$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa File: d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa (raw, json) Hash identifier: F5ViiMF9ua6Ahmes3EWHhbE44lXmfISowxoL6EbPU5k= Subject key identifier: 0F:AE:AC:37:17:B1:10:D6:C2:44:63:F0:07:20:8A:5D:8E:D4:3B:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F9BCDDBFD66C7AA55F2F875C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 20940 IP address blocks: 23.67.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:db:fd:66:c7:aa:55:f2:f8:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=8dce842b-a06b-4fdd-8182-6ecfd9d04f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:41:bf:31:a4:0a:61:41:58:5b:a1:c1:30:ca: 57:5b:ba:30:75:3a:a7:2c:ca:42:73:0b:08:12:3f: 43:21:a7:bf:54:ec:1a:26:82:6e:f2:48:ac:14:cd: e4:da:89:39:27:a8:25:5d:4a:aa:3b:78:79:d9:8b: 84:ce:c0:4c:a9:50:a7:79:df:0c:3a:d9:43:50:36: ee:83:9f:6f:e1:a3:b8:eb:dd:1e:ec:e8:59:fc:66: 7c:4b:b9:40:8b:17:34:c6:dc:5d:8e:05:19:87:5a: 4a:3e:ad:4d:4a:98:52:79:72:e1:d5:35:4a:bb:9e: d4:5b:94:15:be:85:c3:ea:0d:90:7f:d0:2d:ef:46: 7d:0c:a7:e9:b0:45:fa:6c:8a:70:32:51:0e:1e:1b: 62:9b:92:a2:9b:01:9a:17:6e:ef:4f:94:55:be:e4: 34:12:6d:62:f6:9d:3a:98:8c:eb:c4:c4:34:7f:d6: 4f:df:6a:21:f4:e2:69:ad:e6:41:fb:22:70:fd:4b: 44:eb:37:f0:76:88:1d:b3:f9:1b:d8:74:a6:8b:60: de:88:34:d3:8b:8a:eb:01:fc:3b:4f:dd:bf:42:9e: 0e:71:a2:7a:99:c5:33:18:dd:e2:41:66:0f:75:ae: bb:81:8f:c1:d4:9f:5c:a1:bf:db:56:0e:40:ef:8c: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AE:AC:37:17:B1:10:D6:C2:44:63:F0:07:20:8A:5D:8E:D4:3B:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:05:2d:ab:ad:f3:60:46:ee:78:2c:26:d9:f0:9a:0b:8f:c5: cb:bd:3a:10:96:bf:f4:84:7c:b6:8b:d7:a3:2f:46:5f:42:10: 40:e8:e1:f8:8f:a0:07:11:5a:71:77:71:42:b5:51:cb:19:e2: cf:6c:f5:21:90:a0:10:e4:77:47:57:be:37:49:37:f6:4f:c8: 20:5c:36:e5:4c:45:e4:13:c0:dd:c7:ec:e7:5c:30:8c:92:7f: 97:3f:fd:49:db:da:8e:29:1a:59:0c:88:40:c0:56:20:cc:c3: 99:a8:5b:b3:50:4d:da:db:5e:c3:7a:ba:47:42:68:03:4e:c3: fa:52:76:c3:dc:7f:e3:ed:c3:df:1a:ac:05:ab:3d:76:cf:9f: 85:b3:30:9a:08:e2:a7:c5:65:f5:ef:24:d2:0e:eb:d1:19:0a: 8c:d9:f8:71:41:85:d5:a9:56:37:3b:ae:1a:6c:01:9b:f6:a0: a0:29:11:6b:85:a9:42:59:19:97:ee:3d:35:21:7b:df:e0:c1: 66:fc:a1:9a:66:3e:52:16:25:43:c2:b8:92:9b:25:b3:9a:0f: a7:78:ea:69:d3:72:c1:ec:48:3e:8a:d5:b8:83:c8:f7:cc:e5: e0:80:a3:46:10:f4:36:15:f6:ee:a9:01:cb:a8:95:63:e7:9b: f3:18:43:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzdv9ZseqVfL4dcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OGRjZTg0MmItYTA2Yi00ZmRkLTgxODItNmVjZmQ5ZDA0ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kG/MaQKYUFYW6HBMMpXW7owdTqnLMpCcwsI Ej9DIae/VOwaJoJu8kisFM3k2ok5J6glXUqqO3h52YuEzsBMqVCned8MOtlDUDbu g59v4aO4690e7OhZ/GZ8S7lAixc0xtxdjgUZh1pKPq1NSphSeXLh1TVKu57UW5QV voXD6g2Qf9At70Z9DKfpsEX6bIpwMlEOHhtim5KimwGaF27vT5RVvuQ0Em1i9p06 mIzrxMQ0f9ZP32oh9OJpreZB+yJw/UtE6zfwdogds/kb2HSmi2DeiDTTi4rrAfw7 T92/Qp4OcaJ6mcUzGN3iQWYPda67gY/B1J9cob/bVg5A74y75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+urDcXsRDWwkRj8Acgil2O1DvcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVjMmM5NzEtODk0ZS0z OGNlLWI4ODItNGU2NWUyZWQwYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkFLaut82BG7ngsJtnwmguPxcu9OhCWv/SEfLaL16MvRl9CEEDo4fiP oAcRWnF3cUK1UcsZ4s9s9SGQoBDkd0dXvjdJN/ZPyCBcNuVMReQTwN3H7OdcMIyS f5c//Unb2o4pGlkMiEDAViDMw5moW7NQTdrbXsN6ukdCaANOw/pSdsPcf+Ptw98a rAWrPXbPn4WzMJoI4qfFZfXvJNIO69EZCozZ+HFBhdWpVjc7rhpsAZv2oKApEWuF qUJZGZfuPTUhe9/gwWb8oZpmPlIWJUPCuJKbJbOaD6d46mnTcsHsSD6K1biDyPfM 5eCAo0YQ9DYV9u6pAcuolWPnm/MYQ5E= -----END CERTIFICATE-----Generated at Sun Nov 15 19:14:52 2026 by rpki-client