$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa File: 5fd12087-5523-3229-876f-88f686d794a9.roa (raw, json) Hash identifier: zpqpIjZtpt2sdwCuu0Qc6cqRpf6/L1zsQQuyTzmglEA= Subject key identifier: 7D:6F:2B:41:00:78:BD:68:1A:38:0D:8B:EA:97:66:FC:4D:81:16:76 Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Certificate serial: 010D0C9F4328584F4976D66A236E4BD52E267A00 Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32507 IP address blocks: 23.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:d6:6a:23:6e:4b:d5:2e:26:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=23fd87a8-1d2d-468e-82d1-9b4240c0d77d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:9f:37:82:c8:fd:23:aa:d6:9c:19:3d:10: 9f:c1:e1:ce:76:c4:e8:a3:e5:2d:10:41:5a:5f:33: 13:b7:83:8f:7f:94:28:91:a7:35:58:d2:d9:43:a4: b3:a2:c0:18:01:17:96:49:db:5f:94:8c:52:52:f1: 92:d5:78:60:14:65:7c:6b:55:38:e5:41:9e:5c:f4: d4:59:3e:cf:13:29:7d:f7:ba:b6:ed:41:89:7b:bf: 7b:f8:08:3b:65:3f:11:d7:8e:97:cb:ba:c1:d6:8d: 34:75:1d:93:7e:13:f3:ed:10:45:f6:a6:a1:75:60: ab:4d:3c:3e:b7:f7:8e:14:46:be:49:c4:3c:af:34: 73:0c:a2:81:0f:53:99:e6:26:d2:de:89:51:8c:aa: a5:8c:19:03:2f:dd:12:a6:a7:28:d3:21:b0:ae:29: ad:82:97:15:85:4c:02:08:33:c2:31:e4:84:82:b4: 07:8c:dc:39:f7:96:47:af:f4:80:c0:b4:6f:e8:51: 83:4b:60:ed:b8:ba:ce:86:65:de:ab:ca:dd:7e:43: fc:41:94:05:7e:5e:96:a8:31:74:54:05:c2:78:5b: 1f:b3:32:a4:98:cf:41:77:d2:77:89:8a:65:d4:7f: 2b:05:23:34:68:6d:e6:50:81:38:c8:8a:cc:d9:68: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6F:2B:41:00:78:BD:68:1A:38:0D:8B:EA:97:66:FC:4D:81:16:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl X509v3 Authority Key Identifier: keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer sbgp-ipAddrBlock: critical IPv4: 23.186.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:29:2e:c4:74:6f:8c:ec:08:16:af:84:70:51:e8:9c:f0:97: 1a:63:0c:a3:c4:1b:d8:d6:89:c9:f4:63:d9:70:83:e8:e9:5c: a7:81:ae:d6:9d:d3:08:5f:cb:a6:44:6e:49:19:63:36:00:d2: 0f:bb:36:77:d1:42:54:ef:a2:4e:da:3b:4a:dd:18:52:cb:75: ea:28:e3:42:b5:28:35:4e:24:c7:29:4e:98:ec:ba:79:6e:a3: 43:47:43:af:15:ca:86:88:f8:97:4d:b1:1c:08:ba:90:77:ee: 7b:47:82:a2:87:bf:76:c0:f0:36:36:8c:18:85:ef:e5:d4:0a: 26:7a:40:0f:ff:18:cf:3e:15:69:99:eb:3f:57:ae:92:36:59: e9:f9:77:c8:3f:f8:a9:7e:27:ff:23:af:de:25:7c:ff:25:b4: 8a:b5:9a:0e:ee:74:33:9e:7c:6b:09:8b:9a:0f:cd:c5:72:ce: 1d:31:51:32:d1:55:f0:e9:73:e4:81:a4:66:1c:7f:84:99:86: f0:e6:45:2c:f1:d5:f8:bd:e1:9e:fa:8b:ec:f2:12:91:61:94: b3:9c:7c:94:b1:be:0b:18:ac:96:98:74:d9:a9:8b:d0:f4:ea: a8:e7:88:d6:29:6e:0a:c5:1f:5b:d1:a2:65:7c:d4:e0:39:2a: a1:23:e7:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdtZqI25L1S4megAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5 N2RhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjNmZDg3YTgtMWQyZC00NjhlLTgyZDEtOWI0MjQwYzBkNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjmfN4LI/SOq1pwZPRCfweHOdsToo+UtEEFa XzMTt4OPf5Qokac1WNLZQ6SzosAYAReWSdtflIxSUvGS1XhgFGV8a1U45UGeXPTU WT7PEyl997q27UGJe797+Ag7ZT8R146Xy7rB1o00dR2TfhPz7RBF9qahdWCrTTw+ t/eOFEa+ScQ8rzRzDKKBD1OZ5ibS3olRjKqljBkDL90Spqco0yGwrimtgpcVhUwC CDPCMeSEgrQHjNw595ZHr/SAwLRv6FGDS2DtuLrOhmXeq8rdfkP8QZQFfl6WqDF0 VAXCeFsfszKkmM9Bd9J3iYpl1H8rBSM0aG3mUIE4yIrM2Wi+AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1vK0EAeL1oGjgNi+qXZvxNgRZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvNWZkMTIwODctNTUyMy0z MjI5LTg3NmYtODhmNjg2ZDc5NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy MGFhYTk3ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQpLsR0b4zsCBavhHBR6JzwlxpjDKPEG9jWicn0Y9lwg+jpXKeBrtad 0whfy6ZEbkkZYzYA0g+7NnfRQlTvok7aO0rdGFLLdeoo40K1KDVOJMcpTpjsunlu o0NHQ68VyoaI+JdNsRwIupB37ntHgqKHv3bA8DY2jBiF7+XUCiZ6QA//GM8+FWmZ 6z9XrpI2Wen5d8g/+Kl+J/8jr94lfP8ltIq1mg7udDOefGsJi5oPzcVyzh0xUTLR VfDpc+SBpGYcf4SZhvDmRSzx1fi94Z76i+zyEpFhlLOcfJSxvgsYrJaYdNmpi9D0 6qjniNYpbgrFH1vRomV81OA5KqEj5/s= -----END CERTIFICATE-----Generated at Tue Sep 29 04:26:15 2026 by rpki-client