$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6abb1e35-4d4a-3be3-a1a0-321175d9b84a.roa File: 6abb1e35-4d4a-3be3-a1a0-321175d9b84a.roa (raw, json) Hash identifier: utNVqqjM9JP2kAFbDsBcdZbPC/1Iommp/qdPdnlYuOs= Subject key identifier: 9C:7A:50:74:85:AF:5F:7D:73:BE:A7:1E:5F:9E:0C:B9:E4:05:34:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5E3A563A22D7C2C3FF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6abb1e35-4d4a-3be3-a1a0-321175d9b84a.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.220.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5e:3a:56:3a:22:d7:c2:c3:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=657adfac-d221-43d2-9c32-211d1e18d17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:66:aa:23:a2:ef:c1:45:1f:5d:be:ac:37: 71:79:3a:99:b8:38:20:04:bb:84:0a:85:21:62:70: 20:cd:6d:19:0e:ae:a7:72:2b:15:22:f0:94:09:e0: 0e:ea:fd:ce:0d:2c:1b:b0:bd:cf:ef:a4:b7:57:53: cc:84:0d:d5:99:07:ad:9d:71:31:f9:6b:df:53:74: 87:74:02:68:5e:34:99:40:44:2e:17:ab:20:96:2f: ea:54:45:c5:de:13:41:dd:e8:62:55:23:6a:2c:98: 74:09:c8:38:16:d6:a4:b4:7b:29:95:74:72:e3:11: 16:20:e7:98:69:b5:02:8c:8a:a5:72:dd:06:85:9e: a6:4f:10:d9:63:da:34:5d:e5:5c:72:f7:0c:e2:31: 5c:0a:e6:ca:9d:ff:51:c9:ab:68:b7:7e:19:48:cf: 27:59:65:c8:f4:b4:e6:f7:9a:57:f6:af:a6:5d:99: 33:1b:92:9d:25:87:2a:6d:01:b8:e5:e0:6f:2f:ce: 0e:93:10:96:37:39:68:a3:4a:2b:24:2c:1d:d7:c4: 65:41:72:c7:dc:0b:a5:7f:09:48:e7:4b:74:81:aa: a8:29:49:05:e6:0d:a5:2a:c0:4a:74:ec:5f:c5:c0: 2d:27:5e:e0:25:0d:bb:76:2f:c7:e2:12:17:e7:a4: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7A:50:74:85:AF:5F:7D:73:BE:A7:1E:5F:9E:0C:B9:E4:05:34:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6abb1e35-4d4a-3be3-a1a0-321175d9b84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.220.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:2d:94:3a:98:2d:6a:28:fa:28:4c:c6:56:d3:e5:45:ba:8e: 56:a8:f8:25:8d:bb:28:3c:b0:0b:ae:e1:cd:46:b2:d6:7c:bf: a2:9f:58:e0:8d:b3:be:87:19:aa:e2:0a:4f:4d:a0:48:5a:0a: c9:52:2e:95:83:7e:24:0d:36:00:aa:95:8c:c4:b7:f3:d0:af: 16:48:c4:ed:65:bf:92:03:e5:c4:12:3d:3d:8a:b1:2a:e3:da: 39:4e:80:4a:ce:63:c3:97:01:e3:a6:26:5e:72:fc:a5:7b:d2: 20:fe:34:56:e6:97:f8:43:6a:b5:b6:42:66:93:99:87:b4:92: ac:e7:ac:af:cd:b8:39:fa:cc:c5:9a:0a:31:2f:3d:15:86:5a: ac:47:8b:92:b8:ab:be:a5:83:ab:74:84:39:59:15:38:67:10: bd:f2:f4:eb:83:c9:0b:73:28:25:1d:04:5e:13:a2:19:ab:ce: e4:fc:8b:2d:ca:28:43:55:29:d3:79:fb:1a:d6:ee:f4:06:0f: 43:bb:be:1f:2a:ab:7b:6a:b9:3f:96:77:40:a0:89:c7:7b:27: ba:3d:3f:41:e9:c6:a5:34:7b:67:02:a5:9c:d8:c7:0e:cf:83: df:32:9d:70:44:f8:19:fa:33:1f:eb:6c:28:ed:6e:00:15:3d: c3:e0:c7:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbV46Vjoi18LD/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NjU3YWRmYWMtZDIyMS00M2QyLTljMzItMjExZDFlMThkMTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLVmqiOi78FFH12+rDdxeTqZuDggBLuECoUh YnAgzW0ZDq6ncisVIvCUCeAO6v3ODSwbsL3P76S3V1PMhA3VmQetnXEx+WvfU3SH dAJoXjSZQEQuF6sgli/qVEXF3hNB3ehiVSNqLJh0Ccg4FtaktHsplXRy4xEWIOeY abUCjIqlct0GhZ6mTxDZY9o0XeVccvcM4jFcCubKnf9Ryatot34ZSM8nWWXI9LTm 95pX9q+mXZkzG5KdJYcqbQG45eBvL84OkxCWNzloo0orJCwd18RlQXLH3AulfwlI 50t0gaqoKUkF5g2lKsBKdOxfxcAtJ17gJQ27di/H4hIX56S/vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx6UHSFr199c76nHl+eDLnkBTTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmFiYjFlMzUtNGQ0YS0z YmUzLWExYTAtMzIxMTc1ZDliODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9xoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwtlDqYLWoo+ihMxlbT5UW6jlao+CWNuyg8sAuu4c1GstZ8v6KfWOCN s76HGariCk9NoEhaCslSLpWDfiQNNgCqlYzEt/PQrxZIxO1lv5ID5cQSPT2KsSrj 2jlOgErOY8OXAeOmJl5y/KV70iD+NFbml/hDarW2QmaTmYe0kqznrK/NuDn6zMWa CjEvPRWGWqxHi5K4q76lg6t0hDlZFThnEL3y9OuDyQtzKCUdBF4TohmrzuT8iy3K KENVKdN5+xrW7vQGD0O7vh8qq3tquT+Wd0Cgicd7J7o9P0HpxqU0e2cCpZzYxw7P g98ynXBE+Bn6Mx/rbCjtbgAVPcPgx7M= -----END CERTIFICATE-----Generated at Sun Sep 27 23:10:27 2026 by rpki-client