$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad23d50b-b07e-358a-95ed-3a0b1c1cb016.roa File: ad23d50b-b07e-358a-95ed-3a0b1c1cb016.roa (raw, json) Hash identifier: tp7PGM9u8lH7Qi9tTKkUTtdKHnwdyku1AXDOwsXar8k= Subject key identifier: 5C:88:A4:50:E3:DB:E0:73:BB:74:D6:C6:36:90:F2:D9:6A:DB:E6:F6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1CC7AEBDF03233EA87AA7080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad23d50b-b07e-358a-95ed-3a0b1c1cb016.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 4780 IP address blocks: 104.123.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:ae:bd:f0:32:33:ea:87:aa:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=5af6483c-5666-493c-8ddf-99f73edf4976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:53:0a:b8:3f:a9:24:38:53:c6:c6:0a:75: f1:12:18:23:75:97:c0:bb:a5:94:39:eb:92:18:ec: ad:7e:ec:5d:34:1d:42:a1:32:f6:10:db:95:94:8f: 1b:62:81:a3:04:ed:84:d1:81:77:63:86:43:3f:cf: 5c:84:a0:a5:9a:f9:18:4f:f2:15:c7:b5:1c:d5:78: bf:b6:53:48:02:1a:22:dd:a6:a5:ca:4c:f8:a1:de: 2b:2f:ad:8f:2c:53:e5:6c:5a:eb:44:8a:55:15:f5: 94:36:b5:97:30:f0:19:38:d0:f7:74:98:c8:0e:60: 64:bb:0f:29:5c:82:95:9a:83:46:07:df:e5:6f:91: 45:43:02:1b:68:96:55:44:d3:7f:82:3b:bd:21:a8: af:9f:63:8d:bd:42:50:58:96:26:80:1c:96:a8:37: 18:51:c1:cf:6c:f0:d1:d1:db:67:a3:e9:9c:e4:30: f3:52:d9:1b:73:9e:98:45:38:42:b9:bf:73:25:89: 6b:76:db:5c:b5:ce:92:98:f9:c3:eb:46:c2:6f:bb: 42:0c:d9:21:7c:27:7c:39:eb:47:02:53:77:a9:05: 70:cf:42:7a:fb:8c:9f:76:4f:d5:ea:e5:49:bf:46: 2c:ca:8c:61:c5:0b:e1:5d:0c:d1:c5:dd:71:fe:cc: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:A4:50:E3:DB:E0:73:BB:74:D6:C6:36:90:F2:D9:6A:DB:E6:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad23d50b-b07e-358a-95ed-3a0b1c1cb016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:27:30:67:fb:db:1f:8f:33:67:63:f8:fd:c9:7e:53:bd:d1: e1:9c:d7:cd:cc:83:27:52:07:48:3d:6a:1a:6d:53:d6:19:a2: 82:b7:be:a2:92:6c:ef:82:f5:4b:8c:f4:ac:17:7a:86:12:da: 72:19:6e:0b:1c:3b:cb:b8:ef:0a:32:46:29:42:98:25:6c:41: 6b:04:df:90:1c:c4:46:bb:3e:e2:94:cb:99:bb:0e:23:df:27: e0:73:a5:42:70:7c:9b:88:5f:17:cd:1b:0b:14:b4:2d:4a:6c: 96:f5:67:bf:52:1a:44:c3:df:27:c1:60:61:94:88:12:db:a1: c3:c9:f4:3d:21:13:e1:4d:c5:75:87:59:a5:ff:5c:68:ac:bf: ec:52:8d:d4:cc:0b:85:dd:d7:14:76:3f:5f:83:7e:50:9e:0a: f2:1a:22:35:96:ca:90:4e:b7:6b:72:94:88:38:11:0d:ba:6e: 69:b7:d1:f4:e3:a3:c3:36:90:7b:28:40:7a:d3:c8:06:7b:d7: 6b:06:b1:5d:4a:10:36:58:85:26:c4:3d:b0:bf:f8:f2:a4:c0: 3a:44:c3:ee:46:95:03:6d:3f:5a:f6:f9:89:44:31:70:da:cc: 24:a9:b2:48:5c:b7:03:2e:8b:55:bb:0b:e1:e2:2b:fe:88:7d: 39:80:c2:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6698DIz6oeqcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NWFmNjQ4M2MtNTY2Ni00OTNjLThkZGYtOTlmNzNlZGY0OTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCNTCrg/qSQ4U8bGCnXxEhgjdZfAu6WUOeuS GOytfuxdNB1CoTL2ENuVlI8bYoGjBO2E0YF3Y4ZDP89chKClmvkYT/IVx7Uc1Xi/ tlNIAhoi3aalykz4od4rL62PLFPlbFrrRIpVFfWUNrWXMPAZOND3dJjIDmBkuw8p XIKVmoNGB9/lb5FFQwIbaJZVRNN/gju9Iaivn2ONvUJQWJYmgByWqDcYUcHPbPDR 0dtno+mc5DDzUtkbc56YRThCub9zJYlrdttctc6SmPnD60bCb7tCDNkhfCd8OetH AlN3qQVwz0J6+4yfdk/V6uVJv0YsyoxhxQvhXQzRxd1x/szm7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyIpFDj2+Bzu3TWxjaQ8tlq2+b2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWQyM2Q1MGItYjA3ZS0z NThhLTk1ZWQtM2EwYjFjMWNiMDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcnMGf72x+PM2dj+P3JflO90eGc183MgydSB0g9ahptU9YZooK3vqKS bO+C9UuM9KwXeoYS2nIZbgscO8u47woyRilCmCVsQWsE35AcxEa7PuKUy5m7DiPf J+BzpUJwfJuIXxfNGwsUtC1KbJb1Z79SGkTD3yfBYGGUiBLbocPJ9D0hE+FNxXWH WaX/XGisv+xSjdTMC4Xd1xR2P1+DflCeCvIaIjWWypBOt2tylIg4EQ26bmm30fTj o8M2kHsoQHrTyAZ712sGsV1KEDZYhSbEPbC/+PKkwDpEw+5GlQNtP1r2+YlEMXDa zCSpskhctwMui1W7C+HiK/6IfTmAwoM= -----END CERTIFICATE-----Generated at Tue Sep 22 22:49:10 2026 by rpki-client