$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04350592-9c28-3e67-92da-146d3ae7c149.roa File: 04350592-9c28-3e67-92da-146d3ae7c149.roa (raw, json) Hash identifier: +KoZfKXyN/JBg9bz+rWpQxJ5IH0iY1kxMqAov9ockmQ= Subject key identifier: 81:DB:04:D5:D0:D5:EC:D6:40:A6:16:F4:10:BB:93:E5:E1:5E:90:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D3742DD52D1B2DB1CDCC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04350592-9c28-3e67-92da-146d3ae7c149.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.54.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:37:42:dd:52:d1:b2:db:1c:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=173c3d41-e76f-4d9b-9e05-b58cae83dd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:db:bc:a4:1d:b9:64:cd:d1:ba:6d:b9:db: 0f:29:c2:6b:bb:5f:45:c1:c4:4a:49:ee:9f:19:d7: ab:47:25:59:76:b9:59:9a:61:91:a8:a6:94:59:cb: 6b:35:18:44:4e:d7:bc:85:1e:6a:88:c3:d9:3f:6b: 91:f7:42:a1:c9:87:76:f7:93:1d:d9:b5:10:fd:59: a9:6e:07:58:d5:4f:f7:40:d9:23:1b:64:ad:cd:6e: 64:03:d5:59:c4:6a:59:ff:0d:c7:e6:0f:41:50:ac: 08:4f:dd:e5:3c:82:be:77:74:fb:27:57:da:a2:14: c8:3a:6f:ab:bb:8f:7d:06:97:08:8c:63:4f:eb:c2: bb:87:e7:7f:1e:dc:54:7b:e4:7a:9b:5b:e5:6b:f8: 0f:85:cd:45:60:5b:85:13:49:26:59:d7:9c:f6:61: 9c:39:4f:ce:4e:93:f0:82:3d:80:8f:5c:cb:76:ea: 4f:fe:c6:02:c9:8c:38:e7:a6:91:cc:87:a6:d1:51: 6c:f7:1f:c2:b6:5a:3b:fe:79:0e:c2:d5:50:d5:bc: ba:bc:e8:44:30:44:b2:51:b0:20:96:ff:84:a9:de: 9d:63:0c:e0:72:f4:ae:11:83:85:c7:2c:a1:b6:4d: 86:b6:1f:07:f0:c0:2d:e2:a5:13:fd:f5:6d:34:9f: 1a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DB:04:D5:D0:D5:EC:D6:40:A6:16:F4:10:BB:93:E5:E1:5E:90:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04350592-9c28-3e67-92da-146d3ae7c149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:57:8b:e1:55:bc:95:21:59:6c:dc:55:e9:38:43:8f:d9:aa: e3:8d:72:b4:0f:21:1c:8e:2e:ee:42:13:df:31:33:f4:ea:1e: 1e:13:d0:97:a5:27:70:8d:b1:c4:45:a3:f0:c2:4b:d7:c1:8a: fd:d0:e8:89:8f:43:f8:ad:4c:62:0a:f9:e5:be:21:0b:da:61: 7d:5b:49:e9:d5:75:19:8b:e8:86:9f:f7:36:08:a2:34:f5:38: 49:76:16:75:6b:29:75:ef:9e:8a:25:b8:23:a0:2f:2d:f6:48: a1:f9:31:f1:9e:70:85:ac:67:0b:6d:db:3c:49:76:4b:89:31: 7a:ad:1e:bc:1a:20:d7:03:a4:0b:0d:b3:ae:0d:5f:21:75:78: cf:8a:0c:05:c4:86:b3:8d:a1:ad:34:80:f9:fd:e1:f4:10:76: 5f:48:20:64:f9:b0:0d:1a:23:99:82:13:c5:ac:71:dd:86:f2: 55:83:54:e4:f3:36:9b:07:95:f3:9c:48:ff:21:b4:2e:6f:4c: 83:a4:6a:e8:89:fd:9c:50:16:ed:97:35:f7:fc:d1:3f:4f:53: bb:e0:c7:89:12:7d:5b:00:05:39:20:02:6c:4d:73:b7:77:98: 72:54:33:e2:06:f4:9b:25:99:89:8c:c6:b2:42:b1:49:35:4f: 5a:c9:ff:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfTdC3VLRstsc3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTczYzNkNDEtZTc2Zi00ZDliLTllMDUtYjU4Y2FlODNkZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N3bvKQduWTN0bptudsPKcJru19FwcRKSe6f GderRyVZdrlZmmGRqKaUWctrNRhETte8hR5qiMPZP2uR90KhyYd295Md2bUQ/Vmp bgdY1U/3QNkjG2StzW5kA9VZxGpZ/w3H5g9BUKwIT93lPIK+d3T7J1faohTIOm+r u499BpcIjGNP68K7h+d/HtxUe+R6m1vla/gPhc1FYFuFE0kmWdec9mGcOU/OTpPw gj2Aj1zLdupP/sYCyYw456aRzIem0VFs9x/Ctlo7/nkOwtVQ1by6vOhEMESyUbAg lv+Eqd6dYwzgcvSuEYOFxyyhtk2Gth8H8MAt4qUT/fVtNJ8a+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHbBNXQ1ezWQKYW9BC7k+XhXpAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDQzNTA1OTItOWMyOC0z ZTY3LTkyZGEtMTQ2ZDNhZTdjMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFXi+FVvJUhWWzcVek4Q4/ZquONcrQPIRyOLu5CE98xM/TqHh4T0Jel J3CNscRFo/DCS9fBiv3Q6ImPQ/itTGIK+eW+IQvaYX1bSenVdRmL6Iaf9zYIojT1 OEl2FnVrKXXvnooluCOgLy32SKH5MfGecIWsZwtt2zxJdkuJMXqtHrwaINcDpAsN s64NXyF1eM+KDAXEhrONoa00gPn94fQQdl9IIGT5sA0aI5mCE8Wscd2G8lWDVOTz NpsHlfOcSP8htC5vTIOkauiJ/ZxQFu2XNff80T9PU7vgx4kSfVsABTkgAmxNc7d3 mHJUM+IG9JslmYmMxrJCsUk1T1rJ/44= -----END CERTIFICATE-----Generated at Thu Oct 8 19:22:08 2026 by rpki-client