$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fefdb3e4-98ad-3713-adb1-0af9c51e238d.roa File: fefdb3e4-98ad-3713-adb1-0af9c51e238d.roa (raw, json) Hash identifier: fKWntCfEEdmlaQWEzr3+vlCYXmmtvAaCoddb2kSlmT4= Subject key identifier: 9B:C6:89:F3:05:C3:F6:B1:E1:0D:C9:DE:C1:F1:2B:D5:CC:63:9C:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D38738FC8A64D3D50FD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fefdb3e4-98ad-3713-adb1-0af9c51e238d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.54.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:38:73:8f:c8:a6:4d:3d:50:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=84cc5bc6-08f1-420f-b9ec-3b5a0ecfc63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8b:dc:a3:dc:66:0e:9e:55:af:11:e4:88:dd: 68:80:9f:1a:c6:15:bc:fd:ff:97:28:57:8a:56:34: 08:4a:5a:ea:15:bc:c3:55:53:76:31:7f:73:35:3a: 94:39:4a:9a:c0:f4:ba:11:8d:c0:dd:8f:67:9d:b3: 7c:96:02:b7:f2:8a:eb:bc:be:38:50:76:da:e0:a0: 29:19:2d:7a:0d:c2:22:63:f8:d2:24:bb:4d:24:d9: 60:dc:d8:73:13:af:ab:7f:0f:04:22:05:bf:ab:6f: f1:15:74:19:4c:9a:27:9d:61:5e:ff:91:bb:f2:23: 94:e7:e6:4c:87:3e:25:50:54:85:32:0b:25:55:4b: 30:14:dc:d6:32:33:58:cb:f9:84:ed:a7:51:49:31: b0:9e:08:15:55:2f:25:c2:30:3c:8c:1b:6c:63:2a: 9e:d8:2d:96:66:60:bd:aa:b5:0c:b9:6c:7e:36:43: 1e:9c:09:07:dc:4b:40:d8:41:36:c0:8e:b9:86:c3: 88:d2:66:69:18:6d:9a:d7:9a:cb:f5:2b:17:8f:87: ad:b7:37:d8:1e:0d:5e:e9:b0:9d:40:68:70:a7:5e: 97:be:4b:3d:46:ca:8b:71:de:ab:10:7d:28:d8:68: ff:f2:b6:f6:d8:fe:80:1b:0c:10:5d:94:3a:d9:14: 7e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:89:F3:05:C3:F6:B1:E1:0D:C9:DE:C1:F1:2B:D5:CC:63:9C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fefdb3e4-98ad-3713-adb1-0af9c51e238d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:df:59:59:fc:b0:a1:b5:b2:44:f5:f4:22:35:1a:76:30:e9: 05:d7:19:28:08:e1:28:64:7d:63:9e:3c:97:06:d5:2d:03:10: 00:5d:ac:8c:55:f8:4d:c0:a0:db:86:6b:42:29:a5:37:cd:46: f1:f1:da:23:70:e9:41:72:58:1d:0d:af:a3:51:0f:83:b5:17: 71:a6:d0:5a:67:85:5b:14:9f:1e:21:a8:37:80:00:52:91:6c: ed:56:e1:e3:27:6a:1b:a1:20:34:7a:af:9a:7b:34:0f:e4:56: 13:92:c6:c2:e3:ac:65:61:4b:06:4a:5f:01:a9:42:c8:b5:43: a0:69:75:26:8e:f8:ff:60:db:ee:f5:6d:32:6d:8b:da:67:ad: 18:a7:3b:6b:b4:c7:22:6b:30:69:4c:76:2d:e9:49:cd:ab:60: 01:3d:2a:6d:00:98:59:71:65:86:d0:22:b5:7f:ee:c8:2b:a9: 3d:b7:75:41:04:46:66:b2:05:bb:b5:a7:92:ce:95:9c:76:ab: 49:ee:1f:47:94:55:c2:44:b9:63:89:80:12:f8:92:d1:59:41: 83:d4:0e:e1:44:00:0f:8b:ca:c8:56:af:b9:38:68:de:25:84: ee:a6:94:97:d9:7e:7b:e6:fc:fd:87:11:7e:a4:04:92:58:a9: 55:d2:f6:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfThzj8imTT1Q/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODRjYzViYzYtMDhmMS00MjBmLWI5ZWMtM2I1YTBlY2ZjNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4vco9xmDp5VrxHkiN1ogJ8axhW8/f+XKFeK VjQISlrqFbzDVVN2MX9zNTqUOUqawPS6EY3A3Y9nnbN8lgK38orrvL44UHba4KAp GS16DcIiY/jSJLtNJNlg3NhzE6+rfw8EIgW/q2/xFXQZTJonnWFe/5G78iOU5+ZM hz4lUFSFMgslVUswFNzWMjNYy/mE7adRSTGwnggVVS8lwjA8jBtsYyqe2C2WZmC9 qrUMuWx+NkMenAkH3EtA2EE2wI65hsOI0mZpGG2a15rL9SsXj4ettzfYHg1e6bCd QGhwp16Xvks9RsqLcd6rEH0o2Gj/8rb22P6AGwwQXZQ62RR+/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvGifMFw/ax4Q3J3sHxK9XMY5wyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmVmZGIzZTQtOThhZC0z NzEzLWFkYjEtMGFmOWM1MWUyMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzbNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3fWVn8sKG1skT19CI1GnYw6QXXGSgI4ShkfWOePJcG1S0DEABdrIxV +E3AoNuGa0IppTfNRvHx2iNw6UFyWB0Nr6NRD4O1F3Gm0FpnhVsUnx4hqDeAAFKR bO1W4eMnahuhIDR6r5p7NA/kVhOSxsLjrGVhSwZKXwGpQsi1Q6BpdSaO+P9g2+71 bTJti9pnrRinO2u0xyJrMGlMdi3pSc2rYAE9Km0AmFlxZYbQIrV/7sgrqT23dUEE RmayBbu1p5LOlZx2q0nuH0eUVcJEuWOJgBL4ktFZQYPUDuFEAA+LyshWr7k4aN4l hO6mlJfZfnvm/P2HEX6kBJJYqVXS9nY= -----END CERTIFICATE-----Generated at Sun Sep 27 06:45:08 2026 by rpki-client