$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e86591f6-f1ce-3a0f-9aa7-68105a7ed97f.roa File: e86591f6-f1ce-3a0f-9aa7-68105a7ed97f.roa (raw, json) Hash identifier: u5Rw/KeUOhccEM5DSRi46UGGD1jgnqgJIf73FyvxU8M= Subject key identifier: 4F:46:4D:BB:87:12:C9:21:C8:C8:CB:AD:97:64:65:DD:5E:69:E8:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49857A2ABD20D429A0196A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e86591f6-f1ce-3a0f-9aa7-68105a7ed97f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.207.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:7a:2a:bd:20:d4:29:a0:19:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=81dd3f49-3ed9-4725-8535-d003e9df4748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:41:b2:ab:a1:2e:33:35:6b:f4:79:a1:5e: 89:88:c7:82:aa:f6:31:ce:6c:fa:db:3a:7a:b8:de: 75:37:83:08:dd:83:95:80:8c:3e:f4:4e:8f:fe:a9: 08:1c:2c:b0:0f:f4:9b:5d:3e:7f:cf:13:2f:f4:20: a6:f2:e1:e7:8e:70:76:fa:46:e4:35:1d:af:3b:05: 90:ea:d6:f0:a8:06:a0:5a:a0:1f:65:61:73:1d:5f: 4d:24:ec:52:94:fc:23:2e:7b:4d:10:f2:d2:3c:cc: 5a:ad:39:b7:e6:93:bb:ec:61:fc:d9:aa:2c:f3:2a: 67:0f:ab:35:7a:0b:84:37:e9:f7:f3:50:e9:40:f4: 83:6c:33:e3:77:c0:66:39:a2:d9:1a:ef:7d:9d:dd: 4e:2e:4d:dd:51:2c:2e:e0:41:c4:99:ce:ce:21:9d: 71:69:ff:e1:7d:f7:c9:cc:46:ca:a2:2a:57:56:89: a7:01:f2:11:f4:41:7d:52:41:8d:08:57:0a:16:9e: 5b:1a:e9:4c:8f:ea:f4:70:b1:18:f4:49:43:cb:8e: cf:0b:b7:8e:40:5b:ad:22:e2:ac:74:e9:bf:87:4b: 76:f0:75:3f:85:ab:1f:fd:d1:52:ab:89:4e:ea:d0: 95:78:1a:b8:a3:19:61:f0:78:9a:ba:cc:87:ad:7d: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:4D:BB:87:12:C9:21:C8:C8:CB:AD:97:64:65:DD:5E:69:E8:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e86591f6-f1ce-3a0f-9aa7-68105a7ed97f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:40:55:17:07:46:9e:88:23:e0:38:ea:2c:5d:7b:e0:65:a2: 00:cd:12:77:3d:99:a3:a9:c4:63:bd:99:4a:5a:ff:4b:04:4d: 2f:f6:f3:19:50:7a:80:8f:43:14:23:bc:e1:84:e5:3e:5c:a3: c8:aa:fb:cd:d1:22:ca:3b:6b:79:8d:f0:63:3d:b3:c6:b6:b6: 5b:70:fd:88:e1:35:2f:09:2f:f3:88:a7:69:61:70:3c:27:d4: d4:6e:31:fc:cf:91:05:61:6e:f2:a2:42:5d:1a:36:d7:37:de: 7e:fc:d2:fc:e5:63:7a:aa:fd:e4:5d:ed:4e:9d:91:75:82:c6: 86:c1:50:c1:e3:ec:56:bd:dc:5d:02:02:08:75:db:ff:3b:a8: 4d:f6:f0:be:ef:03:bf:c7:d1:ff:bb:29:17:a5:c2:ac:f3:cb: 46:d7:48:87:47:a7:25:41:87:ee:12:0b:b1:24:76:9d:db:7e: e1:09:56:5b:4c:ae:ae:52:36:1e:92:52:a9:d5:29:78:08:79: f8:1e:4f:ff:26:14:27:0a:29:aa:80:b8:32:de:3e:4d:65:a0: 69:89:b6:dd:a8:0c:f7:01:3d:6c:a3:05:44:30:49:a5:3b:3b: a1:0c:c4:33:a3:35:1a:b8:96:d7:5a:fa:f0:ae:2f:8a:45:1f: 22:61:ab:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhXoqvSDUKaAZaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODFkZDNmNDktM2VkOS00NzI1LTg1MzUtZDAwM2U5ZGY0NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDVBsquhLjM1a/R5oV6JiMeCqvYxzmz62zp6 uN51N4MI3YOVgIw+9E6P/qkIHCywD/SbXT5/zxMv9CCm8uHnjnB2+kbkNR2vOwWQ 6tbwqAagWqAfZWFzHV9NJOxSlPwjLntNEPLSPMxarTm35pO77GH82aos8ypnD6s1 eguEN+n381DpQPSDbDPjd8BmOaLZGu99nd1OLk3dUSwu4EHEmc7OIZ1xaf/hfffJ zEbKoipXVomnAfIR9EF9UkGNCFcKFp5bGulMj+r0cLEY9ElDy47PC7eOQFutIuKs dOm/h0t28HU/hasf/dFSq4lO6tCVeBq4oxlh8HiausyHrX2YBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9GTbuHEskhyMjLrZdkZd1eaegqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTg2NTkxZjYtZjFjZS0z YTBmLTlhYTctNjgxMDVhN2VkOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8/iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFAVRcHRp6II+A46ixde+BlogDNEnc9maOpxGO9mUpa/0sETS/28xlQ eoCPQxQjvOGE5T5co8iq+83RIso7a3mN8GM9s8a2tltw/YjhNS8JL/OIp2lhcDwn 1NRuMfzPkQVhbvKiQl0aNtc33n780vzlY3qq/eRd7U6dkXWCxobBUMHj7Fa93F0C Agh12/87qE328L7vA7/H0f+7KRelwqzzy0bXSIdHpyVBh+4SC7Ekdp3bfuEJVltM rq5SNh6SUqnVKXgIefgeT/8mFCcKKaqAuDLePk1loGmJtt2oDPcBPWyjBUQwSaU7 O6EMxDOjNRq4ltda+vCuL4pFHyJhq0M= -----END CERTIFICATE-----Generated at Tue Sep 29 20:02:21 2026 by rpki-client