$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e28a1768-d77e-376b-9118-d07bc0f97c79.roa File: e28a1768-d77e-376b-9118-d07bc0f97c79.roa (raw, json) Hash identifier: QZJXNDORTJfoL+/netfGQdGihmA1ob+QtlymwpXcRBc= Subject key identifier: 17:8F:ED:35:F1:CC:FA:16:37:41:D6:6F:4A:28:40:A9:FC:B1:1A:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497ED4CA8911C1C8BA23C200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e28a1768-d77e-376b-9118-d07bc0f97c79.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.214.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:d4:ca:89:11:c1:c8:ba:23:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1aff01e-e93e-4fd1-8c95-8233a2216837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:06:7a:be:6a:eb:2c:d7:36:60:2c:79:ea:17: e0:12:fb:9b:5e:6f:99:ef:44:c7:e0:ac:cd:f8:e4: 8e:4c:e6:dc:e8:96:9d:9b:f8:10:09:50:de:59:f9: d5:5c:9d:28:26:1f:6b:ff:74:2d:69:6d:eb:a3:f0: f4:ba:ea:59:b2:7b:1c:31:74:91:39:9e:e9:62:50: c6:5f:62:8d:3b:42:4b:a3:71:2a:f5:70:42:a8:d6: a1:54:67:60:12:c2:bc:10:34:6f:28:ed:5a:ae:30: ff:1b:c9:d5:97:71:ac:a6:1b:13:8a:ef:5c:d4:e3: 1c:b5:c2:78:64:84:21:ea:80:63:1c:ad:5d:e5:9f: ea:8d:7a:9b:be:20:39:c7:a9:d4:4b:3d:62:a6:1e: 78:ba:12:da:30:b6:dc:f8:d1:a8:cb:29:47:fd:bc: 3e:3f:ca:17:54:0a:ea:87:e3:e3:8e:e3:66:ce:93: 66:48:ce:3b:11:45:d2:fe:08:22:90:bc:30:d6:f8: cc:8b:67:0b:db:7b:53:98:d9:c2:73:79:da:c4:e3: 4f:47:66:f0:45:98:44:cf:b5:db:80:f9:79:b7:c0: 47:40:94:9f:41:f2:37:4f:8a:08:6c:d8:a0:cf:27: 63:b7:dc:29:b7:60:37:70:5d:92:5d:a0:0a:14:f3: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8F:ED:35:F1:CC:FA:16:37:41:D6:6F:4A:28:40:A9:FC:B1:1A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e28a1768-d77e-376b-9118-d07bc0f97c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f7:85:b3:a0:4d:3a:b0:7f:93:99:d0:b7:08:20:99:97:a6: b7:cc:b6:2b:43:ff:40:eb:d2:92:d2:27:30:4b:2e:14:7e:73: de:f2:52:64:63:b4:7d:30:48:fc:ba:ba:c4:f2:1e:4f:a2:7a: 66:6e:3b:9c:e6:61:71:16:93:41:c3:5f:d3:a9:35:0b:a0:69: f6:9a:c3:90:dc:7d:b1:01:5d:69:0d:9f:a6:ff:f6:3b:53:68: 3e:78:f4:be:02:0c:3a:16:7d:09:78:84:a4:b6:00:28:16:d2: 78:41:24:e5:d2:f9:90:11:aa:9b:96:c8:8c:81:00:ad:0f:6d: 40:4b:d5:de:17:5e:6a:a4:74:de:df:93:4d:e9:b1:f2:3c:6d: 88:96:32:31:6a:da:39:53:af:44:d2:d2:14:48:0c:cc:2f:bc: cc:ed:2c:a8:80:d2:2e:e8:31:11:5e:8b:40:91:cf:ae:00:94: e5:0c:e0:e7:fb:04:8d:cd:ab:4e:f6:a2:30:3c:39:24:48:64: 90:d5:7b:d9:a1:18:bd:2d:c0:70:c8:40:2b:3a:5c:e5:73:f3: ca:66:74:53:1f:ba:4c:42:56:53:c5:b4:ff:37:b8:2a:09:e4: a3:59:ae:8a:4e:fb:e6:f0:fb:68:b5:9d:1b:a6:3d:8a:58:2e: 47:df:65:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JftTKiRHByLojwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFhZmYwMWUtZTkzZS00ZmQxLThjOTUtODIzM2EyMjE2ODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAZ6vmrrLNc2YCx56hfgEvubXm+Z70TH4KzN +OSOTObc6Jadm/gQCVDeWfnVXJ0oJh9r/3QtaW3ro/D0uupZsnscMXSROZ7pYlDG X2KNO0JLo3Eq9XBCqNahVGdgEsK8EDRvKO1arjD/G8nVl3GsphsTiu9c1OMctcJ4 ZIQh6oBjHK1d5Z/qjXqbviA5x6nUSz1iph54uhLaMLbc+NGoyylH/bw+P8oXVArq h+PjjuNmzpNmSM47EUXS/ggikLww1vjMi2cL23tTmNnCc3naxONPR2bwRZhEz7Xb gPl5t8BHQJSfQfI3T4oIbNigzydjt9wpt2A3cF2SXaAKFPNAYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeP7TXxzPoWN0HWb0ooQKn8sRokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTI4YTE3NjgtZDc3ZS0z NzZiLTkxMTgtZDA3YmMwZjk3Yzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9ZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET3hbOgTTqwf5OZ0LcIIJmXprfMtitD/0Dr0pLSJzBLLhR+c97yUmRj tH0wSPy6usTyHk+iemZuO5zmYXEWk0HDX9OpNQugafaaw5DcfbEBXWkNn6b/9jtT aD549L4CDDoWfQl4hKS2ACgW0nhBJOXS+ZARqpuWyIyBAK0PbUBL1d4XXmqkdN7f k03psfI8bYiWMjFq2jlTr0TS0hRIDMwvvMztLKiA0i7oMRFei0CRz64AlOUM4Of7 BI3Nq072ojA8OSRIZJDVe9mhGL0twHDIQCs6XOVz88pmdFMfukxCVlPFtP83uCoJ 5KNZropO++bw+2i1nRumPYpYLkffZdk= -----END CERTIFICATE-----Generated at Fri Sep 25 05:20:28 2026 by rpki-client