$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae432139-bfc0-3b36-99d8-c9ed3458f5ab.roa File: ae432139-bfc0-3b36-99d8-c9ed3458f5ab.roa (raw, json) Hash identifier: bvLAQMgyKVsie0xG1rVytxJ3Ht+s/o/Az6O9sDqrs4Y= Subject key identifier: D2:51:CA:89:AC:02:85:95:00:76:95:2C:20:B3:88:49:D3:E1:01:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985E4FFBA7A1B14C33AA160 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae432139-bfc0-3b36-99d8-c9ed3458f5ab.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.209.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:e4:ff:ba:7a:1b:14:c3:3a:a1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7d102cd3-53c2-4947-a76e-3cc5bd8b784b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:65:65:99:da:3d:06:da:df:5e:2b:d7:90: e7:20:69:99:c8:50:35:28:7e:e6:fb:7b:84:c4:1d: a4:19:bb:b1:a8:a6:ee:d1:8f:a1:6d:1f:10:d6:d2: ad:16:e8:ab:84:37:b8:2b:a5:47:c9:f4:57:39:dd: ab:71:f2:fa:56:d9:0e:6a:30:2f:1f:4e:f0:b5:6f: 62:76:95:f8:b1:e4:35:4b:67:c9:93:c7:b1:a7:c2: 9e:f8:41:2b:ad:7f:70:77:ce:eb:16:66:f9:7c:e2: 1c:dd:06:9d:dc:a0:98:0e:0d:92:ab:fc:a5:ca:bc: 21:00:d1:89:76:f7:23:35:58:27:00:29:86:50:a1: ab:6b:8e:1d:8f:47:1e:b6:8d:73:a6:89:6d:f9:b9: 65:7f:d3:11:3d:a4:86:7f:90:6f:f9:7d:00:0f:f7: 79:25:58:85:bc:20:b3:0a:0b:42:1d:58:94:0e:88: fe:f1:ff:81:ef:ca:64:61:34:6e:79:be:f9:f8:49: 8b:df:e4:ed:6c:d4:46:63:2b:6c:78:b9:5a:6d:71: 3b:03:64:69:d9:08:60:a6:02:53:cb:b3:d6:58:9b: 2b:fb:b5:9d:c5:f8:0e:7c:e4:8e:2b:cd:bf:4f:1a: 5a:ec:14:9d:a0:5e:a9:53:61:9a:3c:37:d3:75:1f: 84:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:51:CA:89:AC:02:85:95:00:76:95:2C:20:B3:88:49:D3:E1:01:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae432139-bfc0-3b36-99d8-c9ed3458f5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c0:9d:8a:bd:1a:89:7f:da:1c:1d:2c:d2:31:22:c3:cf:9f: 7f:76:3e:98:00:25:64:7b:41:9e:b3:86:5f:37:c6:fc:74:e6: 23:27:e5:04:90:c7:c1:63:5a:1d:13:dd:b3:f7:8e:49:93:99: 30:59:a1:20:e2:29:04:a9:b0:00:97:1d:3b:5b:8c:0e:7e:3f: d3:ec:14:74:1f:64:e4:52:71:47:f6:77:c0:4b:e8:5e:fc:43: a5:f1:19:f0:9c:7d:48:0a:53:ee:f9:68:d9:93:e8:91:31:05: 0f:02:b6:38:06:70:f4:f4:41:9c:66:76:d4:f2:31:33:d9:8d: 7d:3c:02:58:5c:dc:ee:1a:ce:2e:9c:e9:84:0e:4c:a7:16:4f: fe:bb:9d:fe:36:0f:73:c7:4a:37:ed:a7:5b:c2:a6:39:e3:d7: ed:7c:f2:ff:a9:e8:d2:e7:bb:90:74:92:a3:b2:5a:c0:61:54: 10:23:4d:2c:22:1c:19:8b:9c:9b:64:5f:b4:f4:64:d5:6c:66: a6:73:f2:fc:ae:c4:a6:aa:54:27:06:df:ae:22:1a:ab:aa:92: 80:71:67:02:5c:2a:62:83:a9:53:a9:9c:84:45:29:a4:39:a0: d9:5f:3a:cd:b3:76:0d:97:a1:03:9e:f8:6e:75:5a:03:9e:36: 12:46:4c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JheT/unobFMM6oWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2QxMDJjZDMtNTNjMi00OTQ3LWE3NmUtM2NjNWJkOGI3ODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD5lZZnaPQba314r15DnIGmZyFA1KH7m+3uE xB2kGbuxqKbu0Y+hbR8Q1tKtFuirhDe4K6VHyfRXOd2rcfL6VtkOajAvH07wtW9i dpX4seQ1S2fJk8exp8Ke+EErrX9wd87rFmb5fOIc3Qad3KCYDg2Sq/ylyrwhANGJ dvcjNVgnACmGUKGra44dj0ceto1zpolt+bllf9MRPaSGf5Bv+X0AD/d5JViFvCCz CgtCHViUDoj+8f+B78pkYTRueb75+EmL3+TtbNRGYytseLlabXE7A2Rp2QhgpgJT y7PWWJsr+7WdxfgOfOSOK82/Txpa7BSdoF6pU2GaPDfTdR+EOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJRyomsAoWVAHaVLCCziEnT4QFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWU0MzIxMzktYmZjMC0z YjM2LTk5ZDgtYzllZDM0NThmNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9FJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvAnYq9Gol/2hwdLNIxIsPPn392PpgAJWR7QZ6zhl83xvx05iMn5QSQ x8FjWh0T3bP3jkmTmTBZoSDiKQSpsACXHTtbjA5+P9PsFHQfZORScUf2d8BL6F78 Q6XxGfCcfUgKU+75aNmT6JExBQ8CtjgGcPT0QZxmdtTyMTPZjX08Alhc3O4azi6c 6YQOTKcWT/67nf42D3PHSjftp1vCpjnj1+188v+p6NLnu5B0kqOyWsBhVBAjTSwi HBmLnJtkX7T0ZNVsZqZz8vyuxKaqVCcG364iGquqkoBxZwJcKmKDqVOpnIRFKaQ5 oNlfOs2zdg2XoQOe+G51WgOeNhJGTIE= -----END CERTIFICATE-----Generated at Sun Sep 27 19:29:52 2026 by rpki-client