$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd538485-3fb5-3e74-8dc9-a165779eac28.roa File: fd538485-3fb5-3e74-8dc9-a165779eac28.roa (raw, json) Hash identifier: Kqiu+4L1Hhhmip8AWiE1EtpR/sKQ+6w9ZX9BJYDA+rk= Subject key identifier: 7F:9C:0E:96:7F:E5:89:63:73:CE:5D:C9:B3:3B:D8:37:F9:5D:63:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497EE84925B63CB56DDE0580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd538485-3fb5-3e74-8dc9-a165779eac28.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.217.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:e8:49:25:b6:3c:b5:6d:de:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7516bdf0-1001-4dd0-b302-cb4db4efc191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4b:23:b6:08:79:0d:5e:49:97:da:a5:b7:c6: 68:7b:d3:18:11:4f:08:1d:fc:7c:4c:91:fd:e0:67: 5c:f1:7f:fa:6d:a1:de:70:71:bc:7b:74:87:dc:90: 83:f0:a3:b5:fb:f3:0e:b5:49:2e:de:9c:d4:3e:10: 7a:c2:75:87:72:48:75:e5:2e:61:99:7a:0e:90:17: 6b:ff:fc:85:c9:1c:ae:8e:c6:fb:a8:65:1c:69:8f: e2:ed:e0:8b:10:66:d5:91:86:7e:7b:93:9c:c6:f8: 5e:c7:59:54:44:d1:bc:73:3e:5d:dc:6d:af:39:a6: 63:4e:97:6d:2c:7e:30:e7:60:f4:9e:e5:b0:a9:24: 64:eb:eb:2c:d7:47:b0:06:00:7d:73:c8:78:73:24: 80:3a:11:22:49:cd:6a:9f:df:db:2b:08:3a:f8:67: fd:3b:57:ed:f2:9d:33:42:26:89:eb:c2:66:f5:c6: 9d:76:7b:54:7e:05:c5:75:31:9b:1d:60:74:66:a2: b8:9e:74:63:bb:bb:c0:c5:b8:19:ef:b2:9e:bc:ad: 68:73:a7:20:07:5f:13:54:dd:9a:c4:b7:95:04:e3: d3:a3:f6:6f:ec:34:97:b4:02:c0:7e:df:90:88:74: a7:40:a0:e0:ba:83:75:6f:fd:b7:36:67:b2:0d:7b: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9C:0E:96:7F:E5:89:63:73:CE:5D:C9:B3:3B:D8:37:F9:5D:63:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fd538485-3fb5-3e74-8dc9-a165779eac28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:93:20:85:69:f3:69:e6:09:dd:79:0e:1c:a2:c9:f3:cd:d2: 8a:d5:6b:9e:d8:a8:73:26:fb:65:63:cf:1b:b1:a2:a2:4f:12: a6:03:e2:b2:b3:17:77:06:3a:5a:27:16:26:4a:43:c6:37:74: 69:5b:b8:2e:8f:77:e4:51:f5:30:0b:bf:49:b0:36:46:41:1a: c6:33:32:5e:63:3a:00:4d:66:44:f5:dc:2d:35:50:82:38:0b: 63:de:7e:4e:7b:be:5a:35:aa:f7:ea:69:60:2c:61:78:bb:5f: 88:57:ba:15:7b:dd:10:0c:68:f5:a5:03:ca:67:f0:e3:b7:a1: 22:12:ad:eb:90:c6:bd:7f:77:c4:74:17:f8:8a:a1:3a:50:12: cd:ab:08:74:fe:69:6b:03:79:49:e8:61:0c:d7:0e:32:d4:37: 21:4d:aa:e3:54:14:86:52:ad:1b:eb:37:02:44:fa:45:2c:96: 45:86:fe:a7:2c:71:c9:ec:9a:b2:e6:c6:71:c6:67:34:4e:0e: 70:db:01:59:a8:fa:ff:2e:7d:4d:8c:7f:c0:e4:80:7d:d1:e0: 43:ac:4d:6a:1f:ac:ff:99:d9:ec:d1:71:ff:d8:1b:e5:b8:8a: 5b:a4:0b:39:d6:fb:09:e3:fe:39:26:cd:15:fa:fb:f8:7e:6e: fa:c0:0a:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfuhJJbY8tW3eBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzUxNmJkZjAtMTAwMS00ZGQwLWIzMDItY2I0ZGI0ZWZjMTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgksjtgh5DV5Jl9qlt8Zoe9MYEU8IHfx8TJH9 4Gdc8X/6baHecHG8e3SH3JCD8KO1+/MOtUku3pzUPhB6wnWHckh15S5hmXoOkBdr //yFyRyujsb7qGUcaY/i7eCLEGbVkYZ+e5Ocxvhex1lURNG8cz5d3G2vOaZjTpdt LH4w52D0nuWwqSRk6+ss10ewBgB9c8h4cySAOhEiSc1qn9/bKwg6+Gf9O1ft8p0z QiaJ68Jm9caddntUfgXFdTGbHWB0ZqK4nnRju7vAxbgZ77KevK1oc6cgB18TVN2a xLeVBOPTo/Zv7DSXtALAft+QiHSnQKDguoN1b/23NmeyDXv1ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+cDpZ/5Yljc85dybM72Df5XWOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmQ1Mzg0ODUtM2ZiNS0z ZTc0LThkYzktYTE2NTc3OWVhYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9naMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKTIIVp82nmCd15DhyiyfPN0orVa57YqHMm+2VjzxuxoqJPEqYD4rKz F3cGOlonFiZKQ8Y3dGlbuC6Pd+RR9TALv0mwNkZBGsYzMl5jOgBNZkT13C01UII4 C2Pefk57vlo1qvfqaWAsYXi7X4hXuhV73RAMaPWlA8pn8OO3oSISreuQxr1/d8R0 F/iKoTpQEs2rCHT+aWsDeUnoYQzXDjLUNyFNquNUFIZSrRvrNwJE+kUslkWG/qcs ccnsmrLmxnHGZzRODnDbAVmo+v8ufU2Mf8DkgH3R4EOsTWofrP+Z2ezRcf/YG+W4 ilukCznW+wnj/jkmzRX6+/h+bvrACgE= -----END CERTIFICATE-----Generated at Tue Sep 29 16:06:10 2026 by rpki-client