$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e43d6c2c-dc99-3f19-9d42-45337932af4e.roa File: e43d6c2c-dc99-3f19-9d42-45337932af4e.roa (raw, json) Hash identifier: 5ywqFRFSxZf/2jxzPu310gWlo7yZ1ftkuJhFpM6euF0= Subject key identifier: 72:D7:44:6F:81:81:12:AD:34:5E:AA:BF:A8:49:0E:8B:5C:2A:98:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F2957B9BDCE1AEDD9C31BFA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e43d6c2c-dc99-3f19-9d42-45337932af4e.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 16625 IP address blocks: 23.207.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b9:bd:ce:1a:ed:d9:c3:1b:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=e48c461a-cc1e-4538-9f27-150a09b75017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:da:50:09:fb:dd:97:02:a3:21:d5:72:32: a6:a9:6a:f5:5f:35:73:a7:4d:e0:ad:4f:83:96:ff: 70:67:e9:9a:c2:75:a3:72:e0:d6:b0:65:63:8f:04: 9b:ea:31:02:ad:65:44:0a:81:87:26:4b:cd:b2:ef: 89:f5:b2:95:a0:fd:76:be:75:1f:da:b2:0a:45:46: b5:34:d5:f8:37:ea:bf:54:4b:3d:94:e9:6a:1b:44: 31:af:eb:11:40:66:e8:30:a0:d1:6b:7c:d2:b2:e9: 16:ea:4c:6d:18:82:80:64:95:1d:be:2d:54:4b:9e: 27:a7:11:d4:9e:87:12:e1:3b:fc:49:89:d7:aa:9f: 90:12:e0:6c:75:69:4a:0e:c6:4d:dd:a6:d5:c9:9b: cc:cb:98:96:41:5d:b3:6f:3a:1e:cc:1f:b6:ed:4f: 6c:3d:60:cc:0b:c9:fe:af:df:6d:f6:1e:8b:5f:32: d5:53:3b:22:d6:d6:58:cb:7e:ad:43:b4:d6:d8:d3: 33:90:14:0c:a9:9a:44:83:ae:7c:21:4d:9d:73:97: c7:ef:d6:8c:ba:f2:0a:54:52:61:81:6d:a5:39:d1: e1:39:98:7c:e0:5b:a6:b1:f0:ba:d3:96:4e:b1:e4: 71:08:1a:95:cf:ca:08:b6:66:48:61:16:32:e4:a1: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D7:44:6F:81:81:12:AD:34:5E:AA:BF:A8:49:0E:8B:5C:2A:98:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e43d6c2c-dc99-3f19-9d42-45337932af4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e7:88:a7:9d:a4:85:7a:99:aa:db:6e:b5:45:37:ab:1f:69: bd:59:71:70:2e:ee:41:cc:b8:07:52:33:e7:49:b6:f0:a6:42: 7e:18:68:1f:af:38:22:50:4c:60:8c:0d:67:1e:eb:4a:94:ce: 48:e7:81:d1:d1:f4:9d:32:ad:06:8e:bc:c1:0d:0d:f5:4b:d7: 95:b7:0e:7c:de:a7:85:a2:02:0b:05:5f:2f:73:e9:3b:49:01: db:b6:26:ff:04:fa:d6:01:eb:11:84:40:da:7f:d7:21:dc:62: de:e3:05:de:a9:1e:96:53:5c:b6:53:95:5f:91:a2:21:4a:b7: 14:1a:c0:11:59:67:1f:0b:76:5b:d4:d1:d9:51:3e:d1:50:a3: 21:06:c2:c5:ac:42:75:e1:eb:72:27:33:88:5e:c9:da:aa:c4: dd:96:5f:52:fd:29:9a:1b:ce:3b:c4:67:08:62:83:b8:1b:87: 78:f9:3c:65:ad:63:76:b1:7c:b0:66:d1:97:99:6c:4c:33:95: 23:08:4e:f4:d6:e0:38:9d:c1:04:a8:7f:7d:d9:22:2a:0c:d7: b0:3d:53:92:bb:42:13:9a:35:7e:29:80:90:ca:7b:91:2e:da: 7c:3e:47:ac:41:03:13:21:40:ae:43:60:1f:23:3c:8b:32:ab: 2d:df:50:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7m9zhrt2cMb+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZTQ4YzQ2MWEtY2MxZS00NTM4LTlmMjctMTUwYTA5Yjc1MDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7naUAn73ZcCoyHVcjKmqWr1XzVzp03grU+D lv9wZ+mawnWjcuDWsGVjjwSb6jECrWVECoGHJkvNsu+J9bKVoP12vnUf2rIKRUa1 NNX4N+q/VEs9lOlqG0Qxr+sRQGboMKDRa3zSsukW6kxtGIKAZJUdvi1US54npxHU nocS4Tv8SYnXqp+QEuBsdWlKDsZN3abVyZvMy5iWQV2zbzoezB+27U9sPWDMC8n+ r99t9h6LXzLVUzsi1tZYy36tQ7TW2NMzkBQMqZpEg658IU2dc5fH79aMuvIKVFJh gW2lOdHhOZh84FumsfC605ZOseRxCBqVz8oItmZIYRYy5KGoRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLXRG+BgRKtNF6qv6hJDotcKpjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQzZDZjMmMtZGM5OS0z ZjE5LTlkNDItNDUzMzc5MzJhZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF89EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjniKedpIV6marbbrVFN6sfab1ZcXAu7kHMuAdSM+dJtvCmQn4YaB+v OCJQTGCMDWce60qUzkjngdHR9J0yrQaOvMENDfVL15W3Dnzep4WiAgsFXy9z6TtJ Adu2Jv8E+tYB6xGEQNp/1yHcYt7jBd6pHpZTXLZTlV+RoiFKtxQawBFZZx8LdlvU 0dlRPtFQoyEGwsWsQnXh63InM4heydqqxN2WX1L9KZobzjvEZwhig7gbh3j5PGWt Y3axfLBm0ZeZbEwzlSMITvTW4DidwQSof33ZIioM17A9U5K7QhOaNX4pgJDKe5Eu 2nw+R6xBAxMhQK5DYB8jPIsyqy3fUJY= -----END CERTIFICATE-----Generated at Tue Sep 22 03:10:30 2026 by rpki-client