$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa File: 7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa (raw, json) Hash identifier: 2A0ljppJldFaIwhn38/4jJ3AmWmioyyqTP4o/48zklc= Subject key identifier: FD:D9:4B:DE:19:F6:96:E4:74:2F:52:2F:AE:A1:79:6F:3B:8F:DB:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F24D23C2362A86830048 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.39.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f2:4d:23:c2:36:2a:86:83:00:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=2218b084-59b1-42dd-8df3-9ad1361ea2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:b3:e0:84:80:2d:8d:7b:ec:05:50:97:49: cf:f6:9b:b0:f8:7a:0e:14:b6:fc:7c:9e:74:1d:e1: f5:9a:b4:ef:f0:21:48:f0:c6:76:45:a8:49:aa:6b: 91:28:c0:cb:bf:64:e5:5e:ec:7f:14:c0:b8:c7:49: 0c:52:16:cb:94:61:4c:4c:66:44:de:02:11:e3:b2: ed:5a:b8:68:1f:05:7a:44:4e:e2:95:2f:80:48:47: 38:e3:e3:3d:a8:5e:f6:c1:8b:5c:1a:55:d7:4c:16: 3b:4d:35:3c:4a:75:e7:3f:e6:c1:2c:3a:9b:11:d9: 40:81:de:a1:73:82:9b:7f:24:9c:89:59:47:7a:b1: aa:44:31:87:52:bb:ad:89:e8:1e:18:b9:3f:79:ac: 4e:97:9e:2a:9d:40:5f:d5:44:53:4e:26:60:c2:54: 69:1c:ec:5a:70:2b:b8:3d:f0:13:c3:3d:a3:fd:40: fd:57:fe:29:3d:4f:59:3b:d4:92:4a:a7:91:db:bc: 9a:c9:3d:f2:b5:90:75:10:48:5e:89:2e:73:51:08: 46:03:c3:f7:db:25:87:dd:78:d2:2f:e3:c0:79:00: 41:a5:48:15:61:10:b0:f6:8a:65:ea:1f:f2:d1:6b: f6:9f:d7:9b:cc:98:2f:46:13:76:ba:9b:c8:fa:9d: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D9:4B:DE:19:F6:96:E4:74:2F:52:2F:AE:A1:79:6F:3B:8F:DB:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c71e3a2-ad9b-3ecd-a86d-27fc966d0a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b1:8c:36:7a:9d:aa:64:74:67:72:dd:c4:7b:c0:dc:22:0e: b5:ae:d4:a0:4c:7d:02:d7:10:b2:9c:9f:fd:c0:06:7c:9a:80: 38:47:7e:40:ce:b2:59:a7:94:04:bc:46:5c:ec:10:c6:62:10: fd:3e:b1:cd:52:24:91:02:48:5d:77:71:93:aa:09:5d:68:d8: 20:a5:4d:83:c6:57:7a:4f:31:c6:4b:07:1b:f0:4f:b8:69:99: 1b:96:11:8a:6b:a7:22:7f:80:e8:88:7f:25:ea:73:37:92:8a: 61:8f:61:e9:f0:78:d6:df:f4:57:a0:ad:77:d9:cd:93:cf:69: 56:63:f9:69:bf:90:b0:d3:1f:34:84:92:5b:f8:2a:3b:1c:fd: 54:ee:f9:08:b2:db:16:c3:d4:cc:ac:5f:e3:be:0e:40:bd:f0: ae:e3:ac:6f:15:23:32:35:a1:ea:ed:8f:59:18:80:eb:70:fa: 89:65:58:03:08:56:9f:5a:ed:ad:82:7d:dc:4d:92:d0:47:89: a3:b8:84:7b:76:af:ae:42:99:7c:ba:07:9d:ee:12:b4:47:72: 60:02:04:40:c6:f6:5d:e2:e3:d8:92:00:1a:3a:b6:b3:52:40: e4:f3:a0:ba:26:31:75:ee:07:4b:0c:ec:14:55:f3:d3:2f:9b: fa:fd:51:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/JNI8I2KoaDAEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MjIxOGIwODQtNTliMS00MmRkLThkZjMtOWFkMTM2MWVhMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKCz4ISALY177AVQl0nP9puw+HoOFLb8fJ50 HeH1mrTv8CFI8MZ2RahJqmuRKMDLv2TlXux/FMC4x0kMUhbLlGFMTGZE3gIR47Lt WrhoHwV6RE7ilS+ASEc44+M9qF72wYtcGlXXTBY7TTU8SnXnP+bBLDqbEdlAgd6h c4KbfySciVlHerGqRDGHUrutiegeGLk/eaxOl54qnUBf1URTTiZgwlRpHOxacCu4 PfATwz2j/UD9V/4pPU9ZO9SSSqeR27yayT3ytZB1EEheiS5zUQhGA8P32yWH3XjS L+PAeQBBpUgVYRCw9opl6h/y0Wv2n9ebzJgvRhN2upvI+p1sjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3ZS94Z9pbkdC9SL66heW87j9uYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2M3MWUzYTItYWQ5Yi0z ZWNkLWE4NmQtMjdmYzk2NmQwYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABixjDZ6napkdGdy3cR7wNwiDrWu1KBMfQLXELKcn/3ABnyagDhHfkDO slmnlAS8RlzsEMZiEP0+sc1SJJECSF13cZOqCV1o2CClTYPGV3pPMcZLBxvwT7hp mRuWEYprpyJ/gOiIfyXqczeSimGPYenweNbf9FegrXfZzZPPaVZj+Wm/kLDTHzSE klv4Kjsc/VTu+Qiy2xbD1MysX+O+DkC98K7jrG8VIzI1oertj1kYgOtw+ollWAMI Vp9a7a2CfdxNktBHiaO4hHt2r65CmXy6B53uErRHcmACBEDG9l3i49iSABo6trNS QOTzoLomMXXuB0sM7BRV89Mvm/r9UUw= -----END CERTIFICATE-----Generated at Tue Sep 22 05:07:20 2026 by rpki-client