$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d13cbf27-b7f4-3cd7-8fa3-94a435c064d6.roa File: d13cbf27-b7f4-3cd7-8fa3-94a435c064d6.roa (raw, json) Hash identifier: mi1O5HY9BgaTxq0N2UKYmx+13cV0go9r8CfKnk/awWU= Subject key identifier: FF:FC:B5:D3:AE:7D:21:CD:58:4F:FF:F3:A3:40:D1:B2:C4:42:57:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49857DB85DB538FCC9FC4B99 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d13cbf27-b7f4-3cd7-8fa3-94a435c064d6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7713 IP address blocks: 23.212.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:7d:b8:5d:b5:38:fc:c9:fc:4b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c01018d6-da31-49f3-9b7f-ce0313d9080e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b4:ac:e1:75:14:7e:22:bf:96:fc:eb:a5:68: 72:31:0c:29:17:1e:01:e8:29:4d:0b:d6:86:28:73: 50:0e:76:74:c1:df:5a:ee:86:9e:e6:0b:11:90:3e: da:30:a9:d0:56:7c:7e:01:6e:1c:ae:38:5d:c3:25: 14:18:dc:ff:00:f5:21:a9:7d:cf:9e:ab:d9:31:ac: f5:2c:dd:c0:6f:2b:f6:c2:c6:62:d3:c4:0a:c3:77: 31:18:04:99:65:49:54:c5:9e:5c:80:9c:5b:fa:90: e6:72:6e:d7:bb:7d:ee:4e:49:a0:c9:b9:3f:6e:c8: d4:d4:62:5b:b9:e6:7b:f1:88:6a:fd:32:bb:a0:2e: 30:b8:06:b4:32:c5:90:23:b1:af:7b:27:c6:a0:55: e4:94:48:f9:16:61:77:9e:28:be:13:95:c5:5d:a5: ab:f8:5f:3f:2a:cf:da:17:bd:ed:2d:23:1c:92:73: aa:e8:94:bc:2f:1e:0f:0c:15:ae:7a:ee:73:52:a3: 49:e2:08:74:3e:c4:bb:b3:65:23:56:9c:3d:09:3f: b3:13:ed:0c:06:a1:56:93:81:48:70:9e:76:36:70: 29:d9:42:9e:6e:65:5c:28:ee:9b:04:5c:35:5d:58: 8d:4d:45:28:14:87:a4:f1:b2:e0:89:19:7b:8d:50: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FC:B5:D3:AE:7D:21:CD:58:4F:FF:F3:A3:40:D1:B2:C4:42:57:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d13cbf27-b7f4-3cd7-8fa3-94a435c064d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e8:59:03:12:e4:57:77:85:ae:e1:8b:1d:a9:e5:bd:7e:0a: 7d:6b:a3:7b:31:31:75:b8:3d:19:5d:fe:57:27:91:d6:91:af: 27:3c:45:24:22:f8:41:55:e8:a9:63:53:d8:c3:d2:a2:72:b6: 7b:7e:52:5e:e5:b0:62:cf:fe:bb:76:7a:a3:06:38:01:85:ea: 95:89:79:15:c4:cd:77:bb:ad:00:8b:71:ac:f2:f5:3f:f2:2c: c7:40:9a:d4:a5:bd:44:1c:bb:fa:63:05:e6:a5:b2:86:2f:93: 74:fb:d6:5b:5f:c7:c1:44:f9:c8:99:35:2a:20:30:8f:c3:9a: df:ce:07:f6:f5:41:70:d5:d5:40:d4:0f:05:95:b8:16:51:88: 58:3d:7b:e7:35:65:55:fc:d1:5b:e3:06:55:c8:0f:5a:4b:15: ab:ef:c4:92:a7:27:f5:40:df:b1:4a:9b:e5:0f:ba:aa:f2:46: 2f:b4:ff:55:72:88:58:b8:e6:97:5d:c5:87:c7:ff:8b:56:62: c2:fe:ea:4b:a5:02:ec:9c:d6:02:7e:2b:cb:a3:d1:0a:17:20: 2b:87:0a:51:4c:01:1e:14:59:86:f7:e7:0c:35:d8:79:8c:5a: 5c:ed:f1:16:08:fd:f5:2f:65:8a:b0:80:2d:65:91:c3:d5:7b: 26:2f:8f:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhX24XbU4/Mn8S5kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzAxMDE4ZDYtZGEzMS00OWYzLTliN2YtY2UwMzEzZDkwODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27Ss4XUUfiK/lvzrpWhyMQwpFx4B6ClNC9aG KHNQDnZ0wd9a7oae5gsRkD7aMKnQVnx+AW4crjhdwyUUGNz/APUhqX3PnqvZMaz1 LN3Abyv2wsZi08QKw3cxGASZZUlUxZ5cgJxb+pDmcm7Xu33uTkmgybk/bsjU1GJb ueZ78Yhq/TK7oC4wuAa0MsWQI7GveyfGoFXklEj5FmF3nii+E5XFXaWr+F8/Ks/a F73tLSMcknOq6JS8Lx4PDBWueu5zUqNJ4gh0PsS7s2UjVpw9CT+zE+0MBqFWk4FI cJ52NnAp2UKebmVcKO6bBFw1XViNTUUoFIek8bLgiRl7jVC2pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/8tdOufSHNWE//86NA0bLEQleYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDEzY2JmMjctYjdmNC0z Y2Q3LThmYTMtOTRhNDM1YzA2NGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPoWQMS5Fd3ha7hix2p5b1+Cn1ro3sxMXW4PRld/lcnkdaRryc8RSQi +EFV6KljU9jD0qJytnt+Ul7lsGLP/rt2eqMGOAGF6pWJeRXEzXe7rQCLcazy9T/y LMdAmtSlvUQcu/pjBealsoYvk3T71ltfx8FE+ciZNSogMI/Dmt/OB/b1QXDV1UDU DwWVuBZRiFg9e+c1ZVX80VvjBlXID1pLFavvxJKnJ/VA37FKm+UPuqryRi+0/1Vy iFi45pddxYfH/4tWYsL+6kulAuyc1gJ+K8uj0QoXICuHClFMAR4UWYb35ww12HmM Wlzt8RYI/fUvZYqwgC1lkcPVeyYvj/A= -----END CERTIFICATE-----Generated at Sat Sep 26 10:42:13 2026 by rpki-client