$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c108bf0f-ac7a-3ef2-8ba5-3601512f445a.roa File: c108bf0f-ac7a-3ef2-8ba5-3601512f445a.roa (raw, json) Hash identifier: nWKzKRx+w+o4oaNZwQly6E7c3VQLKFzII1J60+rGgDw= Subject key identifier: CA:51:2D:2B:D5:E6:34:64:83:DE:E0:F0:5D:8C:66:61:0E:98:07:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E69B47FCED39B39997F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c108bf0f-ac7a-3ef2-8ba5-3601512f445a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.213.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:69:b4:7f:ce:d3:9b:39:99:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ddd77e5d-f75a-4d37-8788-60e5d5c865d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:ab:6c:08:36:fb:2e:71:87:56:f1:71:20: 42:d9:dc:b6:99:34:82:eb:a8:62:d0:b8:ee:c2:52: e8:93:db:13:17:e3:50:85:0e:47:1d:71:27:83:c3: 24:8b:68:85:e6:fc:f2:24:86:1e:26:89:35:64:2b: 0c:95:1b:8f:47:23:8a:fb:e7:d2:c2:2f:bf:c6:ef: 4d:41:e2:23:96:da:1c:2c:eb:75:25:25:e4:5d:6b: 46:3f:64:2e:c3:e6:0c:18:55:54:bb:2d:6c:b9:70: 83:a0:29:5d:c1:7a:d4:03:7e:bf:96:fe:42:8b:92: fe:ff:ac:b5:0c:e8:90:a1:d8:76:99:cc:ef:30:e1: 38:b4:95:9d:94:85:08:b4:33:72:68:29:39:d0:bb: 0d:ab:b3:db:7e:6f:7f:85:51:d1:e7:c3:d9:0b:69: f3:64:27:fb:13:cb:01:fd:4f:49:be:76:d1:b6:20: 56:5e:4f:d0:5d:a3:f5:cd:12:8c:63:a2:14:29:eb: 52:31:6f:e1:fb:1a:05:32:64:5d:4f:67:ae:84:57: e1:31:9f:be:56:5c:04:3f:45:62:85:01:c5:dd:e4: 39:f6:f3:52:87:c6:1e:5d:b0:49:23:f0:75:e4:71: 35:28:06:bc:71:87:dc:5b:42:ae:85:27:60:94:ea: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:51:2D:2B:D5:E6:34:64:83:DE:E0:F0:5D:8C:66:61:0E:98:07:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c108bf0f-ac7a-3ef2-8ba5-3601512f445a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:22:17:2f:c6:03:d7:d0:7e:31:ac:34:fe:4c:89:da:f5:4c: f7:80:6b:1b:36:68:60:44:5b:05:d3:dc:ec:5f:b4:cf:57:9a: ac:2d:69:3a:d0:09:3f:e3:71:c6:3a:c5:4e:21:03:e2:68:56: d1:4d:1b:0c:7a:88:98:db:9c:cb:dd:8c:01:50:e1:58:20:0e: 3e:fb:9e:5a:e9:6b:4d:78:a2:00:9f:62:b8:f7:84:84:d4:1e: 9c:8e:4d:9d:84:9f:ed:7a:a5:a7:12:8e:05:91:0e:06:b3:7e: 4a:a0:d9:f6:25:83:3b:2f:a1:9c:6f:c2:c9:8b:7c:04:95:00: fc:4e:c3:b0:ef:9c:16:56:91:70:0c:26:3a:f9:d5:bf:f8:48: 5b:96:12:50:ed:0c:25:f9:d5:25:c4:80:8f:90:1b:c3:f3:27: 47:9f:d3:32:c4:cf:13:07:03:96:59:19:cc:43:9a:2e:7c:48: 4b:40:63:37:c2:73:64:2d:5a:fe:70:6b:4a:16:9e:1d:6d:14: 67:40:6e:56:20:7c:a8:ca:dc:14:56:1c:cb:f3:2b:b9:a5:62: 7d:c8:34:1e:2c:f0:ba:2c:11:1b:56:e1:34:24:d4:90:5d:99: 91:3e:2f:b4:89:e1:aa:cb:7f:ca:79:35:5b:ab:51:a9:cf:9b: 62:a3:4c:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfmm0f87TmzmZf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGRkNzdlNWQtZjc1YS00ZDM3LTg3ODgtNjBlNWQ1Yzg2NWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi+rbAg2+y5xh1bxcSBC2dy2mTSC66hi0Lju wlLok9sTF+NQhQ5HHXEng8Mki2iF5vzyJIYeJok1ZCsMlRuPRyOK++fSwi+/xu9N QeIjltocLOt1JSXkXWtGP2Quw+YMGFVUuy1suXCDoCldwXrUA36/lv5Ci5L+/6y1 DOiQodh2mczvMOE4tJWdlIUItDNyaCk50LsNq7Pbfm9/hVHR58PZC2nzZCf7E8sB /U9JvnbRtiBWXk/QXaP1zRKMY6IUKetSMW/h+xoFMmRdT2euhFfhMZ++VlwEP0Vi hQHF3eQ59vNSh8YeXbBJI/B15HE1KAa8cYfcW0KuhSdglOptiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpRLSvV5jRkg97g8F2MZmEOmAfvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzEwOGJmMGYtYWM3YS0z ZWYyLThiYTUtMzYwMTUxMmY0NDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwiFy/GA9fQfjGsNP5Midr1TPeAaxs2aGBEWwXT3OxftM9XmqwtaTrQ CT/jccY6xU4hA+JoVtFNGwx6iJjbnMvdjAFQ4VggDj77nlrpa014ogCfYrj3hITU HpyOTZ2En+16pacSjgWRDgazfkqg2fYlgzsvoZxvwsmLfASVAPxOw7DvnBZWkXAM Jjr51b/4SFuWElDtDCX51SXEgI+QG8PzJ0ef0zLEzxMHA5ZZGcxDmi58SEtAYzfC c2QtWv5wa0oWnh1tFGdAblYgfKjK3BRWHMvzK7mlYn3INB4s8LosERtW4TQk1JBd mZE+L7SJ4arLf8p5NVurUanPm2KjTIg= -----END CERTIFICATE-----Generated at Sat Sep 26 05:27:02 2026 by rpki-client