$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec2bffa-47a6-3973-a243-b0c617e03dc4.roa File: bec2bffa-47a6-3973-a243-b0c617e03dc4.roa (raw, json) Hash identifier: weNiZTGT38xA+6z4cn4kfI+sJBiCsrnNUOsJGgYRxkw= Subject key identifier: 1E:1F:2E:DF:F1:49:92:9C:A0:0A:CA:09:07:C3:75:52:FF:96:6C:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D59DBF9AE689086372600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec2bffa-47a6-3973-a243-b0c617e03dc4.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 35994 IP address blocks: 23.221.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:59:db:f9:ae:68:90:86:37:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=4a85c59c-a1a7-4867-964d-2a942b66974f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:5c:34:ef:0a:7c:58:4c:69:2d:3f:94:f7: 19:f1:54:f5:c3:be:72:1b:e4:1e:78:59:70:8f:b9: cb:db:f3:aa:26:83:1d:42:dc:14:5c:9e:71:e4:cd: e7:51:6d:e6:d5:e2:a9:37:de:7e:cc:3e:08:9b:ca: 78:e9:22:44:4d:23:90:53:4f:e6:d0:f9:7e:87:1a: 49:93:7d:d0:4b:37:30:8d:e3:2c:65:9a:0b:67:bf: f5:b8:34:a5:cd:13:fc:ae:b3:26:86:e1:2a:aa:56: 30:6e:91:f7:fa:46:3c:cf:11:f3:f0:d5:38:91:c7: 4a:c7:90:c5:18:eb:ae:9c:f0:e9:2f:eb:c9:ae:0c: 6c:82:49:31:7c:f6:11:35:08:b5:90:ae:22:74:22: a1:e2:0e:32:95:e6:5c:2d:fc:05:af:b9:51:ab:74: 73:d3:e8:e1:1f:42:59:ac:86:50:50:38:02:b3:cc: 01:c9:f3:aa:1a:4d:c6:44:bc:1e:be:63:aa:62:75: f7:ad:95:64:da:ca:b9:8d:ac:75:05:b3:99:97:9d: e4:f2:a3:8e:5e:92:62:b5:3d:90:e9:fc:d8:e5:73: 2a:7f:00:4f:b8:58:a9:40:03:f2:c9:1a:35:8e:4a: 99:24:d9:e2:88:b5:ae:b9:6b:5a:1c:f5:1d:c4:16: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:2E:DF:F1:49:92:9C:A0:0A:CA:09:07:C3:75:52:FF:96:6C:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec2bffa-47a6-3973-a243-b0c617e03dc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.221.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:aa:28:61:05:b9:43:4b:9d:23:2d:f8:7f:24:d7:90:2f:10: 0b:70:b7:14:5f:0d:2f:ce:54:44:9b:56:8f:fc:7a:dd:7b:af: 39:1a:23:e5:8e:f5:9b:58:33:47:70:da:4e:ff:a7:c5:ae:57: c4:52:1b:45:7d:fa:2b:91:b6:a3:91:c3:fa:90:2c:f0:44:95: 35:d3:2c:0d:85:18:bc:96:b4:2d:a2:32:1f:4c:0e:7b:5b:64: 43:8d:fb:36:1f:01:e3:b6:6a:39:da:e2:e5:b4:16:fc:2e:2a: 91:de:3f:49:c8:73:70:f0:e7:cd:99:23:cb:81:36:6e:83:2e: ba:f2:90:28:bc:71:c6:25:cb:2d:24:8f:b0:b3:4c:7a:b1:a6: c5:69:f4:60:c7:6a:d1:d6:9a:d2:ca:07:fa:8a:4a:0c:6e:0e: 4d:01:a8:60:90:0f:81:95:03:5c:b6:39:6d:81:6b:3f:c2:81: 56:b6:8e:38:18:74:56:2c:bb:50:d7:eb:e3:20:74:e5:21:8f: 20:17:c9:2b:1c:9a:41:35:0a:56:95:e4:b5:5c:bc:56:f9:4a: ab:3e:83:ec:3c:ee:5c:ed:7e:ad:ce:01:8b:97:de:c4:ad:2a: b2:e7:b2:8d:7b:b0:ba:04:fd:5f:9a:f4:76:03:6a:ea:69:6d: 40:4b:f9:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVnb+a5okIY3JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NGE4NWM1OWMtYTFhNy00ODY3LTk2NGQtMmE5NDJiNjY5NzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviZcNO8KfFhMaS0/lPcZ8VT1w75yG+QeeFlw j7nL2/OqJoMdQtwUXJ5x5M3nUW3m1eKpN95+zD4Im8p46SJETSOQU0/m0Pl+hxpJ k33QSzcwjeMsZZoLZ7/1uDSlzRP8rrMmhuEqqlYwbpH3+kY8zxHz8NU4kcdKx5DF GOuunPDpL+vJrgxsgkkxfPYRNQi1kK4idCKh4g4yleZcLfwFr7lRq3Rz0+jhH0JZ rIZQUDgCs8wByfOqGk3GRLwevmOqYnX3rZVk2sq5jax1BbOZl53k8qOOXpJitT2Q 6fzY5XMqfwBPuFipQAPyyRo1jkqZJNniiLWuuWtaHPUdxBbJDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4fLt/xSZKcoArKCQfDdVL/lmyUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmVjMmJmZmEtNDdhNi0z OTczLWEyNDMtYjBjNjE3ZTAzZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF93oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWqKGEFuUNLnSMt+H8k15AvEAtwtxRfDS/OVESbVo/8et17rzkaI+WO 9ZtYM0dw2k7/p8WuV8RSG0V9+iuRtqORw/qQLPBElTXTLA2FGLyWtC2iMh9MDntb ZEON+zYfAeO2ajna4uW0FvwuKpHeP0nIc3Dw582ZI8uBNm6DLrrykCi8ccYlyy0k j7CzTHqxpsVp9GDHatHWmtLKB/qKSgxuDk0BqGCQD4GVA1y2OW2Baz/CgVa2jjgY dFYsu1DX6+MgdOUhjyAXySscmkE1ClaV5LVcvFb5Sqs+g+w87lztfq3OAYuX3sSt KrLnso17sLoE/V+a9HYDauppbUBL+dA= -----END CERTIFICATE-----Generated at Thu Oct 8 15:58:13 2026 by rpki-client