$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72a60fb-dc88-3395-bb96-72c425d163a4.roa File: f72a60fb-dc88-3395-bb96-72c425d163a4.roa (raw, json) Hash identifier: YP15H0tL8qKW/UtFu3ImUWgTUuqYyT6vzW5fJ4vAtrY= Subject key identifier: 8C:B5:0C:C1:47:89:A7:5B:35:0F:02:02:AE:EF:9D:01:74:71:DB:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985795D50B61829CB9B2880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72a60fb-dc88-3395-bb96-72c425d163a4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4657 IP address blocks: 23.205.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:79:5d:50:b6:18:29:cb:9b:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5b55883e-cf64-4895-bac9-52804a8d38fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:7c:b3:bb:45:d1:6d:53:d8:ce:fd:f4:3a: 4c:04:0b:56:91:7a:88:5c:d4:c0:50:d3:5d:74:9b: 42:b1:6f:42:10:8a:15:5e:14:f1:31:ae:b5:ef:e6: 93:0a:a6:45:34:d1:40:14:48:36:06:0b:d5:86:e7: e4:9d:d4:83:25:f9:0c:d2:55:c2:99:4f:25:36:6e: 02:83:82:f9:6f:dd:f1:09:8c:f2:29:51:33:aa:bd: 7f:e8:41:b7:23:2e:36:36:6a:85:7a:c9:e0:b9:02: 83:0c:c1:8f:3f:b8:32:ad:7b:7d:f3:92:c1:1b:4d: 88:7f:56:38:24:c2:37:29:d9:21:fe:c0:1f:16:65: f9:57:de:7b:07:f5:c4:86:89:7d:3c:12:df:b4:cf: 11:5c:8e:3f:d5:b0:02:1b:07:b9:6d:c1:39:dd:45: 56:98:3a:f8:84:9d:90:48:33:f6:d3:f1:1b:91:a0: c8:65:a1:02:a9:8b:0e:fb:a2:54:8b:40:2e:ec:36: 8a:b9:32:90:8e:ea:96:46:bb:d4:07:4a:47:cd:b9: 38:c5:c3:2b:f8:c2:d2:d1:b4:00:ad:94:fb:42:5d: 1a:4b:5c:20:f8:32:29:7a:b1:94:f0:23:f7:d1:53: 68:55:1b:06:db:26:3a:34:1f:cd:d5:80:70:90:a4: 3b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B5:0C:C1:47:89:A7:5B:35:0F:02:02:AE:EF:9D:01:74:71:DB:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72a60fb-dc88-3395-bb96-72c425d163a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d7:b1:33:cb:66:e5:a9:2c:b2:df:0e:ae:39:72:dd:ae:26: d0:71:c0:37:15:41:80:5a:df:d4:46:90:ed:45:ae:1d:3c:e3: 0f:65:29:af:23:9f:dd:ed:06:8f:e3:fd:07:43:6e:0e:9e:93: bd:5b:b3:cf:38:52:52:3b:f0:cc:a6:ea:92:04:47:0d:b6:82: dc:41:d7:bd:07:9f:97:ca:55:75:56:1e:25:23:30:a5:99:b0: a5:da:53:e9:eb:f7:f7:67:71:c7:51:6c:40:ed:0e:22:9f:9a: aa:f7:2e:af:73:33:9e:6b:ab:1d:46:a9:ce:bd:f1:91:5f:cd: 54:93:b3:55:5e:93:ca:7d:ad:c9:7f:ce:eb:a9:e0:a1:46:bd: 5c:2f:ce:f1:a3:89:4e:68:ed:fe:da:24:b5:b8:30:80:1e:39: 39:6d:d6:c7:35:13:32:00:75:02:a2:3a:43:84:6b:82:0d:2d: e5:99:f7:02:35:21:92:c8:55:f8:fc:09:b7:5c:dd:84:38:a9: 30:3f:c9:0a:41:6f:11:83:3e:7a:ac:10:5e:42:37:79:84:69: d8:4a:e8:88:02:8a:17:65:3c:42:3c:bc:cf:f1:9d:a4:49:3a: a2:5b:03:92:bf:1f:27:4e:ef:12:6b:65:61:32:b1:ea:1f:cf: df:b1:96:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhXldULYYKcubKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWI1NTg4M2UtY2Y2NC00ODk1LWJhYzktNTI4MDRhOGQzOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnd8s7tF0W1T2M799DpMBAtWkXqIXNTAUNNd dJtCsW9CEIoVXhTxMa617+aTCqZFNNFAFEg2BgvVhufkndSDJfkM0lXCmU8lNm4C g4L5b93xCYzyKVEzqr1/6EG3Iy42NmqFesnguQKDDMGPP7gyrXt985LBG02If1Y4 JMI3Kdkh/sAfFmX5V957B/XEhol9PBLftM8RXI4/1bACGwe5bcE53UVWmDr4hJ2Q SDP20/EbkaDIZaECqYsO+6JUi0Au7DaKuTKQjuqWRrvUB0pHzbk4xcMr+MLS0bQA rZT7Ql0aS1wg+DIperGU8CP30VNoVRsG2yY6NB/N1YBwkKQ7QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy1DMFHiadbNQ8CAq7vnQF0cdsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjcyYTYwZmItZGM4OC0z Mzk1LWJiOTYtNzJjNDI1ZDE2M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF83QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfXsTPLZuWpLLLfDq45ct2uJtBxwDcVQYBa39RGkO1Frh084w9lKa8j n93tBo/j/QdDbg6ek71bs884UlI78Mym6pIERw22gtxB170Hn5fKVXVWHiUjMKWZ sKXaU+nr9/dnccdRbEDtDiKfmqr3Lq9zM55rqx1Gqc698ZFfzVSTs1Vek8p9rcl/ zuup4KFGvVwvzvGjiU5o7f7aJLW4MIAeOTlt1sc1EzIAdQKiOkOEa4INLeWZ9wI1 IZLIVfj8Cbdc3YQ4qTA/yQpBbxGDPnqsEF5CN3mEadhK6IgCihdlPEI8vM/xnaRJ OqJbA5K/HydO7xJrZWEyseofz9+xlmc= -----END CERTIFICATE-----Generated at Mon Sep 28 23:18:02 2026 by rpki-client