$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa File: 784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa (raw, json) Hash identifier: YDQFwD6qUfXKPSF8fkp0CPKFpzNlTJfgzGSGGVCJW8U= Subject key identifier: A3:87:52:70:DF:FC:79:7E:39:55:FC:6E:C7:64:CC:60:CA:C6:91:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497ED708A046385A6EEF2880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.214.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:d7:08:a0:46:38:5a:6e:ef:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=85d7b775-532c-4891-b88d-37a1376e5bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b4:5b:95:42:da:81:ad:48:bb:a7:90:9c:6e: 75:04:ee:d1:6f:7c:a6:8b:b4:5e:f6:38:5b:59:2e: 86:c0:e5:ff:43:36:cd:60:dd:15:f4:ca:01:c0:ca: 5d:0c:0f:bc:a8:13:6a:9c:3a:a3:4a:7e:d8:c3:fd: 1c:3f:a5:a9:09:aa:31:7e:7c:fd:d4:ef:75:6b:d9: 5b:3c:d1:8e:56:bc:75:ec:29:88:c3:74:ca:80:36: 1e:85:df:ea:a7:4f:d9:65:33:e4:3d:8c:62:0c:e2: d0:2e:c7:1e:de:67:f4:21:1e:f6:67:04:74:76:7b: 0a:34:55:d8:7f:37:30:10:14:74:ee:78:04:72:0b: 5c:55:ac:56:ff:16:86:b5:50:4c:c4:d5:27:3e:9c: 1d:62:b4:9e:03:a6:b8:09:41:db:1f:7b:6c:e0:8c: 48:87:3d:85:3f:0c:41:10:a7:5a:e1:86:54:4b:57: 81:1f:7f:ac:d8:96:0e:f5:15:44:40:2f:98:ae:fc: 61:b3:ab:2e:6c:28:b3:2a:ab:ac:ad:9d:16:6b:ff: 34:2f:7c:47:3a:03:4f:21:4c:5c:af:61:95:3b:d7: bc:bb:92:92:b3:c7:3d:a4:1d:17:14:a0:4e:fa:e9: 8d:a1:7c:dc:a0:e3:4d:9b:ea:4f:58:44:10:61:5d: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:87:52:70:DF:FC:79:7E:39:55:FC:6E:C7:64:CC:60:CA:C6:91:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:db:de:08:94:4a:9b:27:0d:eb:00:57:ed:d2:a5:00:b4:0e: 75:f9:84:9a:de:15:7e:6c:1a:76:69:1a:c6:a3:77:bf:30:28: cf:e0:84:2a:60:ff:8a:fd:d5:cf:3c:ef:b3:a7:5c:01:d9:85: 2e:44:7d:cf:1c:93:2e:d2:e2:3e:4a:34:16:c4:cd:4d:e2:27: ac:a4:79:c6:de:6b:4e:e9:9f:6f:6e:33:7c:d1:41:16:b7:5a: 1d:1b:ca:db:69:7c:cc:a1:14:b2:2c:14:74:e6:4d:91:cd:79: b9:17:e1:d9:b7:df:b9:66:16:2d:45:df:76:05:c2:f2:4b:92: 6b:bc:3b:a9:59:ea:25:5c:09:cc:db:5d:c2:18:15:55:0c:d7: f7:70:8d:c2:29:37:9d:7f:32:bb:18:78:84:77:23:de:f8:c9: 70:c6:ba:bc:ec:b9:db:f9:03:65:5e:c5:10:c5:2b:fd:58:87: 86:2c:01:bc:67:fe:ee:07:81:63:95:43:41:97:a7:8a:11:7d: cc:e9:02:b2:42:b2:ff:14:8e:f0:50:8d:26:55:79:c5:5a:53: 75:2a:61:b8:2e:e6:fc:4c:47:0e:41:05:87:8d:f6:2e:12:79: fc:21:52:e0:2a:e2:d4:5c:e7:26:d6:53:61:8d:d6:10:af:f5: ed:16:b7:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JftcIoEY4Wm7vKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODVkN2I3NzUtNTMyYy00ODkxLWI4OGQtMzdhMTM3NmU1YmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLRblULaga1Iu6eQnG51BO7Rb3ymi7Re9jhb WS6GwOX/QzbNYN0V9MoBwMpdDA+8qBNqnDqjSn7Yw/0cP6WpCaoxfnz91O91a9lb PNGOVrx17CmIw3TKgDYehd/qp0/ZZTPkPYxiDOLQLsce3mf0IR72ZwR0dnsKNFXY fzcwEBR07ngEcgtcVaxW/xaGtVBMxNUnPpwdYrSeA6a4CUHbH3ts4IxIhz2FPwxB EKda4YZUS1eBH3+s2JYO9RVEQC+Yrvxhs6subCizKqusrZ0Wa/80L3xHOgNPIUxc r2GVO9e8u5KSs8c9pB0XFKBO+umNoXzcoONNm+pPWEQQYV29nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOHUnDf/Hl+OVX8bsdkzGDKxpGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg0YTRhM2MtY2Q4Yy0z M2Q2LWE1NTMtODBiZTJhMzI1ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9bMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPb3giUSpsnDesAV+3SpQC0DnX5hJreFX5sGnZpGsajd78wKM/ghCpg /4r91c8877OnXAHZhS5Efc8cky7S4j5KNBbEzU3iJ6ykecbea07pn29uM3zRQRa3 Wh0byttpfMyhFLIsFHTmTZHNebkX4dm337lmFi1F33YFwvJLkmu8O6lZ6iVcCczb XcIYFVUM1/dwjcIpN51/MrsYeIR3I974yXDGurzsudv5A2VexRDFK/1Yh4YsAbxn /u4HgWOVQ0GXp4oRfczpArJCsv8UjvBQjSZVecVaU3UqYbgu5vxMRw5BBYeN9i4S efwhUuAq4tRc5ybWU2GN1hCv9e0Wt5M= -----END CERTIFICATE-----Generated at Sat Sep 26 09:11:10 2026 by rpki-client