$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e6aa930-c6e9-3bfe-af27-641748264d6d.roa File: 2e6aa930-c6e9-3bfe-af27-641748264d6d.roa (raw, json) Hash identifier: Q8yTkvD/IXOs+odMiY7vloT9qD48fxCLNNC2bSWnhLs= Subject key identifier: DE:30:63:A2:F0:70:A5:E4:EE:5B:77:EB:A3:E6:28:69:93:10:CF:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E530582A768EA880323C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e6aa930-c6e9-3bfe-af27-641748264d6d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.208.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:53:05:82:a7:68:ea:88:03:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=41f5304d-dc9d-4ed4-a54d-b0d4b902f425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:6b:13:09:bb:86:6e:65:a5:3e:21:96:6a: 8e:ca:7b:aa:2c:df:9a:52:78:78:aa:7f:0c:e1:22: 51:1b:5e:47:d9:49:ab:c6:7d:d1:69:12:ed:a6:5c: bc:8b:76:2a:a8:7d:a5:1d:cf:b0:ea:72:2d:6d:a5: d0:90:69:f6:11:2a:48:a6:2f:ea:b5:3c:ff:55:d3: fe:ed:eb:c0:2b:18:b8:44:71:2a:ea:3d:bf:e9:1c: d1:04:41:6d:e4:2c:9d:aa:f5:4f:d8:70:de:4e:24: 6c:a9:0d:28:09:b4:42:22:74:f3:18:5f:ae:b2:7f: 21:99:25:21:11:ec:c4:6c:de:e6:00:1e:de:87:37: 3c:9d:d2:12:d4:65:fe:ee:2a:02:36:57:c1:c5:44: 5f:c9:b7:53:dc:b5:b1:00:bf:3e:87:f2:c8:81:3b: 24:d3:35:fa:9d:e1:d9:28:39:7c:f5:43:32:a2:88: 58:bc:9f:85:3a:0b:96:c3:1a:9a:01:d3:24:ae:85: 90:40:4e:87:52:2b:9c:05:ec:9e:7e:58:f2:ad:0d: e9:08:57:41:6d:77:34:65:15:ea:90:ae:65:28:9c: 3e:58:8c:ce:2a:05:cd:c6:91:b6:f3:a5:50:5a:09: 69:b9:79:6f:90:a0:03:6e:79:b6:37:d4:cc:ab:0a: e7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:30:63:A2:F0:70:A5:E4:EE:5B:77:EB:A3:E6:28:69:93:10:CF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e6aa930-c6e9-3bfe-af27-641748264d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:94:eb:84:d0:07:72:00:d1:b1:6d:87:8b:55:f7:9b:5e:2c: 8c:8f:f3:65:8e:bb:a0:2d:ac:eb:d0:5f:a1:ba:bf:33:9a:9f: f5:1c:82:a0:6f:c8:cb:3c:c7:4b:8e:57:c7:a0:22:5c:35:9f: 92:a9:8e:f5:4e:51:42:77:82:7d:be:42:45:d4:46:8b:0b:67: 1b:93:82:35:e9:2e:45:d4:d5:bb:11:86:2d:0b:0b:6c:fb:7a: 31:c4:39:c4:cd:d1:16:90:14:2e:e5:62:1d:ed:48:48:e6:68: 5c:ee:d8:79:4a:78:e0:0a:ce:ff:9c:73:05:04:7c:b4:3a:d6: f9:94:ad:f3:6a:ed:31:22:f0:5c:94:a4:b9:73:d2:6c:c1:02: d6:fd:98:3b:08:ad:30:81:f6:44:d9:eb:9f:ad:1f:8b:ae:cf: e9:40:5f:ee:aa:cb:d1:80:f5:c4:9e:8b:3b:f8:e8:9c:c6:ca: 52:30:ba:97:19:fb:90:d6:04:ca:be:5f:e4:7f:db:81:a1:65: 6f:cf:bb:61:09:82:4a:a0:94:31:f4:4f:1c:51:f4:de:8a:0a: 1f:e5:63:f5:77:67:e6:2e:5a:fd:54:f5:f6:76:c5:42:4c:ac: 58:4e:6f:3a:45:f2:60:9c:a1:3e:eb:20:be:84:33:13:7a:09: 38:69:0f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JflMFgqdo6ogDI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDFmNTMwNGQtZGM5ZC00ZWQ0LWE1NGQtYjBkNGI5MDJmNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iJrEwm7hm5lpT4hlmqOynuqLN+aUnh4qn8M 4SJRG15H2Umrxn3RaRLtply8i3YqqH2lHc+w6nItbaXQkGn2ESpIpi/qtTz/VdP+ 7evAKxi4RHEq6j2/6RzRBEFt5CydqvVP2HDeTiRsqQ0oCbRCInTzGF+usn8hmSUh EezEbN7mAB7ehzc8ndIS1GX+7ioCNlfBxURfybdT3LWxAL8+h/LIgTsk0zX6neHZ KDl89UMyoohYvJ+FOguWwxqaAdMkroWQQE6HUiucBeyefljyrQ3pCFdBbXc0ZRXq kK5lKJw+WIzOKgXNxpG286VQWglpuXlvkKADbnm2N9TMqwrntQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4wY6LwcKXk7lt366PmKGmTEM8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmU2YWE5MzAtYzZlOS0z YmZlLWFmMjctNjQxNzQ4MjY0ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9AIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6U64TQB3IA0bFth4tV95teLIyP82WOu6AtrOvQX6G6vzOan/UcgqBv yMs8x0uOV8egIlw1n5KpjvVOUUJ3gn2+QkXURosLZxuTgjXpLkXU1bsRhi0LC2z7 ejHEOcTN0RaQFC7lYh3tSEjmaFzu2HlKeOAKzv+ccwUEfLQ61vmUrfNq7TEi8FyU pLlz0mzBAtb9mDsIrTCB9kTZ65+tH4uuz+lAX+6qy9GA9cSeizv46JzGylIwupcZ +5DWBMq+X+R/24GhZW/Pu2EJgkqglDH0TxxR9N6KCh/lY/V3Z+YuWv1U9fZ2xUJM rFhObzpF8mCcoT7rIL6EMxN6CThpD2Q= -----END CERTIFICATE-----Generated at Sat Sep 26 04:53:55 2026 by rpki-client