$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa File: 899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa (raw, json) Hash identifier: 0tXMeuHLaIhgyqsVclb5BmznwoXiPByeUUbuLu6iJto= Subject key identifier: 6B:84:5C:2F:44:06:92:55:5C:4C:42:D3:AD:1B:BC:44:B5:0E:A6:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985D3C307F71A225C445D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.205.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:d3:c3:07:f7:1a:22:5c:44:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=317b7807-fa29-41e0-b833-86441ce67111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:36:64:75:a6:c3:2f:93:0a:e2:4f:9d:68:41: 95:32:59:d7:c0:80:f7:38:76:f7:2d:7c:14:c5:6a: 4b:90:5c:d7:3c:bc:7e:7b:e2:c0:8d:13:4e:24:b2: 97:00:7b:48:1f:de:04:96:2a:26:a9:9b:c7:0c:79: fc:24:cf:9a:44:7d:e2:3e:83:8c:ec:a3:c7:43:4c: 6c:e7:83:66:93:9a:fe:71:3b:a5:1a:55:a3:bc:28: 62:e9:de:a4:78:20:bf:98:02:13:c4:32:3f:e6:76: 0c:2c:b1:71:45:71:e4:f4:3f:42:9a:08:5b:ac:02: b8:7e:e8:0a:91:d3:0c:fe:51:e6:7b:28:20:7a:b7: 6c:00:41:fe:ad:4c:ff:00:68:5d:5d:a6:1e:ec:10: d9:d1:7d:82:5a:03:a9:ae:e8:ae:5d:00:5c:9f:5f: 21:43:f1:dd:11:7d:c8:40:8c:ae:ef:f6:0d:ab:ca: 55:be:fa:58:cc:2b:ea:05:75:fe:a2:3d:80:21:1d: 32:dc:9b:1a:83:36:0a:fc:be:fc:57:4e:10:e2:e5: 1b:59:d5:80:54:86:70:f9:a9:8b:17:15:f1:e4:38: f4:94:2d:09:db:76:c9:92:67:ad:95:b3:ab:57:08: e3:0c:04:1b:7c:4d:8f:ea:2f:78:a7:03:7a:e4:1b: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:84:5C:2F:44:06:92:55:5C:4C:42:D3:AD:1B:BC:44:B5:0E:A6:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/899c1f86-efa0-3f0a-a51b-66eb8a290b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:10:43:f7:07:13:2d:b8:ec:42:86:75:b3:6a:e3:2f:63:aa: 45:0d:4e:7e:de:31:12:b9:68:18:68:f3:6a:07:00:ec:37:c8: 52:65:a6:4a:5a:29:35:27:ac:2a:39:91:b3:22:3f:a2:fc:f9: 93:56:6b:f4:4b:3e:7e:3f:4f:d1:f2:df:be:97:d7:0d:c7:23: 49:f1:a0:68:12:17:c2:f4:97:ec:ff:c4:05:91:62:9c:a7:4f: ae:bd:54:48:c1:a2:40:ec:15:1c:65:66:e5:e6:69:79:d0:05: 1a:cd:41:0e:2c:22:26:75:c5:84:35:27:b3:0b:5a:95:70:6a: 6b:3d:dc:f8:55:1d:9d:e5:a8:40:40:b5:74:13:71:3e:8d:ae: 89:99:bc:b5:48:93:63:a5:e3:cb:b2:dc:7d:c6:9d:95:fc:a1: cb:e4:40:ab:82:17:b1:e3:46:63:4e:85:75:63:2f:3b:0c:a4: 42:21:6d:52:6b:9d:c7:e7:b4:45:9b:1e:07:a1:c9:b5:2a:84: 34:69:74:38:0e:7c:de:d1:ae:7a:eb:e8:db:18:92:75:2d:a7: fb:88:40:1f:e6:94:5f:ce:9c:c4:f8:00:d4:82:29:3f:92:d0: 99:a9:42:5c:81:c5:e0:b3:17:e2:58:b5:ad:88:3a:12:ac:da: 98:3e:74:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhdPDB/caIlxEXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzE3Yjc4MDctZmEyOS00MWUwLWI4MzMtODY0NDFjZTY3MTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDZkdabDL5MK4k+daEGVMlnXwID3OHb3LXwU xWpLkFzXPLx+e+LAjRNOJLKXAHtIH94EliomqZvHDHn8JM+aRH3iPoOM7KPHQ0xs 54Nmk5r+cTulGlWjvChi6d6keCC/mAITxDI/5nYMLLFxRXHk9D9CmghbrAK4fugK kdMM/lHmeyggerdsAEH+rUz/AGhdXaYe7BDZ0X2CWgOpruiuXQBcn18hQ/HdEX3I QIyu7/YNq8pVvvpYzCvqBXX+oj2AIR0y3JsagzYK/L78V04Q4uUbWdWAVIZw+amL FxXx5Dj0lC0J23bJkmetlbOrVwjjDAQbfE2P6i94pwN65BsLLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuEXC9EBpJVXExC060bvES1Dqa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk5YzFmODYtZWZhMC0z ZjBhLWE1MWItNjZlYjhhMjkwYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQQQ/cHEy247EKGdbNq4y9jqkUNTn7eMRK5aBho82oHAOw3yFJlpkpa KTUnrCo5kbMiP6L8+ZNWa/RLPn4/T9Hy376X1w3HI0nxoGgSF8L0l+z/xAWRYpyn T669VEjBokDsFRxlZuXmaXnQBRrNQQ4sIiZ1xYQ1J7MLWpVwams93PhVHZ3lqEBA tXQTcT6NromZvLVIk2Ol48uy3H3GnZX8ocvkQKuCF7HjRmNOhXVjLzsMpEIhbVJr ncfntEWbHgehybUqhDRpdDgOfN7Rrnrr6NsYknUtp/uIQB/mlF/OnMT4ANSCKT+S 0JmpQlyBxeCzF+JYta2IOhKs2pg+dBY= -----END CERTIFICATE-----Generated at Sat Sep 26 13:09:38 2026 by rpki-client