$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0642e6f0-f027-34ac-a222-22c6dfaa4897.roa File: 0642e6f0-f027-34ac-a222-22c6dfaa4897.roa (raw, json) Hash identifier: NT/KTKXt4L6eM/d5IwWb1u2VkyncA91FrSfFR58UKuc= Subject key identifier: 34:EE:4D:69:96:FA:A8:83:40:A7:D0:34:18:5E:C1:49:12:18:0F:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD733866B8D129B46D5280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0642e6f0-f027-34ac-a222-22c6dfaa4897.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.45.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:73:38:66:b8:d1:29:b4:6d:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=320df2bd-e23b-4f95-ad2e-e79fd9645c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:e1:b4:78:e1:f0:97:43:57:c7:2c:c3:e4: 2b:4f:ed:66:f3:92:b7:a6:d5:e3:80:31:f9:f6:ab: 05:fd:ea:46:29:85:57:3f:cf:d2:5b:ef:87:51:92: a3:ef:68:ab:ec:e4:40:2b:98:e3:57:28:43:a0:5e: 52:bf:e5:42:48:6f:89:cc:75:78:ae:0e:b6:e1:b6: ee:ef:be:85:f4:e4:4a:d4:22:06:31:58:b9:05:92: 69:a4:a5:b8:29:4e:41:3a:98:c8:49:30:88:af:f4: 74:35:50:48:4c:8c:9d:9f:99:44:d9:67:f4:11:88: 09:ee:6f:49:5d:34:a2:bf:2d:8f:40:ca:16:f3:94: 7e:c1:53:b2:54:81:78:00:3d:01:b5:ae:7e:c3:48: e3:fd:2e:3c:9e:47:02:1f:88:67:bd:c2:90:51:b0: 68:75:8c:a6:5c:35:01:31:2f:39:a8:0f:35:fa:d8: 00:42:c3:f7:8c:c4:1d:66:38:08:93:e2:f9:aa:d4: 6b:76:c8:07:76:c4:d7:11:cf:2b:b4:ce:ff:5d:ef: 4c:4b:b1:ad:4f:76:7a:29:ca:ac:b5:1d:75:d8:ad: 7e:30:a3:f8:54:3e:78:8d:ae:bc:c4:d7:ce:73:3d: bb:82:92:34:82:12:b4:8d:9b:e9:cd:2b:0b:b3:b8: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EE:4D:69:96:FA:A8:83:40:A7:D0:34:18:5E:C1:49:12:18:0F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0642e6f0-f027-34ac-a222-22c6dfaa4897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:be:48:05:dc:30:dc:24:50:f9:3a:23:fa:1a:b9:d8:c4:36: 3e:65:42:21:de:ba:65:c0:88:6d:df:c2:f0:62:9e:21:a4:14: 97:68:19:24:e4:14:ab:5e:f4:0e:f3:7e:a5:44:48:aa:e7:a5: 08:c4:8d:20:10:8d:da:98:6e:ee:44:9b:a9:f7:aa:a3:7d:0d: 73:39:9e:f1:17:f4:28:9c:0c:9c:58:08:87:5b:7a:ec:56:d9: 85:8b:4b:ab:65:71:f1:84:b8:c8:76:d5:e6:cc:78:3f:11:94: 63:3e:43:60:4c:b8:40:4f:f0:6d:7d:80:75:4a:0d:dd:d3:77: 61:00:87:41:98:52:f2:93:7b:ce:8f:39:8a:74:dc:fd:ce:c9: 12:98:49:95:bc:9f:29:80:66:dd:60:f4:67:7f:7b:c6:46:25: 24:2a:3d:82:12:48:07:d0:24:31:5f:a7:3e:a3:2d:e8:37:ae: 89:f7:24:9d:42:53:21:5b:11:2d:03:96:77:02:b1:cd:cd:08: 4a:cf:39:90:09:51:23:51:91:bf:91:bc:80:5b:51:8e:5e:b5: e3:fd:99:18:29:18:6b:89:88:63:bd:fb:14:70:fc:b5:18:46: 32:86:d9:d9:22:af:d1:72:80:55:69:45:9c:b9:6a:7c:95:8c: b7:41:4a:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rXM4ZrjRKbRtUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MzIwZGYyYmQtZTIzYi00Zjk1LWFkMmUtZTc5ZmQ5NjQ1YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkvhtHjh8JdDV8csw+QrT+1m85K3ptXjgDH5 9qsF/epGKYVXP8/SW++HUZKj72ir7ORAK5jjVyhDoF5Sv+VCSG+JzHV4rg624bbu 776F9ORK1CIGMVi5BZJppKW4KU5BOpjISTCIr/R0NVBITIydn5lE2Wf0EYgJ7m9J XTSivy2PQMoW85R+wVOyVIF4AD0Bta5+w0jj/S48nkcCH4hnvcKQUbBodYymXDUB MS85qA81+tgAQsP3jMQdZjgIk+L5qtRrdsgHdsTXEc8rtM7/Xe9MS7GtT3Z6Kcqs tR112K1+MKP4VD54ja68xNfOcz27gpI0ghK0jZvpzSsLs7iNbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTuTWmW+qiDQKfQNBhewUkSGA/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY0MmU2ZjAtZjAyNy0z NGFjLWEyMjItMjJjNmRmYWE0ODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi+SAXcMNwkUPk6I/oaudjENj5lQiHeumXAiG3fwvBiniGkFJdoGSTk FKte9A7zfqVESKrnpQjEjSAQjdqYbu5Em6n3qqN9DXM5nvEX9CicDJxYCIdbeuxW 2YWLS6tlcfGEuMh21ebMeD8RlGM+Q2BMuEBP8G19gHVKDd3Td2EAh0GYUvKTe86P OYp03P3OyRKYSZW8nymAZt1g9Gd/e8ZGJSQqPYISSAfQJDFfpz6jLeg3ron3JJ1C UyFbES0DlncCsc3NCErPOZAJUSNRkb+RvIBbUY5eteP9mRgpGGuJiGO9+xRw/LUY RjKG2dkir9FygFVpRZy5anyVjLdBSq0= -----END CERTIFICATE-----Generated at Mon Sep 28 06:54:57 2026 by rpki-client