$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2307b0b-1ad1-3676-b25b-f684d0180b5d.roa File: d2307b0b-1ad1-3676-b25b-f684d0180b5d.roa (raw, json) Hash identifier: 54uh7ojG4rhIurjroMHNFqF4Hu1ZTA7hMe2dOaapeHo= Subject key identifier: 3F:54:D6:29:D9:2C:DF:B0:E3:EE:05:C4:F7:63:F1:72:65:EB:84:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D67F6AD55B81E82F9F080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2307b0b-1ad1-3676-b25b-f684d0180b5d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7713 IP address blocks: 23.217.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:67:f6:ad:55:b8:1e:82:f9:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=79553d4e-7e8e-480f-b293-0a6aa8046633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:a6:93:e1:2d:08:33:ff:56:27:bb:10:02: 29:1a:d4:e4:48:ba:94:24:42:76:4d:10:0d:86:b4: 1c:f9:bd:2e:16:16:76:17:73:8f:34:e6:80:00:ac: dd:41:14:e7:8b:cb:09:59:4f:3f:4f:bf:45:80:34: 7c:54:dc:cf:68:c4:a7:e6:77:08:97:ef:42:0d:43: bb:d7:3d:67:69:9e:45:5d:f8:b4:b1:cd:41:4a:19: f2:a0:d6:1d:91:6d:c7:38:8b:a5:3f:2f:fd:04:76: 30:55:52:88:f5:6f:34:12:ee:05:46:96:7f:08:34: 35:55:2f:2f:28:73:7a:28:c9:f3:57:50:5e:83:de: e7:5c:5f:9d:88:43:04:97:ff:d4:02:14:ff:76:c4: 59:d6:84:fc:55:a6:de:8e:2c:51:f9:af:e6:c4:b0: 5b:c3:94:00:c1:1b:1e:ec:a3:52:24:46:4c:34:d5: 12:e4:43:ce:2b:9c:11:91:d3:ba:fc:8b:10:d2:48: fb:e3:31:7c:85:37:71:2d:2a:59:6a:88:01:c0:61: cc:05:a8:66:41:05:00:73:fe:83:43:31:d2:44:bf: 7a:3b:02:25:d2:ae:2a:47:49:26:cb:de:9e:2f:65: 23:68:2e:5b:4c:93:e6:6d:cc:98:f9:74:4c:52:72: 61:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:54:D6:29:D9:2C:DF:B0:E3:EE:05:C4:F7:63:F1:72:65:EB:84:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2307b0b-1ad1-3676-b25b-f684d0180b5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:44:d7:e2:33:e8:61:4e:15:b2:9e:0c:a7:ad:2f:05:e6:31: f5:79:d2:22:19:06:d8:16:45:f7:d1:4f:81:5f:02:d0:53:18: bb:30:16:51:ba:1e:73:63:ed:88:89:9f:25:6f:68:14:65:e6: 0b:e7:c7:ad:cf:52:18:9b:ae:ca:07:32:77:eb:0d:1c:40:97: 4b:9c:00:46:3c:4f:90:f2:43:ae:ed:9c:bc:97:a7:9e:e1:33: a4:7b:4b:a5:a5:1e:bf:a7:c8:70:83:92:78:0b:d9:75:25:ba: 20:1b:09:b1:d0:08:b8:fe:8b:7c:19:56:a8:ef:90:5d:85:ee: 88:db:88:65:ea:f0:34:f6:44:1e:f8:1b:f2:98:61:68:37:d9: f5:f9:34:d6:d6:65:85:17:b8:d3:25:fe:58:43:7b:6d:99:4a: 5a:18:1a:d7:b2:31:b4:bd:5a:e3:8a:bb:a5:73:25:56:fe:88: 24:fd:23:9c:99:bd:42:e3:ec:7e:d0:e2:ec:c0:c3:04:36:db: 72:b2:ea:bf:4a:f0:60:12:8a:0a:79:2e:62:07:17:19:a1:f3: f0:ed:d7:67:1c:7f:88:92:75:17:7e:79:8e:3c:44:a7:89:2a: 55:ad:0a:34:72:3a:d0:62:ec:e1:92:f9:12:65:ae:87:38:9f: 59:04:53:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfWf2rVW4HoL58IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzk1NTNkNGUtN2U4ZS00ODBmLWIyOTMtMGE2YWE4MDQ2NjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUmmk+EtCDP/Vie7EAIpGtTkSLqUJEJ2TRAN hrQc+b0uFhZ2F3OPNOaAAKzdQRTni8sJWU8/T79FgDR8VNzPaMSn5ncIl+9CDUO7 1z1naZ5FXfi0sc1BShnyoNYdkW3HOIulPy/9BHYwVVKI9W80Eu4FRpZ/CDQ1VS8v KHN6KMnzV1Beg97nXF+diEMEl//UAhT/dsRZ1oT8VabejixR+a/mxLBbw5QAwRse 7KNSJEZMNNUS5EPOK5wRkdO6/IsQ0kj74zF8hTdxLSpZaogBwGHMBahmQQUAc/6D QzHSRL96OwIl0q4qR0kmy96eL2UjaC5bTJPmbcyY+XRMUnJhmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9U1inZLN+w4+4FxPdj8XJl64QAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDIzMDdiMGItMWFkMS0z Njc2LWIyNWItZjY4NGQwMTgwYjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9kQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5E1+Iz6GFOFbKeDKetLwXmMfV50iIZBtgWRffRT4FfAtBTGLswFlG6 HnNj7YiJnyVvaBRl5gvnx63PUhibrsoHMnfrDRxAl0ucAEY8T5DyQ67tnLyXp57h M6R7S6WlHr+nyHCDkngL2XUluiAbCbHQCLj+i3wZVqjvkF2F7ojbiGXq8DT2RB74 G/KYYWg32fX5NNbWZYUXuNMl/lhDe22ZSloYGteyMbS9WuOKu6VzJVb+iCT9I5yZ vULj7H7Q4uzAwwQ223Ky6r9K8GASigp5LmIHFxmh8/Dt12ccf4iSdRd+eY48RKeJ KlWtCjRyOtBi7OGS+RJlroc4n1kEUyI= -----END CERTIFICATE-----Generated at Sat Oct 10 07:53:47 2026 by rpki-client