$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69b428b1-173d-3bc9-8db4-af3199a7ea8b.roa File: 69b428b1-173d-3bc9-8db4-af3199a7ea8b.roa (raw, json) Hash identifier: gdaIRJDr2rXNQgsOFIT5RvEOT2kg4uPoNdc5qNEtarE= Subject key identifier: 7F:D6:11:9B:73:03:CD:38:4B:80:25:55:1A:D5:4F:AC:4E:D4:9D:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F498606E418E575A1D00EEA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69b428b1-173d-3bc9-8db4-af3199a7ea8b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.217.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:06:e4:18:e5:75:a1:d0:0e:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb048420-f05b-451d-adce-049cc13adf8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:09:77:de:69:b0:0a:ff:c8:65:bb:95:21: 3a:5f:5b:2e:82:3e:8a:2a:86:c6:3a:09:b7:b5:27: 4e:d5:ec:dc:49:39:77:f5:ec:ef:78:80:97:8c:6d: 31:b8:4d:7d:4e:f6:50:b1:d1:1b:5a:51:60:e0:ff: 51:0f:f3:7c:84:3d:23:c6:fa:14:36:ec:b8:49:62: 75:72:a7:04:a3:e3:51:0e:c1:b4:fb:f0:fc:7c:75: e5:c2:2e:ac:ee:e5:5d:36:ba:b0:d0:01:2f:9c:3e: 49:ed:29:69:71:8d:15:19:ec:e8:b0:1a:7d:d0:fd: d0:9d:a0:1e:55:2e:62:5e:63:63:c2:3f:0c:af:62: e2:f2:81:61:be:49:cd:f7:bb:65:f0:4f:f0:d0:21: 6e:80:cb:17:1a:83:ea:51:8a:cd:da:25:5a:85:19: f3:8e:79:e1:62:af:bc:4f:da:5b:bb:c3:e6:c3:94: ec:2e:79:b5:d5:dc:38:8a:e3:6d:05:ff:49:cf:79: 02:ae:f2:76:eb:c0:a0:6f:f9:06:51:d3:56:c7:00: e0:a2:e3:22:b9:0c:de:f0:bd:91:6f:24:55:a7:c7: db:7b:05:cf:0b:94:55:24:cc:07:68:05:39:d8:82: 41:c9:5c:23:92:62:3b:c4:d2:9f:d6:a2:8f:d2:a3: b9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D6:11:9B:73:03:CD:38:4B:80:25:55:1A:D5:4F:AC:4E:D4:9D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69b428b1-173d-3bc9-8db4-af3199a7ea8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:aa:fe:3e:39:e0:eb:30:4c:cf:dc:80:80:04:c5:90:51:a6: c8:59:0e:45:76:f8:be:c4:93:3d:c9:96:88:ed:f2:ac:fd:42: 1d:9b:a0:eb:0a:0c:80:df:41:13:fe:c1:31:13:77:60:65:d3: 78:8d:6f:80:3e:71:59:19:89:3f:62:9f:ce:8e:ff:52:67:c9: 7e:77:88:89:f2:74:d7:5d:c2:db:1a:13:c1:4f:ec:44:b0:84: 89:0b:4a:ee:c5:d8:48:be:17:64:05:1f:0b:95:88:97:d7:7a: c3:72:72:cb:ca:8d:4f:87:41:af:53:81:da:eb:c1:25:3d:49: 27:b8:df:54:a2:ad:fe:10:67:01:b7:fb:ae:fd:c8:f1:80:b9: bb:89:34:cb:5e:4e:11:95:ed:51:41:a3:45:d8:c6:9a:00:0e: 17:2a:db:b2:3f:1f:03:43:2d:88:79:af:37:6e:f1:74:38:10: 52:7f:09:c4:ed:85:c5:8c:b6:21:7e:8a:b7:fb:70:38:d1:80: 8c:8d:28:4b:51:e5:86:c1:61:2f:07:6a:5d:46:08:17:b6:af: 3e:99:2a:f5:57:81:cb:aa:de:35:a1:70:63:68:83:fb:79:b4: 72:91:a7:f9:9f:10:ac:88:68:fa:10:c1:58:da:07:97:53:5f: cb:51:f4:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhgbkGOV1odAO6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmIwNDg0MjAtZjA1Yi00NTFkLWFkY2UtMDQ5Y2MxM2FkZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyikJd95psAr/yGW7lSE6X1sugj6KKobGOgm3 tSdO1ezcSTl39ezveICXjG0xuE19TvZQsdEbWlFg4P9RD/N8hD0jxvoUNuy4SWJ1 cqcEo+NRDsG0+/D8fHXlwi6s7uVdNrqw0AEvnD5J7SlpcY0VGezosBp90P3QnaAe VS5iXmNjwj8Mr2Li8oFhvknN97tl8E/w0CFugMsXGoPqUYrN2iVahRnzjnnhYq+8 T9pbu8Pmw5TsLnm11dw4iuNtBf9Jz3kCrvJ268Cgb/kGUdNWxwDgouMiuQze8L2R byRVp8fbewXPC5RVJMwHaAU52IJByVwjkmI7xNKf1qKP0qO5OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/WEZtzA804S4AlVRrVT6xO1J2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjliNDI4YjEtMTczZC0z YmM5LThkYjQtYWYzMTk5YTdlYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmq/j454OswTM/cgIAExZBRpshZDkV2+L7Ekz3Jlojt8qz9Qh2boOsK DIDfQRP+wTETd2Bl03iNb4A+cVkZiT9in86O/1JnyX53iInydNddwtsaE8FP7ESw hIkLSu7F2Ei+F2QFHwuViJfXesNycsvKjU+HQa9TgdrrwSU9SSe431Sirf4QZwG3 +679yPGAubuJNMteThGV7VFBo0XYxpoADhcq27I/HwNDLYh5rzdu8XQ4EFJ/CcTt hcWMtiF+irf7cDjRgIyNKEtR5YbBYS8Hal1GCBe2rz6ZKvVXgcuq3jWhcGNog/t5 tHKRp/mfEKyIaPoQwVjaB5dTX8tR9Bs= -----END CERTIFICATE-----Generated at Fri Sep 25 20:42:38 2026 by rpki-client