$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3eb29c2-dfd3-39b8-b359-0372dfb920fb.roa File: c3eb29c2-dfd3-39b8-b359-0372dfb920fb.roa (raw, json) Hash identifier: 4M/FMBIeCEk/npWIgHrOlJMquw7eqZHGZuGONvLumAc= Subject key identifier: 34:A5:FC:08:0C:3E:7D:6A:E3:00:09:FC:57:A5:98:F6:E7:83:11:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584FA593A623B96648A1B9255910 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3eb29c2-dfd3-39b8-b359-0372dfb920fb.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 20940 IP address blocks: 23.72.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:a6:23:b9:66:48:a1:b9:25:59:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=a9946491-e87d-4754-bd2d-98d3868775df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:79:9a:78:64:e8:6d:9a:be:69:28:5a:e9: a2:15:42:db:90:6d:39:a9:07:89:5f:8b:ae:e0:68: 56:70:4a:1a:b0:f8:53:f5:c4:97:c8:1d:10:29:ba: 9a:78:9b:eb:ca:b5:5b:56:01:dc:96:84:7c:4d:fe: cb:06:29:e6:0c:c5:91:ba:3a:a9:6f:e0:36:41:ab: 3b:ba:94:b6:2c:68:ee:a2:87:9f:d9:23:08:13:76: b4:fd:9b:3f:b9:c3:45:72:2a:db:da:32:be:b4:a1: 35:06:b1:15:07:56:2a:ac:92:cf:58:76:a0:53:83: 89:04:43:73:a0:8e:db:96:c2:67:aa:1b:ba:e2:e5: 47:09:2f:95:36:0b:1e:8c:3f:f4:73:00:fb:ff:09: e6:f6:b1:bc:2b:cd:c2:66:75:0a:a5:d5:c8:7e:da: 17:67:78:15:91:43:83:c9:99:ef:8a:44:ec:8d:43: 18:0c:68:fe:e2:bf:e4:38:6a:6d:5f:4c:9c:f5:9a: bd:3b:2a:cb:c2:6e:17:6f:26:b3:70:d8:bf:12:24: 4d:12:d1:3f:50:6d:e1:5b:32:74:68:07:4c:a0:9b: ec:a7:41:4a:e9:87:b5:03:4f:e3:84:71:39:5b:3d: 3b:a1:4a:2b:94:c7:fd:82:e7:01:79:9b:b0:c1:b4: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A5:FC:08:0C:3E:7D:6A:E3:00:09:FC:57:A5:98:F6:E7:83:11:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3eb29c2-dfd3-39b8-b359-0372dfb920fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:75:c1:8f:49:0e:76:d9:6b:12:70:1b:d1:c9:d1:6c:19:ca: d2:c6:42:f1:0f:10:ce:6e:dc:ac:12:38:d0:9a:65:b9:8a:61: 4b:34:e2:50:aa:58:f8:5c:0c:5a:9d:2a:36:3f:b0:a3:96:88: f3:e9:12:eb:08:e4:0a:76:12:71:90:dc:d9:4b:63:5c:96:cf: e9:a4:d6:32:50:b5:9a:64:42:00:d8:61:f9:21:4d:e7:ed:b7: 18:3e:ed:ef:c3:a5:51:ef:da:27:4e:42:f4:4a:57:13:8e:d8: 8d:c6:42:88:86:a8:c5:5b:20:e6:70:7d:41:92:f4:ad:d3:ba: 99:3e:d1:93:d8:10:3d:33:be:98:5c:69:64:05:fa:39:c6:5b: 1a:63:7b:cc:29:4d:09:d2:58:b2:54:f2:a9:7a:5b:15:b3:1f: ba:7d:c1:00:f7:33:bf:f3:b5:ff:a7:85:28:20:b9:b2:68:85: 00:63:40:0a:d4:6f:f6:9a:ab:e7:f7:07:af:dc:f7:9b:9b:74: db:dd:7f:b4:7d:d6:47:c3:7d:1e:63:d3:92:88:03:76:8f:a5: b1:a8:5d:9d:0b:58:dd:c8:bf:5b:6c:31:8a:82:40:20:03:a6: 18:a1:79:68:7d:9d:7c:ed:ce:fa:0d:55:fa:6d:d0:d6:17:b8: 18:70:6c:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+lk6YjuWZIobklWRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk YTk5NDY0OTEtZTg3ZC00NzU0LWJkMmQtOThkMzg2ODc3NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreR5mnhk6G2avmkoWumiFULbkG05qQeJX4uu 4GhWcEoasPhT9cSXyB0QKbqaeJvryrVbVgHcloR8Tf7LBinmDMWRujqpb+A2Qas7 upS2LGjuooef2SMIE3a0/Zs/ucNFcirb2jK+tKE1BrEVB1YqrJLPWHagU4OJBENz oI7blsJnqhu64uVHCS+VNgsejD/0cwD7/wnm9rG8K83CZnUKpdXIftoXZ3gVkUOD yZnvikTsjUMYDGj+4r/kOGptX0yc9Zq9OyrLwm4XbyazcNi/EiRNEtE/UG3hWzJ0 aAdMoJvsp0FK6Ye1A0/jhHE5Wz07oUorlMf9gucBeZuwwbSmOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSl/AgMPn1q4wAJ/FelmPbngxHLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNlYjI5YzItZGZkMy0z OWI4LWIzNTktMDM3MmRmYjkyMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0j5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ1wY9JDnbZaxJwG9HJ0WwZytLGQvEPEM5u3KwSONCaZbmKYUs04lCq WPhcDFqdKjY/sKOWiPPpEusI5Ap2EnGQ3NlLY1yWz+mk1jJQtZpkQgDYYfkhTeft txg+7e/DpVHv2idOQvRKVxOO2I3GQoiGqMVbIOZwfUGS9K3Tupk+0ZPYED0zvphc aWQF+jnGWxpje8wpTQnSWLJU8ql6WxWzH7p9wQD3M7/ztf+nhSggubJohQBjQArU b/aaq+f3B6/c95ubdNvdf7R91kfDfR5j05KIA3aPpbGoXZ0LWN3Iv1tsMYqCQCAD phiheWh9nXztzvoNVfpt0NYXuBhwbKw= -----END CERTIFICATE-----Generated at Thu Nov 5 18:46:32 2026 by rpki-client