$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6a8302e-3d56-3908-a03a-db2d6db6f4d2.roa File: d6a8302e-3d56-3908-a03a-db2d6db6f4d2.roa (raw, json) Hash identifier: jgB29yZq78qMsaZy6aTS4fq0BNb5iQTzFlFGscphCZI= Subject key identifier: 9C:FC:19:A9:41:F3:B7:97:C3:F3:E1:D2:E2:D0:93:16:25:F3:85:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4F081D80509560B5D68D6800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6a8302e-3d56-3908-a03a-db2d6db6f4d2.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.218.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:1d:80:50:95:60:b5:d6:8d:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=a36afa2a-5bc4-4315-bd8f-936f905d84f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:be:6d:17:01:fc:6d:7f:ad:66:dd:02:f7: f7:38:04:fe:60:38:99:3c:d2:36:d4:a0:e9:10:bb: 31:c0:71:bd:3a:89:dc:82:54:4a:a5:92:46:d1:79: 7e:77:b7:9b:a5:61:0e:59:f1:44:1e:13:7d:e4:7d: 3c:35:4e:9a:f3:79:ff:87:1a:58:40:6a:f2:80:50: 8a:38:ce:13:f6:33:48:eb:16:66:56:42:bd:58:03: 45:56:7c:45:0d:06:83:08:80:8e:1d:a6:08:3b:1e: 79:d1:5f:65:a7:32:94:b7:00:55:38:08:de:4a:55: 3a:c6:df:3c:c0:ba:cf:6c:71:cd:ba:20:53:a6:61: 73:08:b7:5c:ba:d0:34:b0:d4:41:ed:31:b5:eb:13: ed:0d:05:ae:50:68:4d:ff:35:00:18:4a:fb:18:63: 4d:18:56:38:99:f4:29:95:08:38:8d:d6:c2:a7:aa: 21:41:09:5e:96:93:a7:69:a2:ed:3f:9a:af:5a:6b: ea:dc:50:6b:19:9a:30:bf:e9:59:55:97:36:8f:d3: b3:94:b1:3b:27:c9:91:1e:e8:bd:e4:91:87:1a:74: 9f:31:be:62:74:a1:91:b8:7a:b5:87:0c:3c:18:8f: d9:e2:e9:ad:d4:92:3c:9b:ab:cc:61:a4:94:6f:d0: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:19:A9:41:F3:B7:97:C3:F3:E1:D2:E2:D0:93:16:25:F3:85:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6a8302e-3d56-3908-a03a-db2d6db6f4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e9:fa:be:e6:53:cb:6a:f9:dd:7b:c0:85:6e:df:b3:40:69: 8f:0c:29:69:2a:eb:01:a1:32:08:8a:48:c7:77:33:dc:9b:9b: 4c:7c:40:98:d0:b4:56:58:96:fb:ad:d1:f1:91:ef:3f:68:dc: 1a:84:7e:2a:91:de:3f:c4:e2:68:71:e2:35:63:f4:09:c6:05: 8b:16:7d:25:a0:d5:b2:bf:0a:10:b4:2c:a0:2b:19:1c:36:56: fa:88:da:18:73:51:36:ac:d3:42:db:31:f6:ad:90:22:a3:e0: 78:dd:c5:79:5c:30:9f:ae:de:76:80:ea:de:40:03:f9:3d:fc: 20:77:7e:45:31:cc:bd:2d:b3:09:8d:b9:9a:ca:22:68:f1:b8: 67:74:26:6c:c3:e0:e1:2f:e8:7d:8f:66:e2:45:08:3f:32:c8: 30:6e:8c:f3:7e:0d:28:bf:21:62:a1:6a:29:76:0c:c6:6b:50: f6:17:0a:e1:7f:fa:6a:b9:a1:93:ef:07:1e:e7:2a:6e:12:16: 50:45:05:0a:e6:d6:d2:83:1a:52:bb:be:b5:93:67:b8:f2:d6: 61:7d:b4:1f:73:2c:bc:dd:45:9f:d4:f8:13:d4:6d:43:ec:e6: bd:38:a4:de:09:10:a8:11:f2:6f:d3:62:86:f4:00:6c:f0:c3: 6e:69:d0:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCB2AUJVgtdaNaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YTM2YWZhMmEtNWJjNC00MzE1LWJkOGYtOTM2ZjkwNWQ4NGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre6+bRcB/G1/rWbdAvf3OAT+YDiZPNI21KDp ELsxwHG9OoncglRKpZJG0Xl+d7ebpWEOWfFEHhN95H08NU6a83n/hxpYQGrygFCK OM4T9jNI6xZmVkK9WANFVnxFDQaDCICOHaYIOx550V9lpzKUtwBVOAjeSlU6xt88 wLrPbHHNuiBTpmFzCLdcutA0sNRB7TG16xPtDQWuUGhN/zUAGEr7GGNNGFY4mfQp lQg4jdbCp6ohQQlelpOnaaLtP5qvWmvq3FBrGZowv+lZVZc2j9OzlLE7J8mRHui9 5JGHGnSfMb5idKGRuHq1hww8GI/Z4umt1JI8m6vMYaSUb9Ah/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz8GalB87eXw/Ph0uLQkxYl84XLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZhODMwMmUtM2Q1Ni0z OTA4LWEwM2EtZGIyZDZkYjZmNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9r5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPp+r7mU8tq+d17wIVu37NAaY8MKWkq6wGhMgiKSMd3M9ybm0x8QJjQ tFZYlvut0fGR7z9o3BqEfiqR3j/E4mhx4jVj9AnGBYsWfSWg1bK/ChC0LKArGRw2 VvqI2hhzUTas00LbMfatkCKj4HjdxXlcMJ+u3naA6t5AA/k9/CB3fkUxzL0tswmN uZrKImjxuGd0JmzD4OEv6H2PZuJFCD8yyDBujPN+DSi/IWKhail2DMZrUPYXCuF/ +mq5oZPvBx7nKm4SFlBFBQrm1tKDGlK7vrWTZ7jy1mF9tB9zLLzdRZ/U+BPUbUPs 5r04pN4JEKgR8m/TYob0AGzww25p0OA= -----END CERTIFICATE-----Generated at Sun Sep 27 04:37:09 2026 by rpki-client