$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e597107-7086-37ab-a01f-1f696f13b837.roa File: 7e597107-7086-37ab-a01f-1f696f13b837.roa (raw, json) Hash identifier: jLYjrOFUxd0x4bOVRrw7sqwFbFOPmOjKuDPIIKWoIzI= Subject key identifier: F0:E7:A5:E9:74:75:49:A2:30:FE:5B:CA:87:56:5F:B9:BA:55:69:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E6517D14EF5E80D854E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e597107-7086-37ab-a01f-1f696f13b837.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.213.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:65:17:d1:4e:f5:e8:0d:85:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e047699c-2cca-4b39-99ac-08c7064c79cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a8:a7:7e:29:e6:38:c3:84:47:69:15:12:5a: 13:3d:2d:25:42:66:83:d7:12:31:65:9a:bc:a1:99: 4b:e1:13:65:25:4a:90:c8:e1:03:51:32:3b:1a:f4: ae:10:82:00:b3:3e:31:e3:54:33:bc:3b:99:c1:7b: 5d:fe:21:4a:a1:cf:a2:44:92:7d:6c:33:b0:01:fa: f6:e0:d2:e9:91:cf:b6:9e:87:b2:d3:fe:a4:4a:cd: f0:db:6a:ac:c5:e2:a5:2f:8f:36:5e:84:73:0b:d2: 02:e7:ca:9e:ce:3a:6c:cd:89:22:24:54:e6:90:6b: c4:ad:4f:33:d9:5f:d7:13:c9:7e:f5:bf:8c:b0:e3: 88:82:35:1b:15:b6:be:e4:d5:d3:c3:0e:ee:fe:65: 1b:94:48:73:82:9c:c1:4d:b6:fb:5a:25:8f:37:d6: 62:f4:3f:c3:ee:92:4c:ab:79:ca:df:e9:31:e9:b4: 93:d0:ae:40:6b:22:ba:db:e2:61:c0:f0:86:ae:d5: 35:39:50:ba:54:29:e0:8b:ef:f4:ab:3a:34:c6:fa: d6:e4:30:d2:0a:99:ce:3b:05:ee:84:a1:74:78:e1: 11:a5:40:89:8e:56:3a:fd:85:3a:62:24:ee:a3:c8: f1:80:b8:f1:2d:28:2f:6d:54:51:f9:f9:46:e4:45: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E7:A5:E9:74:75:49:A2:30:FE:5B:CA:87:56:5F:B9:BA:55:69:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e597107-7086-37ab-a01f-1f696f13b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:93:77:1a:36:3c:78:a9:44:df:f3:61:b6:e7:be:39:23:1c: 84:3e:74:6f:1a:2b:cb:95:c0:66:60:ed:e9:45:f0:8d:ae:5d: a5:f2:c9:8c:fd:25:83:fc:1f:0b:95:0a:5b:1e:d1:fb:89:f8: 9b:43:dd:0b:37:ce:ae:de:06:e3:4f:ba:5c:1f:fc:bb:58:25: ed:7b:f6:e1:25:e5:31:c6:c2:8e:e0:3c:f1:23:da:07:b4:bd: 9f:5f:25:31:3e:29:09:51:ab:f5:bf:9e:c1:12:9c:10:42:d6: 1a:69:68:ea:d9:a9:18:0d:71:e2:7a:df:45:a4:fd:eb:1c:51: 9f:9b:62:68:f5:74:aa:b2:7a:c1:4c:0f:df:21:f7:1d:87:22: 96:bc:5c:8a:24:cc:57:61:76:43:5e:59:fa:de:d7:12:f1:e0: 04:35:0c:a4:8e:ae:ee:a3:0f:dc:cf:11:f5:90:69:9c:0a:11: 42:db:ca:a5:36:7a:35:1b:63:6c:28:98:78:cd:05:df:33:7f: 14:5c:5d:a9:2c:5f:67:32:e4:d7:8e:66:eb:90:4c:69:e3:b3: ff:09:25:28:dc:8e:33:89:d1:00:f6:17:75:4f:0f:c7:d8:37: 1e:fe:73:c8:cb:71:26:3c:93:0c:48:04:74:58:24:d2:62:d6: c8:7f:ba:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfmUX0U716A2FTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTA0NzY5OWMtMmNjYS00YjM5LTk5YWMtMDhjNzA2NGM3OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6infinmOMOER2kVEloTPS0lQmaD1xIxZZq8 oZlL4RNlJUqQyOEDUTI7GvSuEIIAsz4x41QzvDuZwXtd/iFKoc+iRJJ9bDOwAfr2 4NLpkc+2noey0/6kSs3w22qsxeKlL482XoRzC9IC58qezjpszYkiJFTmkGvErU8z 2V/XE8l+9b+MsOOIgjUbFba+5NXTww7u/mUblEhzgpzBTbb7WiWPN9Zi9D/D7pJM q3nK3+kx6bST0K5AayK62+JhwPCGrtU1OVC6VCngi+/0qzo0xvrW5DDSCpnOOwXu hKF0eOERpUCJjlY6/YU6YiTuo8jxgLjxLSgvbVRR+flG5EWPFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDnpel0dUmiMP5byodWX7m6VWnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2U1OTcxMDctNzA4Ni0z N2FiLWEwMWYtMWY2OTZmMTNiODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKTdxo2PHipRN/zYbbnvjkjHIQ+dG8aK8uVwGZg7elF8I2uXaXyyYz9 JYP8HwuVClse0fuJ+JtD3Qs3zq7eBuNPulwf/LtYJe179uEl5THGwo7gPPEj2ge0 vZ9fJTE+KQlRq/W/nsESnBBC1hppaOrZqRgNceJ630Wk/escUZ+bYmj1dKqyesFM D98h9x2HIpa8XIokzFdhdkNeWfre1xLx4AQ1DKSOru6jD9zPEfWQaZwKEULbyqU2 ejUbY2womHjNBd8zfxRcXaksX2cy5NeOZuuQTGnjs/8JJSjcjjOJ0QD2F3VPD8fY Nx7+c8jLcSY8kwxIBHRYJNJi1sh/uqo= -----END CERTIFICATE-----Generated at Tue Oct 6 23:03:15 2026 by rpki-client