$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b683a66a-b30e-3f83-b9b1-719db901cd44.roa File: b683a66a-b30e-3f83-b9b1-719db901cd44.roa (raw, json) Hash identifier: 9d7bU2JKpgi+6mJnOXHkvjLi+8glLIMr+AvUp5mz76I= Subject key identifier: 9E:40:93:22:59:09:C5:C2:99:26:63:D9:8D:96:B5:F0:C1:AC:EB:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985F2310DE22EC741202680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b683a66a-b30e-3f83-b9b1-719db901cd44.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.212.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:f2:31:0d:e2:2e:c7:41:20:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=256f1240-a879-4770-a03e-93b08e4f16c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:a2:e5:93:16:3c:41:b2:d3:ca:69:19:90: 4d:f1:89:e6:07:cd:6a:0a:fa:fc:a8:81:bb:a7:28: 63:a3:c2:1f:d9:4e:7b:5b:72:ca:39:71:b8:3f:8e: 57:ba:9b:43:5d:7b:11:91:66:73:0c:f5:cc:14:ff: 47:9e:7c:6f:76:4a:ea:f8:fb:34:8a:c0:60:68:7b: b8:6e:08:3e:68:da:f3:1c:70:45:73:bf:2a:71:2b: 88:d3:f9:9e:56:c8:9b:8c:f5:53:6a:5a:f4:c1:b9: 13:88:4e:e3:9a:94:c8:bb:e5:ca:92:41:f1:32:c3: cb:60:d3:37:23:24:40:7f:09:01:27:3f:69:60:4f: ac:7f:be:02:47:37:de:23:c1:18:42:ed:35:b9:3a: 46:be:e1:1b:60:64:ea:9b:66:11:e4:04:ce:b5:2a: 4f:49:47:47:6e:90:29:0c:71:0a:f0:53:8f:82:06: 86:55:47:37:d1:38:fc:9a:dc:b7:98:57:90:a4:df: 8b:89:92:25:ce:d4:8c:d5:64:80:39:75:b3:5d:8c: b9:b5:27:5d:3c:e5:6b:8f:6c:76:2a:c0:07:df:67: 49:38:74:92:db:7a:1b:29:19:f2:38:ed:54:fd:f3: 83:27:44:f7:f3:17:e5:d7:91:93:46:6a:2b:b0:c6: 37:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:93:22:59:09:C5:C2:99:26:63:D9:8D:96:B5:F0:C1:AC:EB:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b683a66a-b30e-3f83-b9b1-719db901cd44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d9:a9:6a:22:46:a7:e2:50:26:f5:ba:55:91:a9:89:58:5d: 4d:16:b8:0b:b5:c4:3d:cf:16:f5:3c:13:cc:52:e1:35:01:9a: d2:32:5a:74:b7:bf:c0:6e:1d:41:bc:bd:a9:49:43:c7:46:96: a7:b7:47:ea:29:14:6a:60:73:a7:88:16:0d:e1:c0:ff:8a:02: c1:2f:2a:c4:a9:88:68:b0:09:ce:3f:88:68:26:27:83:22:02: 0e:8d:6e:1a:7f:c5:99:6e:84:98:d0:a9:1b:c0:32:03:a7:b2: cb:26:aa:5d:11:60:dc:2e:ad:eb:f4:f4:38:00:e7:3b:72:35: ef:97:9d:85:36:61:62:ab:e3:dd:b9:98:79:19:84:a0:b0:3f: 53:bb:ac:10:3b:1a:d7:c6:42:1e:5f:a3:38:26:a4:ce:6c:91: 70:33:a2:94:7a:50:4a:c5:a8:b5:24:bb:df:b7:59:95:94:0f: 48:34:ab:9e:ad:20:5e:fe:a5:69:74:d4:ce:c8:f8:76:e6:12: 48:9c:7d:b3:88:25:75:9d:56:27:2e:a7:51:81:bb:db:f1:be: 6f:c6:64:a1:91:c6:09:93:bf:87:f1:b4:ca:9f:ed:60:ee:71: c4:fb:ae:b0:28:40:24:ab:56:16:fd:84:d3:29:dd:9c:07:d4: c0:7b:96:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhfIxDeIux0EgJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjU2ZjEyNDAtYTg3OS00NzcwLWEwM2UtOTNiMDhlNGYxNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFOi5ZMWPEGy08ppGZBN8YnmB81qCvr8qIG7 pyhjo8If2U57W3LKOXG4P45XuptDXXsRkWZzDPXMFP9Hnnxvdkrq+Ps0isBgaHu4 bgg+aNrzHHBFc78qcSuI0/meVsibjPVTalr0wbkTiE7jmpTIu+XKkkHxMsPLYNM3 IyRAfwkBJz9pYE+sf74CRzfeI8EYQu01uTpGvuEbYGTqm2YR5ATOtSpPSUdHbpAp DHEK8FOPggaGVUc30Tj8mty3mFeQpN+LiZIlztSM1WSAOXWzXYy5tSddPOVrj2x2 KsAH32dJOHSS23obKRnyOO1U/fODJ0T38xfl15GTRmorsMY3AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5AkyJZCcXCmSZj2Y2WtfDBrOtzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjY4M2E2NmEtYjMwZS0z ZjgzLWI5YjEtNzE5ZGI5MDFjZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9SnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvZqWoiRqfiUCb1ulWRqYlYXU0WuAu1xD3PFvU8E8xS4TUBmtIyWnS3 v8BuHUG8valJQ8dGlqe3R+opFGpgc6eIFg3hwP+KAsEvKsSpiGiwCc4/iGgmJ4Mi Ag6Nbhp/xZluhJjQqRvAMgOnsssmql0RYNwurev09DgA5ztyNe+XnYU2YWKr4925 mHkZhKCwP1O7rBA7GtfGQh5fozgmpM5skXAzopR6UErFqLUku9+3WZWUD0g0q56t IF7+pWl01M7I+HbmEkicfbOIJXWdVicup1GBu9vxvm/GZKGRxgmTv4fxtMqf7WDu ccT7rrAoQCSrVhb9hNMp3ZwH1MB7lqU= -----END CERTIFICATE-----Generated at Fri Sep 25 14:39:30 2026 by rpki-client