$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae6e65a0-2a30-3145-8d2e-ee7b23ea7ded.roa File: ae6e65a0-2a30-3145-8d2e-ee7b23ea7ded.roa (raw, json) Hash identifier: v/CBrjtKp4IyzCrwuUTJ+Rm+luNnAm3X8GNjFO1zezs= Subject key identifier: 3B:13:0C:26:57:BE:A4:20:B6:CF:B5:23:4F:6E:9D:01:3D:C5:EA:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D4D2F50F5E8F6F7AE6CE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae6e65a0-2a30-3145-8d2e-ee7b23ea7ded.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.53.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:4d:2f:50:f5:e8:f6:f7:ae:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=6883d7c1-340e-4023-84ff-bc27b98b84f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5e:56:9d:a8:50:e3:3e:33:db:cd:f6:64:e3: 6c:e9:36:a9:ca:55:51:dc:06:ab:c1:7e:a8:cb:68: e9:b2:06:25:5c:99:f6:4e:45:1c:39:5a:aa:3b:ac: b4:73:b3:f6:71:d2:4b:ab:02:31:8b:b6:0d:22:11: 09:ab:50:29:58:4e:0f:07:6f:4a:91:81:cd:51:a3: 75:b6:4e:d1:4b:ba:58:ef:a6:4e:34:ba:3b:9e:5b: 2b:01:04:d2:1e:85:38:26:fe:24:6e:b2:f1:f2:b1: 18:69:bf:ce:ef:53:92:8e:06:dc:40:8b:4b:03:ce: bc:33:4f:c1:ee:ee:28:43:15:5a:95:20:cc:7d:0c: 8c:37:06:1a:10:38:ce:ea:2c:b2:5e:35:c9:88:95: f4:5f:65:19:49:ec:af:07:59:b1:75:6a:65:3e:04: f2:86:16:34:9c:15:b8:6e:3f:88:2a:21:60:ce:8f: c8:58:5c:f5:3a:a2:83:9d:b3:95:86:9b:61:8f:01: 25:32:c5:3d:4e:c0:b9:47:49:c4:18:51:0e:b0:e4: 68:1f:ca:13:92:8b:39:ae:e0:4c:6f:31:95:ee:00: 6d:79:1c:85:b8:56:9b:4b:31:75:e3:55:fe:5e:45: 78:d9:37:3c:5c:72:1c:f8:2f:2b:26:75:5b:07:43: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:13:0C:26:57:BE:A4:20:B6:CF:B5:23:4F:6E:9D:01:3D:C5:EA:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae6e65a0-2a30-3145-8d2e-ee7b23ea7ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:74:88:ca:38:49:ed:48:e4:d3:0d:63:9e:ce:40:60:b7:b6: 6b:4e:51:d8:87:e3:d4:cc:70:15:d6:5a:c2:f8:5c:dd:5e:73: 4b:59:47:f4:4d:66:80:3c:8a:d0:e4:ff:1c:d1:14:eb:b2:f4: 98:15:8a:1b:8b:2e:3d:d0:65:9a:74:2b:17:e5:c5:69:3d:cb: f3:16:41:ff:42:99:2a:50:06:8a:f6:5c:d8:6d:ac:9d:07:43: 1a:b7:c0:86:62:f1:80:80:04:2d:c4:91:86:dc:78:bf:22:c5: c3:d0:6c:a2:8f:8c:45:97:78:19:1e:86:a4:a0:ce:58:b4:55: 87:d6:00:3c:55:58:c3:28:7f:85:f6:3b:da:cc:10:ea:16:f4: 6e:af:0f:4f:5f:b2:54:c7:a0:53:f4:d0:05:ac:18:98:f1:f7: 9d:a2:20:11:0f:99:63:5a:d4:0d:1e:76:02:96:e0:54:3b:c5: e2:4c:35:ff:46:f6:04:1d:57:99:e5:59:75:c7:b0:bb:e8:56: f5:a5:7c:a5:9f:78:be:e7:94:e2:33:57:b9:0b:24:9b:4a:c8: fe:73:64:0d:8a:e7:2a:61:ce:69:8e:a7:7b:72:cd:35:65:3d: aa:9c:a7:53:b5:87:7e:50:cc:6a:bd:b7:d1:12:a8:ba:4c:5f: 06:cf:4f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDU0vUPXo9veubOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk Njg4M2Q3YzEtMzQwZS00MDIzLTg0ZmYtYmMyN2I5OGI4NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF5WnahQ4z4z2832ZONs6TapylVR3AarwX6o y2jpsgYlXJn2TkUcOVqqO6y0c7P2cdJLqwIxi7YNIhEJq1ApWE4PB29KkYHNUaN1 tk7RS7pY76ZONLo7nlsrAQTSHoU4Jv4kbrLx8rEYab/O71OSjgbcQItLA868M0/B 7u4oQxValSDMfQyMNwYaEDjO6iyyXjXJiJX0X2UZSeyvB1mxdWplPgTyhhY0nBW4 bj+IKiFgzo/IWFz1OqKDnbOVhpthjwElMsU9TsC5R0nEGFEOsORoH8oTkos5ruBM bzGV7gBteRyFuFabSzF141X+XkV42Tc8XHIc+C8rJnVbB0P5jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsTDCZXvqQgts+1I09unQE9xeqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWU2ZTY1YTAtMmEzMC0z MTQ1LThkMmUtZWU3YjIzZWE3ZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp0iMo4Se1I5NMNY57OQGC3tmtOUdiH49TMcBXWWsL4XN1ec0tZR/RN ZoA8itDk/xzRFOuy9JgVihuLLj3QZZp0KxflxWk9y/MWQf9CmSpQBor2XNhtrJ0H Qxq3wIZi8YCABC3EkYbceL8ixcPQbKKPjEWXeBkehqSgzli0VYfWADxVWMMof4X2 O9rMEOoW9G6vD09fslTHoFP00AWsGJjx952iIBEPmWNa1A0edgKW4FQ7xeJMNf9G 9gQdV5nlWXXHsLvoVvWlfKWfeL7nlOIzV7kLJJtKyP5zZA2K5yphzmmOp3tyzTVl Paqcp1O1h35QzGq9t9ESqLpMXwbPT0Q= -----END CERTIFICATE-----Generated at Sat Sep 26 05:57:49 2026 by rpki-client