$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37add396-58d7-38bd-8903-91696eb5644d.roa File: 37add396-58d7-38bd-8903-91696eb5644d.roa (raw, json) Hash identifier: Yed5O7klF0L/PvD7H9Y7yVrEBtji71vZd8zNXu4w6IY= Subject key identifier: 0D:6F:1A:86:FA:BB:46:B6:AC:E7:76:DA:EF:35:FA:C6:7C:2D:2D:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497EE4F8C433917C7FF3BA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37add396-58d7-38bd-8903-91696eb5644d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.217.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:e4:f8:c4:33:91:7c:7f:f3:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3ad65859-6961-4f95-a03e-f7467b49d873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:9f:0f:ab:6e:30:d8:c4:8e:36:25:ee:78: 15:94:be:9f:77:8d:4f:36:a9:e0:b8:d0:01:28:4d: 86:ce:fb:d7:37:9c:6b:0f:c0:ba:92:79:ed:44:1f: 07:38:94:0d:79:e2:2a:dd:88:fd:2b:01:8e:c4:a5: a3:69:d8:c7:a0:a3:62:77:83:a1:d5:4d:a2:85:50: 91:08:f4:5f:66:97:72:17:d4:a5:00:bf:c0:a2:5a: 85:4d:4e:b1:85:af:9f:67:dc:3f:3c:35:00:c5:2b: bb:c1:60:b7:17:e1:07:87:2a:41:3f:a8:b9:67:03: 45:fe:4f:b2:68:d7:2a:4c:c7:2a:c8:b9:c5:b0:f8: 8d:2f:7f:29:88:b7:3c:42:55:87:14:59:40:42:d1: 37:d0:4e:0c:b2:0f:00:9c:cc:32:17:fe:2d:ee:83: 04:bf:1b:2e:f9:15:8e:b0:1d:58:58:6d:95:c0:a3: aa:65:e6:02:af:04:1b:cd:41:11:ec:89:bb:89:3d: 01:08:96:72:04:da:b1:b7:d0:78:4f:31:61:a5:ac: bd:99:cd:c1:fa:5a:a1:31:77:06:ea:bc:8e:d8:77: 8a:11:15:f7:57:0d:d7:07:b0:be:64:8b:22:49:65: 1b:ed:b5:a1:99:03:8c:01:2c:6f:55:fa:42:fc:d2: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6F:1A:86:FA:BB:46:B6:AC:E7:76:DA:EF:35:FA:C6:7C:2D:2D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37add396-58d7-38bd-8903-91696eb5644d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:76:66:2c:12:b2:ca:64:c6:5d:c4:41:15:89:0e:f1:7a:2b: 56:58:59:66:f9:42:48:f7:f3:6f:d5:8d:fe:6a:a4:b8:c4:30: 61:4d:c8:5c:ca:a6:31:42:d2:90:f8:3e:c4:51:e7:a2:42:22: ec:78:e8:cb:be:e0:aa:32:ad:46:c4:a0:7b:ae:4b:c8:be:c7: 4b:73:6d:27:0f:44:ed:41:18:14:4b:b3:31:11:28:3b:62:31: 9b:d7:11:1e:01:ab:54:d5:35:25:21:bf:7b:88:ae:d0:2d:01: 49:e8:4b:f6:bc:d0:a8:f8:ad:e1:cc:34:a8:a5:c8:f8:c2:60: 4b:77:c3:cf:df:6a:e6:b3:21:ab:86:f6:d6:48:d9:1a:37:b8: 63:57:5d:33:0e:f3:16:d0:21:6c:3f:8a:54:13:90:62:f0:4b: 43:3f:37:1c:33:7f:50:0e:62:7a:57:2f:3e:7b:8d:fe:6b:1b: 8a:64:5c:f9:2b:9f:a5:73:af:36:64:b3:a6:7f:5c:f3:75:80: 33:8d:d7:15:6d:0d:9c:e0:c2:32:ab:68:79:4a:c1:e6:eb:b9: a0:f4:c1:b7:09:9b:4a:e9:b4:28:f9:fb:6f:32:26:a2:bc:4d: 66:61:fb:2b:b1:15:f8:2d:95:00:59:38:d6:24:fc:2a:b4:21: 17:8c:1e:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfuT4xDORfH/zugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2FkNjU4NTktNjk2MS00Zjk1LWEwM2UtZjc0NjdiNDlkODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqKfD6tuMNjEjjYl7ngVlL6fd41PNqnguNAB KE2GzvvXN5xrD8C6knntRB8HOJQNeeIq3Yj9KwGOxKWjadjHoKNid4Oh1U2ihVCR CPRfZpdyF9SlAL/AolqFTU6xha+fZ9w/PDUAxSu7wWC3F+EHhypBP6i5ZwNF/k+y aNcqTMcqyLnFsPiNL38piLc8QlWHFFlAQtE30E4Msg8AnMwyF/4t7oMEvxsu+RWO sB1YWG2VwKOqZeYCrwQbzUER7Im7iT0BCJZyBNqxt9B4TzFhpay9mc3B+lqhMXcG 6ryO2HeKERX3Vw3XB7C+ZIsiSWUb7bWhmQOMASxvVfpC/NJxnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1vGob6u0a2rOd22u81+sZ8LS0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzdhZGQzOTYtNThkNy0z OGJkLTg5MDMtOTE2OTZlYjU2NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN2ZiwSsspkxl3EQRWJDvF6K1ZYWWb5Qkj382/Vjf5qpLjEMGFNyFzK pjFC0pD4PsRR56JCIux46Mu+4KoyrUbEoHuuS8i+x0tzbScPRO1BGBRLszERKDti MZvXER4Bq1TVNSUhv3uIrtAtAUnoS/a80Kj4reHMNKilyPjCYEt3w8/fauazIauG 9tZI2Ro3uGNXXTMO8xbQIWw/ilQTkGLwS0M/Nxwzf1AOYnpXLz57jf5rG4pkXPkr n6VzrzZks6Z/XPN1gDON1xVtDZzgwjKraHlKwebruaD0wbcJm0rptCj5+28yJqK8 TWZh+yuxFfgtlQBZONYk/Cq0IReMHmg= -----END CERTIFICATE-----Generated at Sun Sep 27 01:29:31 2026 by rpki-client