$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac9cc9b3-2738-3280-a422-7b77e9447f63.roa File: ac9cc9b3-2738-3280-a422-7b77e9447f63.roa (raw, json) Hash identifier: zWzYE/THGRTEJ3hElObmhJ27dJPvxyBC2Zkj5JPfXPg= Subject key identifier: EA:EC:D0:6C:8C:F0:8A:59:26:55:E2:1A:B2:F8:A1:E1:94:A4:82:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985D1A0146167C705E49680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac9cc9b3-2738-3280-a422-7b77e9447f63.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.204.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:d1:a0:14:61:67:c7:05:e4:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=150a8a8c-5141-4b1a-ac77-923f1d3112d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:33:73:58:a3:97:31:df:b8:a0:3e:82:ad: 8c:7d:23:24:43:6b:d9:de:98:b6:2b:a1:df:c4:e2: ea:77:00:14:e3:d0:88:98:f9:cf:41:2b:a5:5f:77: f1:1c:02:d6:7a:af:52:ad:21:f9:d3:61:ee:0e:bd: dc:ca:d8:d7:bb:34:5e:a2:bf:52:b6:f8:5f:ca:a8: 18:2c:dc:93:2e:e7:bb:51:94:19:1a:9d:95:ce:f1: 2d:ad:98:2e:2a:cf:aa:f5:70:84:af:e3:ba:e5:ed: 95:04:82:95:31:8a:b2:13:f3:3d:43:3a:26:c9:58: 0f:fe:87:d6:ed:f4:b6:f0:d7:29:ed:98:13:e0:c4: 48:57:73:86:db:03:71:b6:dc:3f:e1:73:8f:31:67: d2:e4:e1:3c:db:ae:58:46:ec:38:42:dc:dc:c6:23: 72:28:ef:ff:b2:ce:02:70:b1:57:bc:f0:01:a2:89: 42:3b:9a:5f:d2:ea:71:99:24:22:ad:57:36:90:c0: 89:00:51:76:cb:70:d2:9e:4b:0d:61:03:d2:67:aa: 03:b6:a7:4c:39:48:64:05:c6:db:bd:cc:7d:a8:d7: 3a:16:6e:63:50:9c:55:e1:23:6c:b3:5e:ed:88:4e: 09:4b:21:cd:67:c5:b0:3a:e2:80:66:62:ca:91:81: b2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:D0:6C:8C:F0:8A:59:26:55:E2:1A:B2:F8:A1:E1:94:A4:82:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac9cc9b3-2738-3280-a422-7b77e9447f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c7:7f:23:33:21:2c:ac:c4:c0:5b:f7:23:98:56:53:55:3b: b8:d7:0c:21:e9:9c:be:cb:09:25:ee:e2:98:e9:99:4f:05:b4: 0d:8d:40:3d:13:c3:6d:a1:87:b6:cc:7d:da:c0:4f:14:78:ed: d2:e8:59:4a:9c:96:f0:a0:0c:83:90:e4:32:e7:09:48:a6:f6: 5a:a1:6b:14:95:e1:8a:92:6c:68:df:05:d0:ec:43:84:54:68: 76:2c:27:cc:06:c8:ba:19:04:15:92:56:c0:b4:03:e7:b1:9c: f2:ef:f5:22:d2:be:79:14:2a:3c:bb:9a:23:f4:2d:3c:46:99: 45:62:c1:22:7a:ea:74:40:76:25:d4:6c:ec:1b:23:24:ff:fc: 45:a4:1f:cc:a4:3b:6a:6c:2e:81:14:6c:62:c8:30:a9:63:eb: 7e:10:75:3d:4c:a1:8f:d2:31:f0:e0:36:f7:87:05:99:f4:1c: b3:a5:ec:c3:f1:2b:26:61:c2:a2:be:51:10:e5:60:82:90:7a: 02:ab:3a:1d:c2:3a:f7:5b:96:d5:6a:fd:f3:80:1d:f2:0d:0c: 9a:49:2a:a2:63:a9:6d:1b:4d:74:f4:cd:2a:8d:a4:db:cf:73: cf:03:d6:13:72:1a:0d:29:09:a1:89:be:c7:1d:4d:0b:c8:e4: 36:7a:27:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhdGgFGFnxwXkloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTUwYThhOGMtNTE0MS00YjFhLWFjNzctOTIzZjFkMzExMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQMzc1ijlzHfuKA+gq2MfSMkQ2vZ3pi2K6Hf xOLqdwAU49CImPnPQSulX3fxHALWeq9SrSH502HuDr3cytjXuzReor9StvhfyqgY LNyTLue7UZQZGp2VzvEtrZguKs+q9XCEr+O65e2VBIKVMYqyE/M9QzomyVgP/ofW 7fS28Ncp7ZgT4MRIV3OG2wNxttw/4XOPMWfS5OE8265YRuw4QtzcxiNyKO//ss4C cLFXvPABoolCO5pf0upxmSQirVc2kMCJAFF2y3DSnksNYQPSZ6oDtqdMOUhkBcbb vcx9qNc6Fm5jUJxV4SNss17tiE4JSyHNZ8WwOuKAZmLKkYGyIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrs0GyM8IpZJlXiGrL4oeGUpILRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWM5Y2M5YjMtMjczOC0z MjgwLWE0MjItN2I3N2U5NDQ3ZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDHfyMzISysxMBb9yOYVlNVO7jXDCHpnL7LCSXu4pjpmU8FtA2NQD0T w22hh7bMfdrATxR47dLoWUqclvCgDIOQ5DLnCUim9lqhaxSV4YqSbGjfBdDsQ4RU aHYsJ8wGyLoZBBWSVsC0A+exnPLv9SLSvnkUKjy7miP0LTxGmUViwSJ66nRAdiXU bOwbIyT//EWkH8ykO2psLoEUbGLIMKlj634QdT1MoY/SMfDgNveHBZn0HLOl7MPx KyZhwqK+URDlYIKQegKrOh3COvdbltVq/fOAHfINDJpJKqJjqW0bTXT0zSqNpNvP c88D1hNyGg0pCaGJvscdTQvI5DZ6J1s= -----END CERTIFICATE-----Generated at Sun Sep 27 12:44:58 2026 by rpki-client