$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea9487f3-12d7-3dc9-bb10-79534440e390.roa File: ea9487f3-12d7-3dc9-bb10-79534440e390.roa (raw, json) Hash identifier: kxM9ynSPJBnEq8VA+aYdM6nHeSrh61EUv1c+K0+Fqa0= Subject key identifier: C4:2B:A2:19:67:97:35:BB:B3:EC:11:19:FB:E3:DD:D1:03:00:02:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D8497DF91F74F542BB800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea9487f3-12d7-3dc9-bb10-79534440e390.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.199.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:84:97:df:91:f7:4f:54:2b:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=38c05a0d-5951-4087-9976-ded432ca656a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:fe:a2:9b:d4:0c:cc:a9:19:57:75:ad:26: 1c:ac:91:64:84:61:49:37:fa:a4:80:a3:3d:05:a9: fa:cb:ab:05:2f:92:f0:8b:79:63:8f:02:f1:d0:a0: d2:ec:24:64:26:e1:4b:0f:a8:00:26:0e:80:ef:7e: c6:f7:ae:dd:f1:cf:f4:20:07:be:34:b8:3a:ce:55: 23:f3:66:a3:ab:8b:ca:0f:8c:3d:49:f6:c9:3a:ac: d5:ad:53:83:0b:05:43:c4:97:24:e2:00:f6:1e:b5: 20:ce:42:4e:e3:09:d7:47:4e:7f:e2:ff:ff:00:02: 77:64:36:6c:f6:b0:d7:f6:1f:bd:2e:b2:89:9a:85: c0:5a:de:8e:e3:41:2b:bf:5b:08:55:e1:ee:5c:f6: 41:f8:78:db:8c:17:87:bc:49:44:a2:7d:4a:f2:2a: dd:14:39:60:99:17:36:20:ef:40:ab:92:44:74:fe: e7:ee:26:e1:50:0b:6e:85:8f:33:41:7a:79:04:2b: 19:43:b2:de:10:66:3a:37:d4:69:a0:64:7a:d7:10: 2b:9b:b9:77:a9:e1:89:b6:01:97:83:f6:43:cb:41: 9f:19:93:b5:f2:11:6d:21:d5:2d:fa:89:9d:7e:86: e7:66:9b:13:53:ec:ae:45:da:30:f5:8f:03:8e:f1: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2B:A2:19:67:97:35:BB:B3:EC:11:19:FB:E3:DD:D1:03:00:02:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea9487f3-12d7-3dc9-bb10-79534440e390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:00:40:42:a5:b3:38:08:ed:87:51:2d:53:ed:d2:a2:43:08: e8:bb:f7:64:ed:ed:9f:d8:1e:5a:4f:17:20:40:fd:a7:c1:fd: c5:2f:a7:23:d1:4e:7c:1b:a3:ef:d9:fe:79:8c:10:99:57:73: 50:23:08:5b:65:e9:8f:60:67:70:07:dc:6d:35:b7:8b:f5:3b: 11:cc:41:dc:50:86:be:82:43:98:ae:b0:52:32:6d:02:bc:4a: 22:e0:74:c9:48:86:f0:08:72:10:b8:cf:8c:f7:1d:5f:de:f9: d1:62:38:18:4c:97:ed:82:4a:5a:cb:ff:89:dd:2f:47:35:7f: 44:46:85:9b:0a:57:a9:6c:aa:e4:cb:33:a6:4f:d9:9b:87:78: da:c1:78:78:85:55:d9:20:80:33:99:5c:2a:4f:f3:fa:d5:4f: 87:17:bb:86:ef:9d:d2:04:cc:91:c7:04:0f:a2:97:43:83:56: a0:69:86:a5:fe:a4:bb:ce:99:86:45:f9:6f:0c:38:14:de:d8: cb:8a:37:44:b1:52:7d:59:d9:55:30:24:88:21:ad:1f:35:c4: 5a:cb:89:44:c5:d3:9f:a7:1f:94:f9:42:1b:1f:10:af:23:42: 82:3a:19:33:74:b4:76:9d:87:c4:bc:72:38:8c:f5:68:d7:41: ba:7f:30:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfYSX35H3T1QruAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzhjMDVhMGQtNTk1MS00MDg3LTk5NzYtZGVkNDMyY2E2NTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQX+opvUDMypGVd1rSYcrJFkhGFJN/qkgKM9 Ban6y6sFL5Lwi3ljjwLx0KDS7CRkJuFLD6gAJg6A737G967d8c/0IAe+NLg6zlUj 82ajq4vKD4w9SfbJOqzVrVODCwVDxJck4gD2HrUgzkJO4wnXR05/4v//AAJ3ZDZs 9rDX9h+9LrKJmoXAWt6O40Erv1sIVeHuXPZB+HjbjBeHvElEon1K8irdFDlgmRc2 IO9Aq5JEdP7n7ibhUAtuhY8zQXp5BCsZQ7LeEGY6N9RpoGR61xArm7l3qeGJtgGX g/ZDy0GfGZO18hFtIdUt+omdfobnZpsTU+yuRdow9Y8DjvEqdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQrohlnlzW7s+wRGfvj3dEDAALGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWE5NDg3ZjMtMTJkNy0z ZGM5LWJiMTAtNzk1MzQ0NDBlMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8fkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYAQEKlszgI7YdRLVPt0qJDCOi792Tt7Z/YHlpPFyBA/afB/cUvpyPR Tnwbo+/Z/nmMEJlXc1AjCFtl6Y9gZ3AH3G01t4v1OxHMQdxQhr6CQ5iusFIybQK8 SiLgdMlIhvAIchC4z4z3HV/e+dFiOBhMl+2CSlrL/4ndL0c1f0RGhZsKV6lsquTL M6ZP2ZuHeNrBeHiFVdkggDOZXCpP8/rVT4cXu4bvndIEzJHHBA+il0ODVqBphqX+ pLvOmYZF+W8MOBTe2MuKN0SxUn1Z2VUwJIghrR81xFrLiUTF05+nH5T5QhsfEK8j QoI6GTN0tHadh8S8cjiM9WjXQbp/MAI= -----END CERTIFICATE-----Generated at Sun Sep 27 07:54:42 2026 by rpki-client