$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5a4dcd96-5a98-3b82-9274-f275d3af742c.roa File: 5a4dcd96-5a98-3b82-9274-f275d3af742c.roa (raw, json) Hash identifier: d3LpjdLx6m92i0scgWFLkInBckL2iX5VBaHdqVpf39w= Subject key identifier: 64:46:4A:1E:2D:0A:72:34:6C:B6:DF:65:3B:BB:7A:84:2A:29:D7:9D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F41FDF5FE1CDD778071CE6240 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5a4dcd96-5a98-3b82-9274-f275d3af742c.roa Signing time: Tue 22 Sep 2026 08:54:42 +0000 ROA not before: Tue 22 Sep 2026 08:54:42 +0000 ROA not after: Mon 21 Dec 2026 09:54:42 +0000 asID: 20473 IP address blocks: 23.231.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:fd:f5:fe:1c:dd:77:80:71:ce:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 22 08:54:42 2026 GMT Not After : Dec 21 09:54:42 2026 GMT Subject: CN=e60b1a59-2c41-4410-ad2c-9ade5282e9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:45:97:5c:df:95:99:f4:94:8d:1c:8d:6b: ef:81:55:cd:2e:ac:79:05:33:e2:98:a5:a7:29:4f: 3e:c7:e6:03:95:66:3d:ab:81:ca:d5:f2:29:1a:b5: 6f:10:09:f4:fb:cb:39:ad:9a:ac:c5:14:f7:2e:ff: a8:87:b0:4f:8d:96:ee:09:37:ea:0e:ff:7a:c8:ee: 3c:0f:a5:6d:45:f0:cc:5c:5d:3a:2e:17:0b:48:8f: bf:1b:09:81:27:72:cd:86:46:64:ed:8a:50:b8:5d: 96:a1:3e:b8:4c:d7:e3:ce:ce:61:d4:31:3b:ff:3a: 3a:b9:3a:4b:a4:00:f4:c3:b6:1b:93:79:ac:98:cb: 1e:e6:4c:c6:7f:53:51:71:1b:bd:99:d9:8d:a7:e5: ad:43:dd:f9:16:70:9e:dd:51:36:6a:84:55:07:95: f9:35:31:68:8e:8c:86:40:d5:39:0d:9c:a9:0c:2f: 30:74:4e:82:3f:f3:b1:9d:36:f2:4d:3e:5a:5f:1a: 84:9a:ed:4d:e5:62:56:4f:00:a0:34:71:2c:3b:9c: ac:76:aa:0a:20:5b:f4:0c:f9:6a:14:17:4c:ef:8a: 91:b6:ac:6d:04:dd:62:aa:73:24:41:bf:ab:cb:a6: 07:0e:e8:6d:94:3d:52:02:6c:ca:80:d8:a2:c5:f1: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:46:4A:1E:2D:0A:72:34:6C:B6:DF:65:3B:BB:7A:84:2A:29:D7:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/5a4dcd96-5a98-3b82-9274-f275d3af742c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:79:f2:dc:ae:0a:1d:12:af:c4:0b:7c:0b:53:0c:46:1c:ec: b7:aa:7c:70:86:ed:df:4a:54:c0:d0:87:d5:24:23:79:d5:97: 45:67:6c:c7:02:ef:e6:84:72:a0:12:6b:49:92:0b:41:ee:13: c6:76:46:5a:d8:7b:b4:4c:8f:9e:9b:42:07:60:75:f0:72:40: 30:ae:87:78:5f:68:4e:89:c5:d0:41:94:75:27:00:17:b2:28: 66:6a:73:bc:d4:06:77:70:c9:1f:e9:fd:13:68:45:f8:72:ce: f7:18:21:71:48:91:dd:84:c3:dd:3c:b6:b8:d3:c7:4b:2f:50: 7f:0b:f8:22:44:2a:1c:62:da:bd:c8:76:64:b9:69:65:c7:3f: d4:9d:77:e3:29:09:a0:f1:00:13:ff:00:c1:9c:0f:9c:78:7c: 5a:60:82:2a:c1:b7:da:4d:b9:b3:cf:b9:de:de:bf:d0:0e:0d: 4d:32:b0:e0:eb:1a:c7:41:1d:d8:67:98:e2:5e:f5:16:41:79: c0:47:28:80:f0:11:04:56:fd:4f:cf:2a:5e:6e:87:4c:28:7d: 36:6f:38:68:0c:6c:2b:96:db:99:de:41:06:0e:a5:df:f3:32: 14:f6:15:97:99:b8:e9:f7:fe:d4:64:91:73:5b:f3:22:a9:f4: 6a:ab:a9:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9B/fX+HN13gHHOYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyMjA4NTQ0MloXDTI2MTIyMTA5NTQ0MlowLzEtMCsGA1UEAxMk ZTYwYjFhNTktMmM0MS00NDEwLWFkMmMtOWFkZTUyODJlOWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYBFl1zflZn0lI0cjWvvgVXNLqx5BTPimKWn KU8+x+YDlWY9q4HK1fIpGrVvEAn0+8s5rZqsxRT3Lv+oh7BPjZbuCTfqDv96yO48 D6VtRfDMXF06LhcLSI+/GwmBJ3LNhkZk7YpQuF2WoT64TNfjzs5h1DE7/zo6uTpL pAD0w7Ybk3msmMse5kzGf1NRcRu9mdmNp+WtQ935FnCe3VE2aoRVB5X5NTFojoyG QNU5DZypDC8wdE6CP/OxnTbyTT5aXxqEmu1N5WJWTwCgNHEsO5ysdqoKIFv0DPlq FBdM74qRtqxtBN1iqnMkQb+ry6YHDuhtlD1SAmzKgNiixfEcnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRGSh4tCnI0bLbfZTu7eoQqKdedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNWE0ZGNkOTYtNWE5OC0z YjgyLTkyNzQtZjI3NWQzYWY3NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+cgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ58tyuCh0Sr8QLfAtTDEYc7LeqfHCG7d9KVMDQh9UkI3nVl0VnbMcC 7+aEcqASa0mSC0HuE8Z2RlrYe7RMj56bQgdgdfByQDCuh3hfaE6JxdBBlHUnABey KGZqc7zUBndwyR/p/RNoRfhyzvcYIXFIkd2Ew908trjTx0svUH8L+CJEKhxi2r3I dmS5aWXHP9Sdd+MpCaDxABP/AMGcD5x4fFpggirBt9pNubPPud7ev9AODU0ysODr GsdBHdhnmOJe9RZBecBHKIDwEQRW/U/PKl5uh0wofTZvOGgMbCuW25neQQYOpd/z MhT2FZeZuOn3/tRkkXNb8yKp9GqrqaE= -----END CERTIFICATE-----Generated at Mon Sep 28 22:29:49 2026 by rpki-client