$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b128ada-fd5d-356c-a941-22456ef89c35.roa File: 0b128ada-fd5d-356c-a941-22456ef89c35.roa (raw, json) Hash identifier: l+agZY01en+8sXMwnJcYBPQGQBXOULEtGcbgjSg1v3k= Subject key identifier: 55:E9:37:18:A1:46:C7:4E:0C:0A:FE:22:41:C1:C2:91:2C:DC:A0:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E5506565449CC2E96BA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b128ada-fd5d-356c-a941-22456ef89c35.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.209.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:55:06:56:54:49:cc:2e:96:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=70114157-04dc-467a-af58-46cad265710f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b3:ab:e7:84:e6:f2:0b:89:b0:a7:c4:45:72: 89:0d:05:b4:b4:9e:17:d0:cf:77:ae:57:e8:bd:f2: 09:42:d5:2d:32:64:0d:a8:46:a7:94:27:2a:1a:b2: 16:95:c6:af:59:96:f8:91:00:f9:7c:1e:ca:dd:2e: 5c:7d:d9:fb:db:4a:c3:a5:de:a9:2e:3b:a8:cf:86: 16:ca:2c:34:b3:36:e2:f2:e0:98:10:c2:d4:b8:e8: 4a:be:b7:35:51:da:e4:09:4a:84:38:fc:28:10:d7: ea:e3:b5:cd:ee:34:40:6a:4b:d0:58:a6:08:e8:14: 51:a1:8c:8d:55:12:aa:d1:e3:08:f0:90:3a:cc:e8: c5:56:f1:41:bb:3d:9f:26:c1:58:f9:37:f6:71:0c: 22:9a:96:f9:b3:ea:93:de:89:e0:ac:56:0f:6e:76: 22:a8:01:3d:12:d1:b0:6c:cb:3b:7b:f3:5c:e2:4a: d1:b5:73:d8:f4:3a:ea:b7:52:4a:05:42:26:77:51: c3:09:5d:bd:72:f4:1d:a6:ef:5e:42:83:48:97:da: f0:84:fa:4d:51:dc:cd:8d:36:13:c7:06:94:da:5c: 98:60:d5:6c:6d:ab:d0:8b:bb:8e:93:6b:44:b2:54: 24:b4:10:3d:3b:d5:5c:35:77:5c:b3:0f:af:b1:9a: 02:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E9:37:18:A1:46:C7:4E:0C:0A:FE:22:41:C1:C2:91:2C:DC:A0:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b128ada-fd5d-356c-a941-22456ef89c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:9d:83:d0:f3:77:c5:16:b3:df:f4:90:8a:35:fd:49:58:25: 90:5e:89:96:76:70:b1:ee:18:ed:8a:cf:09:83:cf:7b:9f:86: 0b:0e:3e:81:f3:de:db:b4:65:8d:7f:45:49:89:22:4d:60:64: e1:a4:a0:82:e5:c8:ea:6f:d1:69:50:09:e1:fb:c4:fb:85:47: 6a:a3:27:ce:40:d3:d9:64:98:e3:bd:aa:c1:3a:8a:7d:f1:e3: 13:f7:88:a3:71:e3:30:b1:9b:93:94:8c:e9:9f:91:5c:28:39: c6:4d:d3:53:d9:ef:53:d0:fe:40:3e:e2:29:81:d4:9c:08:be: 9a:cd:11:c3:36:68:24:a6:1a:c5:24:80:83:3d:fd:d6:3b:fd: f2:9b:30:d8:ff:ba:c9:c6:1c:81:cf:22:5e:d5:78:59:79:fa: 88:a8:95:28:21:ed:4b:f1:90:b5:fc:c2:3c:f6:54:54:e9:8d: 38:fe:a0:f1:79:aa:0d:8d:05:0b:66:e3:ac:a5:f6:7b:49:ca: 4a:3a:85:ff:94:a8:d8:b6:97:dc:6f:02:2a:3e:ed:ce:06:a7: 9c:f3:60:85:31:00:90:cd:1a:6a:0b:5e:99:fb:d2:fb:e7:07: 18:73:31:36:c3:e7:20:81:7d:17:2a:ef:5d:cd:23:96:a1:76: b7:8e:1a:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JflUGVlRJzC6WugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzAxMTQxNTctMDRkYy00NjdhLWFmNTgtNDZjYWQyNjU3MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLOr54Tm8guJsKfERXKJDQW0tJ4X0M93rlfo vfIJQtUtMmQNqEanlCcqGrIWlcavWZb4kQD5fB7K3S5cfdn720rDpd6pLjuoz4YW yiw0szbi8uCYEMLUuOhKvrc1UdrkCUqEOPwoENfq47XN7jRAakvQWKYI6BRRoYyN VRKq0eMI8JA6zOjFVvFBuz2fJsFY+Tf2cQwimpb5s+qT3ongrFYPbnYiqAE9EtGw bMs7e/Nc4krRtXPY9Drqt1JKBUImd1HDCV29cvQdpu9eQoNIl9rwhPpNUdzNjTYT xwaU2lyYYNVsbavQi7uOk2tEslQktBA9O9VcNXdcsw+vsZoCyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXpNxihRsdODAr+IkHBwpEs3KBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGIxMjhhZGEtZmQ1ZC0z NTZjLWE5NDEtMjI0NTZlZjg5YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9EYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOdg9Dzd8UWs9/0kIo1/UlYJZBeiZZ2cLHuGO2KzwmDz3ufhgsOPoHz 3tu0ZY1/RUmJIk1gZOGkoILlyOpv0WlQCeH7xPuFR2qjJ85A09lkmOO9qsE6in3x 4xP3iKNx4zCxm5OUjOmfkVwoOcZN01PZ71PQ/kA+4imB1JwIvprNEcM2aCSmGsUk gIM9/dY7/fKbMNj/usnGHIHPIl7VeFl5+oiolSgh7UvxkLX8wjz2VFTpjTj+oPF5 qg2NBQtm46yl9ntJyko6hf+UqNi2l9xvAio+7c4Gp5zzYIUxAJDNGmoLXpn70vvn BxhzMTbD5yCBfRcq713NI5ahdreOGrk= -----END CERTIFICATE-----Generated at Sat Sep 26 04:26:12 2026 by rpki-client