$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c33c59d-5b47-3e9a-8ead-99ee46f4c240.roa File: 7c33c59d-5b47-3e9a-8ead-99ee46f4c240.roa (raw, json) Hash identifier: eMKnFeyIEsKy9JXzMyWVvEbF+hY1Wxtcw/BRd7lW9lM= Subject key identifier: 74:A0:94:4B:1A:0B:60:D4:4F:2C:71:90:AC:F3:24:2D:37:D9:67:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985E1A59D801CCE573EAF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c33c59d-5b47-3e9a-8ead-99ee46f4c240.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.208.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:e1:a5:9d:80:1c:ce:57:3e:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=25fd9c00-173b-4084-aca9-483c16707e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c9:b9:20:b3:a7:e5:18:1a:b2:60:e1:ae:7f: 38:bf:af:ed:08:94:00:8b:a0:70:a8:98:ab:84:f8: ed:bd:cc:00:77:03:e7:53:9a:68:22:54:0c:b1:df: 3d:ff:03:02:40:a5:ea:4c:da:92:67:a2:fc:a8:4c: c3:3b:37:df:1a:f7:f4:64:97:30:d8:92:cf:a9:2d: 82:a7:78:7d:fe:3d:e9:de:fc:d2:de:1d:03:ee:83: 03:cb:65:11:4a:6b:df:cb:1e:69:9b:7f:9e:c7:f4: 8a:99:6d:8b:3b:08:6d:76:4b:79:a7:87:64:0c:a5: 65:11:4d:c6:00:21:ba:a1:a2:93:82:7a:a7:72:3b: f7:5a:70:36:f9:d9:8f:38:26:a6:d6:f2:22:9d:8e: 3a:03:1f:e5:54:f2:85:19:e7:6d:08:ec:91:a1:07: 2c:c7:8f:bc:27:32:c7:07:3f:27:27:19:5b:d4:2d: 1f:9b:6f:5f:06:80:04:2e:84:b3:60:da:02:63:a0: 54:0e:75:f2:2f:40:f6:5d:5e:4b:ff:88:4e:33:43: 3d:34:49:8e:80:52:30:9c:d0:d5:b8:1b:af:0a:40: 7e:cd:34:c7:51:8f:88:84:04:ce:b6:d0:82:f2:1b: 65:b8:ea:fc:1c:d3:a9:54:32:45:c0:d6:08:f7:4b: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A0:94:4B:1A:0B:60:D4:4F:2C:71:90:AC:F3:24:2D:37:D9:67:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c33c59d-5b47-3e9a-8ead-99ee46f4c240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e7:89:92:d0:73:e8:dc:c5:47:d8:13:f4:04:16:50:c6:9a: a4:c6:37:e8:5d:1a:c4:04:c9:1f:ed:49:24:5d:1e:b2:b6:88: df:85:fa:3a:67:97:10:82:b5:fe:54:96:20:b3:ad:d6:c0:d0: 52:ba:91:25:e6:e3:96:79:b2:38:ac:ba:95:a8:49:ac:2d:e2: d9:5c:e8:80:00:4a:43:33:1c:b8:e7:a4:bb:f6:d5:c0:00:d6: 2b:6e:32:7d:a9:d6:74:68:d1:c9:32:87:02:b9:ff:36:d6:65: b3:38:b1:98:1c:1a:01:c1:47:3a:4e:2e:06:e8:ad:aa:25:a6: 65:d4:b0:78:91:e7:a1:71:c6:81:19:b8:7a:c6:c4:7f:62:1e: 47:94:3c:a9:0e:f6:2c:f3:07:65:92:3c:91:a7:ae:b3:ec:28: 9c:69:c8:d6:86:d2:ee:44:07:2a:f7:16:61:72:b6:df:7f:4e: 02:ff:9d:fa:b4:94:43:f7:c0:98:2c:24:30:61:d3:02:b6:40: 08:13:0a:e1:7a:c9:d8:d3:55:31:8b:cb:06:ca:8a:ec:06:7d: f7:ee:11:a0:2b:f3:f6:f3:89:42:be:45:a1:1c:39:28:2e:26: 90:bd:38:2c:34:c5:fd:36:f4:e6:00:40:80:e5:45:e2:41:ee: c4:2a:18:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JheGlnYAczlc+rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjVmZDljMDAtMTczYi00MDg0LWFjYTktNDgzYzE2NzA3ZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMm5ILOn5RgasmDhrn84v6/tCJQAi6BwqJir hPjtvcwAdwPnU5poIlQMsd89/wMCQKXqTNqSZ6L8qEzDOzffGvf0ZJcw2JLPqS2C p3h9/j3p3vzS3h0D7oMDy2URSmvfyx5pm3+ex/SKmW2LOwhtdkt5p4dkDKVlEU3G ACG6oaKTgnqncjv3WnA2+dmPOCam1vIinY46Ax/lVPKFGedtCOyRoQcsx4+8JzLH Bz8nJxlb1C0fm29fBoAELoSzYNoCY6BUDnXyL0D2XV5L/4hOM0M9NEmOgFIwnNDV uBuvCkB+zTTHUY+IhATOttCC8htluOr8HNOpVDJFwNYI90so3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSglEsaC2DUTyxxkKzzJC032WesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2MzM2M1OWQtNWI0Ny0z ZTlhLThlYWQtOTllZTQ2ZjRjMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELniZLQc+jcxUfYE/QEFlDGmqTGN+hdGsQEyR/tSSRdHrK2iN+F+jpn lxCCtf5UliCzrdbA0FK6kSXm45Z5sjisupWoSawt4tlc6IAASkMzHLjnpLv21cAA 1ituMn2p1nRo0ckyhwK5/zbWZbM4sZgcGgHBRzpOLgboraolpmXUsHiR56FxxoEZ uHrGxH9iHkeUPKkO9izzB2WSPJGnrrPsKJxpyNaG0u5EByr3FmFytt9/TgL/nfq0 lEP3wJgsJDBh0wK2QAgTCuF6ydjTVTGLywbKiuwGfffuEaAr8/bziUK+RaEcOSgu JpC9OCw0xf029OYAQIDlReJB7sQqGKw= -----END CERTIFICATE-----Generated at Sun Sep 27 03:22:28 2026 by rpki-client