$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66585c46-f806-36d2-8a71-6c70b678582a.roa File: 66585c46-f806-36d2-8a71-6c70b678582a.roa (raw, json) Hash identifier: NHh2I967xdaTPUa8sHhM0ZMnkrqBcNhvVaJ3MpC9j94= Subject key identifier: 3B:C2:50:4A:7A:CA:81:91:EA:17:D6:C0:42:2E:27:20:59:49:36:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E555E2B26241A3D312200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66585c46-f806-36d2-8a71-6c70b678582a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 35994 IP address blocks: 23.209.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:55:5e:2b:26:24:1a:3d:31:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ced1eb0-fdf1-440f-886b-86ff36d539c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:2e:42:cf:07:57:b1:4b:df:68:4d:fe:6a: 6f:02:ce:5a:25:6d:26:e5:08:d8:a6:d1:87:1b:04: 65:09:b7:28:62:ff:95:8d:99:55:33:15:25:3d:d3: 7f:30:d8:84:a5:b7:40:a1:72:23:30:86:40:dc:bf: e8:d8:09:f3:55:9f:06:d3:93:b9:6a:d1:31:a9:99: 41:7c:e6:9c:ef:12:b7:ee:a9:d5:58:59:68:22:11: 12:df:2d:6b:48:26:5a:87:9e:22:2c:88:88:d4:30: 45:d9:40:03:ed:14:83:33:2e:7b:13:b2:56:3e:a7: d3:b1:8e:c9:bc:b3:04:d7:82:d1:93:e3:56:5b:9a: 77:ac:99:36:ce:87:43:16:48:87:19:26:07:d0:4c: f5:2f:55:f7:75:f9:a8:e1:3d:7c:e1:b1:ac:62:8a: b2:6b:d0:94:4e:1f:52:24:3e:8a:1d:2b:bb:96:27: f4:49:49:5b:2a:7d:00:f2:dc:bc:a4:67:45:a4:3f: 5a:26:70:95:d6:1f:06:57:77:1f:5a:a6:c7:76:a0: 38:c4:93:0f:5c:d1:9d:8b:fa:3c:14:32:9b:df:33: 98:09:84:6e:81:01:f1:11:ad:1a:57:86:44:2b:48: 62:0b:42:c3:d6:ce:3e:ef:10:a3:00:bf:b0:18:1f: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:50:4A:7A:CA:81:91:EA:17:D6:C0:42:2E:27:20:59:49:36:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66585c46-f806-36d2-8a71-6c70b678582a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:78:ae:ae:6d:c6:c9:2b:40:e7:03:97:e7:64:f2:a0:11:ac: 01:70:3a:d1:62:da:50:ad:37:ed:7d:a4:99:7b:05:cd:8e:95: b4:2a:f1:e5:f1:da:f6:db:1b:d7:92:b4:6a:69:cd:15:92:54: bd:8d:3e:65:48:c6:b1:0a:83:aa:2a:1d:bc:d4:31:c9:5c:31: b0:d7:38:d1:e2:c5:13:01:42:ee:a0:37:51:9f:29:a9:38:20: a1:f6:cf:53:ea:c2:81:b0:79:bc:a3:17:9f:ae:c3:16:2a:f8: c9:bb:79:a9:a8:39:79:a7:ea:b3:f8:d8:83:19:49:c3:5c:ab: 75:c9:51:ee:63:49:84:9c:1a:1c:dd:aa:b3:4b:6e:73:6d:08: 3b:62:a2:8f:58:e9:40:e9:d0:57:9b:51:2a:bc:19:89:17:df: 7c:b7:17:a3:8e:c0:06:80:9a:1e:ae:3c:09:1b:2b:a2:1c:94: a5:8e:b4:71:85:87:a2:d0:04:3c:95:d4:1a:62:48:c0:45:cc: 7c:ae:47:92:27:7a:b3:e2:32:ca:e5:66:de:0c:33:e6:ba:31: 53:ba:f3:45:6a:e2:c1:5d:44:df:05:74:6b:68:1a:aa:2f:8e: d9:73:75:f5:fa:ea:6a:a7:2a:26:37:68:8c:d6:00:18:80:c4: b7:cf:ff:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JflVeKyYkGj0xIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmNlZDFlYjAtZmRmMS00NDBmLTg4NmItODZmZjM2ZDUzOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR0uQs8HV7FL32hN/mpvAs5aJW0m5QjYptGH GwRlCbcoYv+VjZlVMxUlPdN/MNiEpbdAoXIjMIZA3L/o2AnzVZ8G05O5atExqZlB fOac7xK37qnVWFloIhES3y1rSCZah54iLIiI1DBF2UAD7RSDMy57E7JWPqfTsY7J vLME14LRk+NWW5p3rJk2zodDFkiHGSYH0Ez1L1X3dfmo4T184bGsYoqya9CUTh9S JD6KHSu7lif0SUlbKn0A8ty8pGdFpD9aJnCV1h8GV3cfWqbHdqA4xJMPXNGdi/o8 FDKb3zOYCYRugQHxEa0aV4ZEK0hiC0LD1s4+7xCjAL+wGB9ZhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvCUEp6yoGR6hfWwEIuJyBZSTYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjY1ODVjNDYtZjgwNi0z NmQyLThhNzEtNmM3MGI2Nzg1ODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9EpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV4rq5txskrQOcDl+dk8qARrAFwOtFi2lCtN+19pJl7Bc2OlbQq8eXx 2vbbG9eStGppzRWSVL2NPmVIxrEKg6oqHbzUMclcMbDXONHixRMBQu6gN1GfKak4 IKH2z1PqwoGwebyjF5+uwxYq+Mm7eamoOXmn6rP42IMZScNcq3XJUe5jSYScGhzd qrNLbnNtCDtioo9Y6UDp0FebUSq8GYkX33y3F6OOwAaAmh6uPAkbK6IclKWOtHGF h6LQBDyV1BpiSMBFzHyuR5InerPiMsrlZt4MM+a6MVO680Vq4sFdRN8FdGtoGqov jtlzdfX66mqnKiY3aIzWABiAxLfP/4E= -----END CERTIFICATE-----Generated at Sat Oct 10 13:22:31 2026 by rpki-client