75d3f78ffde7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:16:d0:7f:a4:dc:1c:5c:f1:65:51:00:2e:b8:97:1a:16:69: 44:69:bf:c2:ae:17:3d:24:b8:36:04:b6:6b:b5:a6:ed:12:87: af:95:1b:7e:3a:e6:17:78:05:f2:06:3f:54:c5:aa:a4:85:57: b4:f1:07:87:80:8e:82:ef:c5:08:1e:45:09:6f:7f:52:9e:67: 29:3b:09:62:82:6a:fb:14:2e:ed:36:ed:67:64:27:78:a4:f5: bc:49:fa:54:fe:6b:d0:14:dd:7a:38:b2:cc:b8:68:47:5d:58: 98:b1:44:97:67:3f:4f:61:36:f6:4f:32:3d:d2:10:99:67:65: 02:6f:6d:36:2f:29:ad:67:c6:9b:39:78:ae:41:a6:86:2a:e0: 29:3d:3e:79:85:54:e0:6a:1e:6b:28:c5:15:b0:78:00:4f:c5: 06:de:4f:be:30:d9:0d:a0:4c:ee:cd:3a:05:7e:e1:ca:d2:5e: 05:29:e5:4d:a5:1e:dd:98:e4:73:a6:7c:b7:b8:2e:42:09:73: a6:b6:8b:1e:e7:ba:0a:d7:ae:be:99:b9:ba:52:d5:0e:04:85: 8a:44:a5:95:71:ab:ca:15:c7:84:6c:07:a2:4a:57:31:af:8d: 51:ab:cb:38:d3:38:8b:30:40:3d:6a:bc:85:65:ce:81:bc:d9: 48:45:4c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JftxLNAWCN8M41wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWQ3NjM0ZTgtZjg4My00MTdkLTg5MDctYTkwZTQ0ODllNjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdN+ap0Raa5giftL9Q1ps+4usASZnw6JxoCK 0zicSXtaKS8AHemrfN4j+qJmYZ+o8qW+Kv60eS6eoO+qTcGpYYLZySV+geRXiP1q CUD1Z8YdvZkQdrDDrgN2s5wuCEdMtl6/CvDk5CFEF3++kSjtrOOY16xvJcNwSr9c 0wQ+t09P+gQcr4qHBT4hVpLrUEhtwXLtpBW6jh/yq1Ab7o8+Q4Ucqwwl5KGCl0ic yRH/GjE4cqO1CH9m8y0sPRE0twLVP9wQw60xGUZvDHqEYUB3mpMtLfrJq89WzjL+ w81PdHV7hBU75lznApGBkpVrZmWJNt3JKQcbG89oblQXmqz30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANtRjwf094fg7r0Mcsy95U5ybj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgzODZjMjAtNDRiNi0z NWMxLTg5OTUtNzVkM2Y3OGZmZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9dmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0W0H+k3Bxc8WVRAC64lxoWaURpv8KuFz0kuDYEtmu1pu0Sh6+VG346 5hd4BfIGP1TFqqSFV7TxB4eAjoLvxQgeRQlvf1KeZyk7CWKCavsULu027WdkJ3ik 9bxJ+lT+a9AU3Xo4ssy4aEddWJixRJdnP09hNvZPMj3SEJlnZQJvbTYvKa1nxps5 eK5BpoYq4Ck9PnmFVOBqHmsoxRWweABPxQbeT74w2Q2gTO7NOgV+4crSXgUp5U2l Ht2Y5HOmfLe4LkIJc6a2ix7nugrXrr6ZubpS1Q4EhYpEpZVxq8oVx4RsB6JKVzGv jVGryzjTOIswQD1qvIVlzoG82UhFTDE= -----END CERTIFICATE-----Generated at Tue Sep 29 13:08:07 2026 by rpki-client