$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa File: dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa (raw, json) Hash identifier: YhoWAz0P/Jl4cTK21REn8VAMWDlfN0HRuUhEM6WHC28= Subject key identifier: 3E:FF:07:66:E5:36:70:96:A5:30:3B:65:8E:07:33:BB:58:E2:57:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E47AFA7DF452E3E792D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.204.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:47:af:a7:df:45:2e:3e:79:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=503b7c42-fb57-4e97-9a56-722139ee6e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:67:8b:42:a4:35:e1:58:7a:ae:de:1a:aa: e9:fc:47:1e:6c:a9:9c:64:71:9c:1a:54:36:69:83: 28:c8:f2:b8:e8:55:72:13:46:35:ca:89:4b:4c:65: 0d:54:a1:e6:9c:29:87:f3:f8:68:90:ec:9d:6a:7e: 17:32:2e:32:10:37:88:72:5c:1e:d3:05:1d:e9:6e: 7a:c2:9f:68:cb:05:db:ba:30:1d:a1:b9:44:0d:ed: d3:23:8c:a4:7f:52:cd:44:ba:79:7a:0c:b3:a0:7d: 35:73:29:27:37:46:ba:c3:83:3c:88:52:e8:69:99: 56:5e:4e:df:39:52:36:f7:2d:da:8a:c7:b6:00:b0: 3f:41:c0:d0:3c:19:a9:c4:06:e8:da:c3:56:21:aa: b4:c5:95:cc:c8:ed:e9:e0:2f:62:7c:ec:31:04:ba: af:95:21:e1:c2:a7:63:4e:02:61:fa:71:a9:cb:20: b1:1b:cf:60:5c:1c:4f:48:88:82:1d:49:dd:55:14: 62:b0:f3:26:7b:d3:37:f2:cd:22:70:9a:a4:e7:7e: 2a:a7:00:5a:52:62:04:2f:3c:c5:ab:ba:23:1c:4d: 90:f1:52:be:5a:66:de:03:6d:38:da:6d:8b:4f:b3: a7:fc:0b:ff:85:f9:1a:07:e5:a0:51:7f:4c:11:68: f1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FF:07:66:E5:36:70:96:A5:30:3B:65:8E:07:33:BB:58:E2:57:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:11:5f:03:f0:a6:d9:d7:92:dc:10:21:58:c4:98:68:c0:4c: 1f:b8:2b:bf:64:c5:dd:6d:ad:39:73:4b:7d:a8:ad:f8:b3:26: e8:30:5d:60:1e:42:c7:3b:9f:23:43:6a:a9:ba:01:03:4e:8a: fb:43:a0:0d:78:a6:73:64:d0:79:6f:0e:f0:32:61:49:75:27: 51:18:37:12:45:e5:6e:d5:eb:ca:47:c7:f9:c1:ef:67:e3:eb: 57:fa:07:fe:75:cc:ff:2d:52:0c:3a:18:cd:9e:8c:87:81:1f: fb:27:f2:8c:32:c5:7b:3a:16:96:40:f4:94:26:1d:58:d8:55: ed:90:aa:cd:65:9f:85:13:ed:41:43:39:49:bc:e2:13:96:b0: ae:82:42:bb:f0:f5:1f:94:d2:a6:f9:9e:15:36:60:54:17:f3: 98:f6:8f:4f:41:82:63:8e:61:5f:b2:39:72:40:d1:cd:aa:21: aa:a1:de:22:6f:af:16:5a:b7:a0:f9:c9:7c:58:4f:5f:57:47: ca:f7:bd:47:72:ce:c5:dd:2c:5e:be:13:2a:bb:89:92:2a:48: ea:f4:5c:5f:47:d2:a8:b2:e5:d5:e0:b4:89:d7:7a:87:c4:52: d4:10:ce:48:9b:7b:d6:97:3e:d3:1d:11:1c:5a:cf:5a:aa:86: 08:a1:b7:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfkevp99FLj55LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTAzYjdjNDItZmI1Ny00ZTk3LTlhNTYtNzIyMTM5ZWU2ZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksdni0KkNeFYeq7eGqrp/EcebKmcZHGcGlQ2 aYMoyPK46FVyE0Y1yolLTGUNVKHmnCmH8/hokOydan4XMi4yEDeIclwe0wUd6W56 wp9oywXbujAdoblEDe3TI4ykf1LNRLp5egyzoH01cyknN0a6w4M8iFLoaZlWXk7f OVI29y3aise2ALA/QcDQPBmpxAbo2sNWIaq0xZXMyO3p4C9ifOwxBLqvlSHhwqdj TgJh+nGpyyCxG89gXBxPSIiCHUndVRRisPMme9M38s0icJqk534qpwBaUmIELzzF q7ojHE2Q8VK+WmbeA2042m2LT7On/Av/hfkaB+WgUX9MEWjxDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7/B2blNnCWpTA7ZY4HM7tY4le+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFmY2FjMWEtMTRmMi0z YjFlLTk5NDMtMGI3ZjQ3YzQzMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACURXwPwptnXktwQIVjEmGjATB+4K79kxd1trTlzS32orfizJugwXWAe Qsc7nyNDaqm6AQNOivtDoA14pnNk0HlvDvAyYUl1J1EYNxJF5W7V68pHx/nB72fj 61f6B/51zP8tUgw6GM2ejIeBH/sn8owyxXs6FpZA9JQmHVjYVe2Qqs1ln4UT7UFD OUm84hOWsK6CQrvw9R+U0qb5nhU2YFQX85j2j09BgmOOYV+yOXJA0c2qIaqh3iJv rxZat6D5yXxYT19XR8r3vUdyzsXdLF6+Eyq7iZIqSOr0XF9H0qiy5dXgtInXeofE UtQQzkibe9aXPtMdERxaz1qqhgiht34= -----END CERTIFICATE-----Generated at Fri Sep 25 14:43:54 2026 by rpki-client