$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf8cc01d-2bbc-3234-9591-fc6bb929b450.roa File: cf8cc01d-2bbc-3234-9591-fc6bb929b450.roa (raw, json) Hash identifier: jMDrJjkBDX0rL5t2FGdSMCgXBg0jwsDMq/J/VaZrNDI= Subject key identifier: 6C:99:96:AA:80:29:98:6A:4D:8A:DD:15:71:37:C7:45:99:01:CE:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F506D5B118457149936670D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf8cc01d-2bbc-3234-9591-fc6bb929b450.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.222.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:5b:11:84:57:14:99:36:67:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=db1c7ab2-85d3-4794-af63-9c724462f7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:7d:6e:70:52:d2:60:b0:54:5e:bd:9f:74: 04:4c:44:39:ce:8c:75:63:f8:d3:9f:42:36:4e:b5: 0f:e7:aa:29:f5:73:45:99:a7:91:8d:bd:0f:33:1b: 4c:3d:65:c2:e9:76:17:30:bc:3e:3e:a9:34:c6:30: 75:08:d3:c5:09:18:04:be:b2:d5:47:7b:2e:25:69: d2:c6:04:5e:61:81:68:a3:9b:34:2a:ea:a3:67:fd: d4:58:2d:96:22:84:49:fc:fb:a1:28:56:f1:d1:c5: 96:a5:9b:73:f8:77:55:5e:e1:cb:ba:31:20:78:4b: 0b:78:9f:67:87:41:6a:4e:5c:f5:e9:46:af:ee:0b: ab:f8:81:0b:68:f2:73:a3:3b:84:b8:8a:d9:cd:86: 11:4d:ec:4b:89:43:5e:d9:ed:61:d0:76:6f:4f:38: c0:6a:74:3a:58:5a:c8:4f:a5:02:f6:bb:c7:30:2e: c0:47:0c:25:69:1b:df:82:21:28:dc:67:5b:d2:48: 33:76:54:2b:9f:69:d7:1c:f6:98:3d:7a:4e:c5:a9: 9e:1e:59:8c:1d:4c:d5:ea:b1:e5:a0:4d:11:12:a8: 14:aa:d3:f2:9f:ca:2c:41:75:22:8c:c9:de:2f:35: f6:6d:ac:85:44:45:77:84:6a:ee:1f:eb:24:ce:36: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:99:96:AA:80:29:98:6A:4D:8A:DD:15:71:37:C7:45:99:01:CE:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf8cc01d-2bbc-3234-9591-fc6bb929b450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.222.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6c:61:48:b6:cf:c4:b2:20:a7:57:c6:b1:06:0e:62:d1:4e: 2d:2b:13:37:b1:0d:84:62:ad:2b:cd:39:b9:2f:91:28:b7:16: 39:d8:97:0b:79:13:07:ee:dc:79:15:59:d9:b7:93:87:98:e3: 47:99:2f:aa:69:fe:7f:c8:c1:64:ed:e3:3b:1d:6b:1b:ff:6b: ae:30:ce:49:0b:fc:61:fb:dd:02:99:98:47:1f:dd:93:74:32: 7e:f6:04:0e:47:88:83:b0:63:5f:6b:ff:f8:74:fe:50:57:9b: 9a:42:a8:db:31:f5:db:37:1e:8d:30:49:2b:dc:f4:38:b5:70: 84:05:68:34:c7:76:b0:61:42:c4:af:fd:3f:01:29:06:9c:02: 35:44:e6:11:f3:6b:1d:b8:68:71:75:3b:b3:99:d7:3f:48:ac: 0c:ce:1a:df:83:f4:9f:c4:bc:a9:74:ff:0c:bd:cd:50:f0:ae: 76:85:23:bb:38:45:e5:a2:b9:93:e6:ec:40:8a:a0:60:69:c4: 2b:a3:63:dc:b7:ad:c2:1e:2b:d2:f1:55:63:7a:57:ad:00:a2: 1b:d4:2e:47:5d:1a:f1:2f:b1:0b:58:cb:70:e6:6e:f9:c8:fe: 65:e7:78:f9:1e:94:97:c8:b1:19:64:15:b8:b6:0f:13:c9:52: 24:cf:29:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbVsRhFcUmTZnDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGIxYzdhYjItODVkMy00Nzk0LWFmNjMtOWM3MjQ0NjJmN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6d9bnBS0mCwVF69n3QETEQ5zox1Y/jTn0I2 TrUP56op9XNFmaeRjb0PMxtMPWXC6XYXMLw+Pqk0xjB1CNPFCRgEvrLVR3suJWnS xgReYYFoo5s0KuqjZ/3UWC2WIoRJ/PuhKFbx0cWWpZtz+HdVXuHLujEgeEsLeJ9n h0FqTlz16Uav7gur+IELaPJzozuEuIrZzYYRTexLiUNe2e1h0HZvTzjAanQ6WFrI T6UC9rvHMC7ARwwlaRvfgiEo3Gdb0kgzdlQrn2nXHPaYPXpOxameHlmMHUzV6rHl oE0REqgUqtPyn8osQXUijMneLzX2bayFREV3hGruH+skzjasZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyZlqqAKZhqTYrdFXE3x0WZAc7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Y4Y2MwMWQtMmJiYy0z MjM0LTk1OTEtZmM2YmI5MjliNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF97wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5sYUi2z8SyIKdXxrEGDmLRTi0rEzexDYRirSvNObkvkSi3FjnYlwt5 Ewfu3HkVWdm3k4eY40eZL6pp/n/IwWTt4zsdaxv/a64wzkkL/GH73QKZmEcf3ZN0 Mn72BA5HiIOwY19r//h0/lBXm5pCqNsx9ds3Ho0wSSvc9Di1cIQFaDTHdrBhQsSv /T8BKQacAjVE5hHzax24aHF1O7OZ1z9IrAzOGt+D9J/EvKl0/wy9zVDwrnaFI7s4 ReWiuZPm7ECKoGBpxCujY9y3rcIeK9LxVWN6V60AohvULkddGvEvsQtYy3DmbvnI /mXnePkelJfIsRlkFbi2DxPJUiTPKQ4= -----END CERTIFICATE-----Generated at Thu Oct 8 10:51:37 2026 by rpki-client