$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/020859ea-b979-38d3-970f-b6e6cfa411a1.roa File: 020859ea-b979-38d3-970f-b6e6cfa411a1.roa (raw, json) Hash identifier: I0V3CM0gXx2kNdiCORRmxL2h5plFDOG5vFVd1+Nex/M= Subject key identifier: D7:BA:1C:54:12:1A:10:D6:0A:90:DC:4B:48:99:57:73:A5:7A:7D:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F498ADD45B09037E8F948A100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/020859ea-b979-38d3-970f-b6e6cfa411a1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.1.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:dd:45:b0:90:37:e8:f9:48:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=21fd61c0-6fa9-4631-bc50-e9ad93589096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3b:5b:67:53:1d:7d:db:b6:81:93:3a:64:ab: 1e:4c:e2:8f:04:43:0c:da:87:c7:be:03:64:33:fc: 8d:54:fc:3b:93:f7:1c:42:9b:62:5b:00:16:06:02: 79:83:84:85:27:9b:f4:bd:17:49:69:72:af:94:16: a6:4b:1c:58:3b:a8:d7:8e:24:6c:63:58:d4:08:b8: bd:57:fe:0f:77:93:b2:bc:4f:9d:69:a7:91:75:ab: 85:89:c8:fd:90:c8:72:c1:f7:92:35:89:02:51:b0: 22:fd:1c:47:8d:a7:14:b7:66:f9:c0:1a:e4:7b:e5: 9d:d8:d9:41:b3:3c:e1:93:c9:cc:a9:68:b5:62:97: 84:b3:4a:e7:c1:c6:c8:4f:b6:56:8f:57:a2:b7:da: 34:96:d7:b7:6b:fe:1e:94:28:c3:99:b9:8e:e8:b8: 63:6e:18:b5:6e:77:cd:60:04:32:3d:e3:92:2c:a7: 3d:b9:6e:f3:3d:ee:6f:d4:89:ec:82:37:36:61:dc: bc:a5:61:e2:70:c2:54:7e:06:75:33:60:7b:b8:77: 2b:08:af:44:ce:83:88:06:3f:a2:75:00:a4:84:59: 98:a0:d4:f7:aa:c5:e3:d9:2c:de:77:8c:77:c5:fe: c5:e8:e7:89:e7:7c:99:41:75:e9:3c:44:cb:69:25: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BA:1C:54:12:1A:10:D6:0A:90:DC:4B:48:99:57:73:A5:7A:7D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/020859ea-b979-38d3-970f-b6e6cfa411a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1e:24:e0:38:f7:0e:13:b4:85:15:80:d9:96:02:73:7a:54: 25:01:c0:c2:4d:a2:f1:86:50:af:ac:b9:43:5f:b3:e1:3b:a1: 3d:d0:d5:ae:51:74:e5:a9:69:4a:36:56:62:97:c6:cf:f8:12: 33:f5:b0:51:32:c9:bf:54:73:3c:53:33:70:49:0e:fb:5a:30: 31:cb:fd:9b:ad:5a:cf:76:6f:cd:5d:1e:4d:88:ba:f8:56:1c: 0a:f9:1b:41:cb:62:2c:4b:d6:5f:09:1e:43:46:b3:ea:46:ea: ad:0e:a8:a5:01:2c:bf:b6:c3:34:d8:21:23:fa:fd:94:a1:17: 7a:8c:e7:16:53:c2:6b:94:41:32:e8:56:a0:37:7b:ff:99:c6: cc:4f:f0:0c:d7:2e:53:b6:99:ac:e7:68:36:9d:f1:84:df:31: 2c:8e:68:c9:67:70:a4:d9:06:e0:21:44:70:93:49:ec:f2:e9: 19:28:c7:24:93:08:6d:d6:ba:c7:18:d0:54:ea:a7:bf:77:e3: e5:f8:3e:e6:e3:c0:74:f6:e0:90:66:02:12:41:3a:24:db:04: b8:14:a6:b6:0f:a7:dc:ef:6d:9a:0a:43:37:da:93:29:94:1f: a0:6c:a2:c5:8f:6a:71:6e:24:e1:89:ea:7f:36:8d:b5:ac:07: 4b:63:ef:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jit1FsJA36PlIoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjFmZDYxYzAtNmZhOS00NjMxLWJjNTAtZTlhZDkzNTg5MDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTtbZ1Mdfdu2gZM6ZKseTOKPBEMM2ofHvgNk M/yNVPw7k/ccQptiWwAWBgJ5g4SFJ5v0vRdJaXKvlBamSxxYO6jXjiRsY1jUCLi9 V/4Pd5OyvE+daaeRdauFicj9kMhywfeSNYkCUbAi/RxHjacUt2b5wBrke+Wd2NlB szzhk8nMqWi1YpeEs0rnwcbIT7ZWj1eit9o0lte3a/4elCjDmbmO6Lhjbhi1bnfN YAQyPeOSLKc9uW7zPe5v1Insgjc2Ydy8pWHicMJUfgZ1M2B7uHcrCK9EzoOIBj+i dQCkhFmYoNT3qsXj2Szed4x3xf7F6OeJ53yZQXXpPETLaSUSRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNe6HFQSGhDWCpDcS0iZV3Olen2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDIwODU5ZWEtYjk3OS0z OGQzLTk3MGYtYjZlNmNmYTQxMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUeJOA49w4TtIUVgNmWAnN6VCUBwMJNovGGUK+suUNfs+E7oT3Q1a5R dOWpaUo2VmKXxs/4EjP1sFEyyb9UczxTM3BJDvtaMDHL/ZutWs92b81dHk2IuvhW HAr5G0HLYixL1l8JHkNGs+pG6q0OqKUBLL+2wzTYISP6/ZShF3qM5xZTwmuUQTLo VqA3e/+ZxsxP8AzXLlO2maznaDad8YTfMSyOaMlncKTZBuAhRHCTSezy6RkoxyST CG3WuscY0FTqp7934+X4PubjwHT24JBmAhJBOiTbBLgUprYPp9zvbZoKQzfakymU H6BsosWPanFuJOGJ6n82jbWsB0tj750= -----END CERTIFICATE-----Generated at Sat Sep 26 18:51:27 2026 by rpki-client