$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa File: b2859ec2-312e-3155-83f0-593e6003e8e4.roa (raw, json) Hash identifier: UDgeOGFbYMAOAD+LDwxxBzZkyVLPqxryydCDEPbXC4Q= Subject key identifier: AD:30:D7:9A:00:A3:B4:00:19:97:E0:7A:C5:2C:45:80:9B:F3:D9:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985F1F4D62A63341D72FFC9 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.212.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:f1:f4:d6:2a:63:34:1d:72:ff:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49a7903e-8d63-4aec-84dc-7fb5d62fbf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fe:70:e8:c0:8d:92:12:ab:2d:e4:91:ac:64: 15:2d:0e:5a:f3:03:f4:6d:c1:cf:ba:b4:df:0d:ce: 3a:ae:71:46:c2:ec:55:7b:b2:d2:46:1f:4e:46:20: ab:b8:ae:1d:bb:ee:14:78:1c:30:7b:7f:75:2b:76: d0:93:98:ab:24:64:3b:2a:c3:34:f4:9d:f6:56:cb: c5:83:9b:b9:4d:a5:fb:13:d5:cf:79:f8:78:31:01: 11:9b:da:a8:90:5d:80:2d:c0:ca:86:21:3a:2a:49: 82:5c:4c:14:86:89:ff:66:99:84:df:4a:23:73:31: ef:14:4d:bd:84:cc:82:41:65:c7:01:d4:8c:ab:21: b1:d1:fe:04:28:e1:47:88:8b:77:fa:f9:eb:da:42: f7:c5:a8:26:c3:c6:6f:79:96:6a:6a:4e:aa:bd:7c: 2d:80:03:8a:4b:d2:67:db:f9:c2:ae:41:4d:1d:48: 5a:60:74:c6:35:a1:17:92:74:c3:b0:c2:4a:6a:16: f2:6b:59:34:2f:44:57:c7:89:83:46:25:8f:48:9f: be:63:56:ac:2c:91:ab:04:a2:20:93:7a:3e:66:47: d3:bf:40:49:52:12:0c:9f:67:d9:da:a8:82:a6:2e: 96:b6:3f:c1:19:37:f0:be:1c:d3:b0:ac:92:5d:13: f0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:30:D7:9A:00:A3:B4:00:19:97:E0:7A:C5:2C:45:80:9B:F3:D9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2859ec2-312e-3155-83f0-593e6003e8e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6f:6f:10:f4:31:54:34:52:dc:29:f6:af:4f:da:b7:be:3c: 03:5c:1b:be:a8:27:5d:9f:84:39:ba:24:de:d1:79:7d:94:d4: 45:46:0e:59:9f:55:0f:eb:62:20:ce:a2:ad:7b:3c:4a:36:ff: 70:91:9f:df:41:6c:a4:7a:22:b1:41:0f:e9:47:29:6d:23:09: a9:2f:85:5d:c9:73:db:68:d6:d5:45:0b:c0:0e:c2:4d:b2:5a: 6e:0b:77:52:01:df:cd:70:6f:51:d4:6c:69:55:e0:d4:d9:91: af:88:86:ac:2a:83:17:11:ca:33:76:97:2e:2a:af:d1:e1:ff: 46:59:95:21:21:fe:71:b7:7b:a4:11:2f:73:dd:36:67:c6:67: f2:be:4c:cd:e0:58:0c:1b:18:1e:b3:01:eb:ed:1b:bb:f0:29: 6b:6c:1f:dd:32:64:2a:7a:14:02:f2:2a:ab:c7:81:25:77:3b: 2e:1d:d0:45:e8:e6:8e:5d:38:f8:55:06:1f:2a:c0:8a:df:12: c8:2e:8b:f6:ca:1a:f0:8d:c7:47:0c:98:57:19:5a:a0:8f:7c: 66:76:29:a2:8e:ec:f4:53:fb:37:dd:e2:c8:b6:5b:a4:e5:74: 26:4b:64:8a:58:56:bb:7f:ea:18:b7:a5:c3:82:c4:36:41:9e: 91:93:8f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhfH01ipjNB1y/8kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDlhNzkwM2UtOGQ2My00YWVjLTg0ZGMtN2ZiNWQ2MmZiZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv5w6MCNkhKrLeSRrGQVLQ5a8wP0bcHPurTf Dc46rnFGwuxVe7LSRh9ORiCruK4du+4UeBwwe391K3bQk5irJGQ7KsM09J32VsvF g5u5TaX7E9XPefh4MQERm9qokF2ALcDKhiE6KkmCXEwUhon/ZpmE30ojczHvFE29 hMyCQWXHAdSMqyGx0f4EKOFHiIt3+vnr2kL3xagmw8ZveZZqak6qvXwtgAOKS9Jn 2/nCrkFNHUhaYHTGNaEXknTDsMJKahbya1k0L0RXx4mDRiWPSJ++Y1asLJGrBKIg k3o+ZkfTv0BJUhIMn2fZ2qiCpi6Wtj/BGTfwvhzTsKySXRPw1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0w15oAo7QAGZfgesUsRYCb89liMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI4NTllYzItMzEyZS0z MTU1LTgzZjAtNTkzZTYwMDNlOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVvbxD0MVQ0Utwp9q9P2re+PANcG76oJ12fhDm6JN7ReX2U1EVGDlmf VQ/rYiDOoq17PEo2/3CRn99BbKR6IrFBD+lHKW0jCakvhV3Jc9to1tVFC8AOwk2y Wm4Ld1IB381wb1HUbGlV4NTZka+IhqwqgxcRyjN2ly4qr9Hh/0ZZlSEh/nG3e6QR L3PdNmfGZ/K+TM3gWAwbGB6zAevtG7vwKWtsH90yZCp6FALyKqvHgSV3Oy4d0EXo 5o5dOPhVBh8qwIrfEsgui/bKGvCNx0cMmFcZWqCPfGZ2KaKO7PRT+zfd4si2W6Tl dCZLZIpYVrt/6hi3pcOCxDZBnpGTj6M= -----END CERTIFICATE-----Generated at Fri Sep 25 06:37:49 2026 by rpki-client