$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/621b5b6d-5279-3795-91d7-b01a7ddc3514.roa File: 621b5b6d-5279-3795-91d7-b01a7ddc3514.roa (raw, json) Hash identifier: HeyHZ0P4Cq7Ma043L3IGe8SC8sHh/PPlZgx1AFUDRZQ= Subject key identifier: 94:F5:E2:C6:C4:1B:AB:69:09:5E:14:81:8E:94:4F:AC:A0:75:47:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D60A179A247FBDE017200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/621b5b6d-5279-3795-91d7-b01a7ddc3514.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.53.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:60:a1:79:a2:47:fb:de:01:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=fbe4a190-4a04-480d-9438-ec38cd2f4328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0e:68:d4:69:3f:88:3b:4a:58:19:3a:56:0e: 0a:36:51:23:e8:f5:9a:9f:2e:f7:b2:53:6d:8c:1d: 03:0a:77:af:45:40:91:63:6a:61:e2:0a:b0:e9:cb: 6a:74:6a:c7:99:9d:39:c9:ff:75:12:85:5b:19:16: 21:bd:22:60:5b:fb:df:1f:84:96:72:60:56:9c:11: 56:63:a7:fe:68:ce:21:a0:cc:72:4e:de:f8:39:e9: 27:58:87:38:6d:2c:04:91:ac:28:0d:4b:3c:21:02: 1d:ed:3e:fb:fe:87:aa:b9:31:ac:f9:68:75:97:73: a0:73:cb:c0:f7:16:35:ef:9d:49:3d:ab:cd:67:e6: 4a:8c:12:b6:16:a6:e5:fa:dc:a7:d8:a6:3d:23:fe: 81:59:a8:9b:c9:1f:26:23:b0:92:28:e8:38:d2:3d: 0f:8c:d7:d6:13:a5:16:54:41:d7:9d:ff:df:12:75: ba:27:2d:84:47:fa:dd:c8:52:4d:2f:31:40:c2:80: 23:4f:f9:ef:81:a1:44:82:7a:c1:99:8c:65:7c:fe: bc:c9:ef:fe:cd:d9:c7:e7:92:77:df:bb:fa:f7:6a: 68:4c:75:e8:ed:cd:2e:95:49:91:83:28:86:df:93: d5:6b:d6:fe:e4:9b:74:5b:7a:60:d5:cf:28:5f:0e: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F5:E2:C6:C4:1B:AB:69:09:5E:14:81:8E:94:4F:AC:A0:75:47:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/621b5b6d-5279-3795-91d7-b01a7ddc3514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9a:88:50:0b:f0:b1:3f:5c:1d:dc:f3:6b:12:d5:4e:97:ad: 53:e1:87:54:78:fa:94:ba:5e:e1:86:e9:42:4d:07:b8:1d:76: fa:e4:67:d9:80:46:d5:c8:92:f9:33:2e:72:89:e4:25:9e:12: 39:a7:9f:87:ba:c6:d1:6c:fe:ee:ee:ac:a9:9d:fb:0a:c9:d9: e5:cf:46:0c:5b:1d:e8:a8:41:3a:0e:8e:de:52:50:77:50:7b: 38:84:13:6e:3f:c1:9b:a9:f5:3d:f7:4b:89:6d:1b:6b:bf:e6: c9:e5:15:60:92:8f:7b:a0:b5:35:9a:e9:55:05:09:3a:21:4f: 59:f1:84:27:58:39:38:e7:f6:e4:f9:dc:f3:9f:ce:1f:f6:4f: 24:73:b6:19:35:f0:60:13:45:dc:83:d3:7f:b6:06:97:95:31: cf:d5:45:91:47:da:b1:b8:32:87:84:10:ae:96:70:52:a1:d0: ab:24:51:db:76:6b:ec:92:f8:fb:ed:d8:d8:40:b5:d6:21:b3: 30:3b:26:a8:df:2c:45:d1:a1:f2:fb:3d:75:08:d7:41:b1:ab: d8:1b:a2:8c:3e:0b:73:c8:ad:fa:d1:ae:e2:bb:2a:3d:be:d2: 65:3b:5b:40:b5:52:64:be:7e:7a:8a:3a:55:f3:9a:6f:61:7f: 63:5b:28:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWCheaJH+94BcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZmJlNGExOTAtNGEwNC00ODBkLTk0MzgtZWMzOGNkMmY0MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w5o1Gk/iDtKWBk6Vg4KNlEj6PWany73slNt jB0DCnevRUCRY2ph4gqw6ctqdGrHmZ05yf91EoVbGRYhvSJgW/vfH4SWcmBWnBFW Y6f+aM4hoMxyTt74OeknWIc4bSwEkawoDUs8IQId7T77/oequTGs+Wh1l3Ogc8vA 9xY1751JPavNZ+ZKjBK2Fqbl+tyn2KY9I/6BWaibyR8mI7CSKOg40j0PjNfWE6UW VEHXnf/fEnW6Jy2ER/rdyFJNLzFAwoAjT/nvgaFEgnrBmYxlfP68ye/+zdnH55J3 37v692poTHXo7c0ulUmRgyiG35PVa9b+5Jt0W3pg1c8oXw7o5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJT14sbEG6tpCV4UgY6UT6ygdUcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjIxYjViNmQtNTI3OS0z Nzk1LTkxZDctYjAxYTdkZGMzNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeaiFAL8LE/XB3c82sS1U6XrVPhh1R4+pS6XuGG6UJNB7gddvrkZ9mA RtXIkvkzLnKJ5CWeEjmnn4e6xtFs/u7urKmd+wrJ2eXPRgxbHeioQToOjt5SUHdQ eziEE24/wZup9T33S4ltG2u/5snlFWCSj3ugtTWa6VUFCTohT1nxhCdYOTjn9uT5 3POfzh/2TyRzthk18GATRdyD03+2BpeVMc/VRZFH2rG4MoeEEK6WcFKh0KskUdt2 a+yS+Pvt2NhAtdYhszA7JqjfLEXRofL7PXUI10Gxq9gboow+C3PIrfrRruK7Kj2+ 0mU7W0C1UmS+fnqKOlXzmm9hf2NbKJ0= -----END CERTIFICATE-----Generated at Sun Sep 27 04:21:20 2026 by rpki-client