$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa File: 2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa (raw, json) Hash identifier: c0KuIXAMkeiaaD1jZQiA9/tRV9nsd3RsvXqSnk3L1y4= Subject key identifier: 1B:7D:14:E6:32:A2:CB:66:9C:98:28:26:88:5C:27:B0:16:4E:13:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5805653290893E09BBA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.220.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:58:05:65:32:90:89:3e:09:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=fb7f54c2-9cc2-4a45-a6dc-ec32d4b4f150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:c1:d0:b2:43:ec:15:69:f8:62:b5:20:5a: 15:4e:9e:c9:8a:2d:2e:67:2e:93:5f:bc:4e:08:6a: fb:05:8a:b8:a8:59:f7:ed:5f:50:3f:aa:b7:e9:6a: 5c:ae:12:e0:8e:25:cf:18:d2:83:15:d6:ed:80:23: 4c:40:6a:6e:a9:1b:ae:a3:86:c6:2b:8e:69:7a:8d: 11:3e:a8:64:ec:e6:ab:05:b4:e2:92:92:87:c6:08: 6f:ed:ee:6e:f1:e2:59:1c:0f:11:ba:61:b3:db:b5: 3d:4b:51:e1:c5:e7:44:7e:33:3e:0a:78:86:65:be: 0e:18:be:ef:a3:87:fd:11:e8:82:1f:0e:48:60:66: 79:47:d9:66:11:75:9c:ce:1f:5f:8b:eb:16:53:4b: 7a:8d:e9:fe:35:16:b2:1f:3f:97:76:fb:cd:ee:78: d8:3a:ed:bd:00:cf:69:dc:1f:a9:75:32:5c:32:3c: 98:13:f1:5d:56:bb:9f:26:1d:b0:3e:1a:f4:29:0e: ed:ce:c5:3a:77:4b:2d:2a:8e:49:be:ff:f1:80:b5: 11:d3:ac:ef:57:2c:69:b8:c2:42:2a:3d:37:37:2d: b5:d1:ce:9f:a5:5e:d9:f6:93:ec:fc:92:77:90:45: 74:aa:f2:13:f4:2e:73:e7:f4:0c:26:7e:2f:78:92: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7D:14:E6:32:A2:CB:66:9C:98:28:26:88:5C:27:B0:16:4E:13:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a6e88ae-fce1-33a4-8cf2-b493368b6f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:44:3c:09:3e:a9:06:9e:0f:a9:b7:c7:49:93:53:9d:de:cb: 94:bb:18:d2:d8:fe:80:66:a3:6c:fd:ab:8c:b8:2b:c1:71:28: 08:e4:73:c0:6e:1c:b0:e4:cf:cf:4e:c4:73:dc:bb:b0:cf:dc: 9e:17:cc:dc:0b:98:0c:e3:ee:d2:80:78:4c:41:f5:53:5b:12: c2:a3:5f:2e:3f:56:89:b9:f4:db:b3:c5:cf:b7:81:a8:88:c5: 90:0b:30:c0:ea:50:93:43:e7:c3:f1:e2:f4:7a:19:e3:fc:c3: 53:71:3e:68:7d:b8:4c:10:14:08:a6:e4:d7:4c:55:c6:34:8c: 15:8d:71:3a:b5:b7:d1:eb:9a:7c:64:6c:a4:62:76:93:0f:53: e9:c0:e0:01:d9:e4:cf:50:4d:f9:0e:ff:69:8f:d0:90:dd:a6: 80:9b:ed:86:61:6f:3c:18:88:31:af:67:48:55:85:3d:7e:13: 51:f5:01:2f:60:b6:aa:9b:14:05:a1:43:7b:40:08:a9:da:b2: 16:07:aa:60:e4:6a:ff:48:29:56:b8:8b:4f:40:2e:0e:b8:e6: 2c:a2:02:e3:18:ea:bf:22:f7:7d:51:f4:50:0e:8f:3b:8d:d3: f9:f0:4f:ad:c8:b8:a0:7d:92:b6:dd:ba:cf:cc:70:93:fe:f2: e2:59:9f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVgFZTKQiT4Ju6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZmI3ZjU0YzItOWNjMi00YTQ1LWE2ZGMtZWMzMmQ0YjRmMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm83B0LJD7BVp+GK1IFoVTp7Jii0uZy6TX7xO CGr7BYq4qFn37V9QP6q36WpcrhLgjiXPGNKDFdbtgCNMQGpuqRuuo4bGK45peo0R Pqhk7OarBbTikpKHxghv7e5u8eJZHA8RumGz27U9S1HhxedEfjM+CniGZb4OGL7v o4f9EeiCHw5IYGZ5R9lmEXWczh9fi+sWU0t6jen+NRayHz+XdvvN7njYOu29AM9p 3B+pdTJcMjyYE/FdVrufJh2wPhr0KQ7tzsU6d0stKo5Jvv/xgLUR06zvVyxpuMJC Kj03Ny210c6fpV7Z9pPs/JJ3kEV0qvIT9C5z5/QMJn4veJKhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt9FOYyostmnJgoJohcJ7AWThO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmE2ZTg4YWUtZmNlMS0z M2E0LThjZjItYjQ5MzM2OGI2ZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9xWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1EPAk+qQaeD6m3x0mTU53ey5S7GNLY/oBmo2z9q4y4K8FxKAjkc8Bu HLDkz89OxHPcu7DP3J4XzNwLmAzj7tKAeExB9VNbEsKjXy4/Vom59Nuzxc+3gaiI xZALMMDqUJND58Px4vR6GeP8w1NxPmh9uEwQFAim5NdMVcY0jBWNcTq1t9Hrmnxk bKRidpMPU+nA4AHZ5M9QTfkO/2mP0JDdpoCb7YZhbzwYiDGvZ0hVhT1+E1H1AS9g tqqbFAWhQ3tACKnashYHqmDkav9IKVa4i09ALg645iyiAuMY6r8i931R9FAOjzuN 0/nwT63IuKB9krbdus/McJP+8uJZn/0= -----END CERTIFICATE-----Generated at Mon Sep 28 06:13:05 2026 by rpki-client