$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74a380e0-ee97-3374-9a06-7b2afac09d11.roa File: 74a380e0-ee97-3374-9a06-7b2afac09d11.roa (raw, json) Hash identifier: fn1bAGu+vMD/yXv1sGjkVWM0SnBQtM279QjQSp/zDpI= Subject key identifier: 66:A9:44:CC:E9:22:DF:EC:C1:4F:EB:33:57:BE:BA:0F:0C:36:F9:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E56F17F7345C7E832C600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74a380e0-ee97-3374-9a06-7b2afac09d11.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.209.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:56:f1:7f:73:45:c7:e8:32:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cebd3c47-1224-49c0-b019-f516ac74964c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bc:95:5f:36:72:01:e9:64:f3:b5:9c:a2:60: cf:c5:20:2c:85:28:b2:7d:60:4b:32:1a:fc:3d:e4: 4d:15:49:a5:bd:4e:28:a2:38:86:6a:4b:57:a7:df: 87:aa:e7:b4:fc:6c:aa:1d:c9:70:dd:5c:0b:e0:05: 32:b5:a1:4d:5b:c7:e6:02:06:b8:6c:07:6f:08:95: f9:39:04:90:bb:d1:7c:49:be:89:46:af:aa:a9:25: 31:83:ea:0d:3e:2d:8f:a2:62:a1:ee:65:3f:56:48: 45:7e:0b:40:83:e4:bb:63:c3:61:b2:97:99:9a:33: b9:7d:f6:46:c3:a1:54:c2:08:6b:b1:f9:eb:c2:30: 0e:fe:d2:f6:a5:2d:7e:68:ad:6e:a6:be:f2:8c:30: cf:b1:1d:b7:cf:91:c9:0d:cb:e0:d1:a3:9e:1e:e4: fa:09:95:0e:fb:56:59:1b:e4:e8:89:44:1e:a4:03: 7b:bc:2c:ec:4c:95:74:8f:e1:1a:cd:e8:3c:81:55: d0:3c:fa:c8:81:ce:71:7e:ce:9d:f7:70:87:d9:6b: 3e:18:53:17:a0:6e:e2:26:bb:9b:d3:32:fc:ab:80: 72:7c:33:da:b6:11:a2:84:e5:76:ce:dc:80:82:98: 9d:65:78:8d:68:f4:77:f8:a6:05:6b:63:9f:a3:39: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A9:44:CC:E9:22:DF:EC:C1:4F:EB:33:57:BE:BA:0F:0C:36:F9:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74a380e0-ee97-3374-9a06-7b2afac09d11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6f:95:65:ad:42:1d:ea:f8:3e:54:e6:59:6e:b4:b6:b6:e6: ef:1f:4f:6f:5b:cb:36:f1:a2:18:44:b1:94:0a:1f:b5:57:e7: 71:00:ca:a0:7b:04:d5:4b:a6:33:15:7c:e2:02:83:4b:76:bd: b1:95:8f:d6:c6:a5:1f:66:91:d9:6a:85:cc:09:c4:7f:0e:f0: 8f:a4:04:41:17:23:0d:bb:ca:d1:5f:4a:1d:7b:89:0e:49:67: 69:4f:b6:6d:27:d2:e6:33:e1:43:ef:03:f5:c3:c3:0e:b6:01: 7d:34:26:4c:c3:59:c9:77:16:e0:07:aa:e4:5d:dd:6e:ff:85: 1a:e4:35:0a:94:d8:60:14:0e:ab:7c:33:9f:a3:a9:c8:65:51: 69:c6:b2:b3:0a:e2:c1:06:de:86:e2:42:0a:04:0d:b1:9c:67: ef:24:15:ad:a6:90:5d:b5:58:e7:54:a1:33:14:f5:b1:f7:1c: 21:e8:a5:3f:39:9c:2c:4f:4e:16:5e:f4:a8:a5:ed:89:0e:fb: 4c:1d:31:43:3e:dd:55:4e:4b:6b:5a:c3:2e:25:ae:a8:c3:03: d8:df:06:42:76:4b:1e:d2:22:6e:e9:66:7d:44:93:2a:06:bb: 55:03:04:a9:39:57:ce:73:1c:53:5e:4e:50:77:39:a5:79:dc: c4:39:78:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jflbxf3NFx+gyxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2ViZDNjNDctMTIyNC00OWMwLWIwMTktZjUxNmFjNzQ5NjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7yVXzZyAelk87WcomDPxSAshSiyfWBLMhr8 PeRNFUmlvU4oojiGaktXp9+Hque0/GyqHclw3VwL4AUytaFNW8fmAga4bAdvCJX5 OQSQu9F8Sb6JRq+qqSUxg+oNPi2PomKh7mU/VkhFfgtAg+S7Y8NhspeZmjO5ffZG w6FUwghrsfnrwjAO/tL2pS1+aK1upr7yjDDPsR23z5HJDcvg0aOeHuT6CZUO+1ZZ G+ToiUQepAN7vCzsTJV0j+Eazeg8gVXQPPrIgc5xfs6d93CH2Ws+GFMXoG7iJrub 0zL8q4ByfDPathGihOV2ztyAgpidZXiNaPR3+KYFa2OfozlvFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGapRMzpIt/swU/rM1e+ug8MNvkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRhMzgwZTAtZWU5Ny0z Mzc0LTlhMDYtN2IyYWZhYzA5ZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9F9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9vlWWtQh3q+D5U5llutLa25u8fT29byzbxohhEsZQKH7VX53EAyqB7 BNVLpjMVfOICg0t2vbGVj9bGpR9mkdlqhcwJxH8O8I+kBEEXIw27ytFfSh17iQ5J Z2lPtm0n0uYz4UPvA/XDww62AX00JkzDWcl3FuAHquRd3W7/hRrkNQqU2GAUDqt8 M5+jqchlUWnGsrMK4sEG3obiQgoEDbGcZ+8kFa2mkF21WOdUoTMU9bH3HCHopT85 nCxPThZe9Kil7YkO+0wdMUM+3VVOS2tawy4lrqjDA9jfBkJ2Sx7SIm7pZn1EkyoG u1UDBKk5V85zHFNeTlB3OaV53MQ5eA4= -----END CERTIFICATE-----Generated at Sat Sep 26 13:19:41 2026 by rpki-client