$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1296d129-871e-32d7-b97e-725fe3b5db2f.roa File: 1296d129-871e-32d7-b97e-725fe3b5db2f.roa (raw, json) Hash identifier: nr+Bblzn0/+bwsDAvbqR/QLJ8nIt+8G0PtYyjWFnYFg= Subject key identifier: 3A:5E:B6:AD:4F:ED:86:B5:F8:02:04:EE:62:FE:0B:22:61:88:02:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F331D2531EA3DA71C74057000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1296d129-871e-32d7-b97e-725fe3b5db2f.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.61.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:25:31:ea:3d:a7:1c:74:05:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=c307a43b-10ed-4644-803a-21e3fd45933b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:77:7d:87:a5:bd:e2:41:c2:d1:47:2b:34: dc:c3:38:47:9b:a6:6f:6a:2a:fd:53:8b:2c:5c:01: 87:ce:6b:62:d2:6f:56:c3:8b:f1:8a:6c:00:51:be: c5:69:77:c5:a6:4d:cb:42:91:f1:1a:19:c6:16:ab: 74:df:a3:87:62:1b:71:f1:a5:6e:fd:2f:b6:2c:d9: 4a:d4:08:18:b5:38:20:ef:49:fa:57:b6:bc:03:57: 34:e5:0f:44:41:ee:92:d8:58:4f:4a:ed:77:59:bb: 8e:2e:25:bb:6d:58:76:62:23:29:f1:4c:9c:78:33: 9e:9a:24:cb:f9:f6:36:44:ab:86:a5:9a:42:0e:cc: ed:68:bc:6d:2a:11:70:70:36:58:8e:97:80:fd:bb: b1:8c:c1:7e:25:0f:30:94:14:8b:f7:d5:8c:02:c0: dd:2c:e3:97:aa:35:98:7d:14:58:5c:6d:c7:e9:3f: 47:84:fc:fe:e7:87:6d:63:94:6c:61:f6:94:49:b4: 63:13:4a:a8:a4:34:0e:3a:df:1d:81:db:32:36:8d: e8:26:f7:21:68:cf:72:11:ce:c9:c6:cb:b2:66:61: c1:35:e6:de:0d:32:d3:ed:80:c3:88:26:e1:23:87: 2a:57:fa:f2:46:96:b0:33:0c:3f:e4:4f:64:a3:ba: 9b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5E:B6:AD:4F:ED:86:B5:F8:02:04:EE:62:FE:0B:22:61:88:02:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1296d129-871e-32d7-b97e-725fe3b5db2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.61.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a0:45:22:1a:96:df:21:cc:fc:73:48:1f:32:44:4e:04:eb: 04:8e:cd:58:a6:96:65:51:3a:35:b8:5a:0f:d5:80:b9:36:79: 69:f9:6c:81:7e:62:44:82:ec:d7:83:bd:31:fc:f3:8b:53:75: d5:bb:a6:77:33:42:78:6b:f0:67:76:44:d3:30:ca:f9:1c:5c: e5:2c:2a:72:cf:ec:b4:39:52:a4:7b:4d:a6:64:e2:32:00:6b: bc:a3:43:1e:f1:24:3c:62:ea:d6:57:1a:96:cf:bb:88:d9:19: da:72:79:12:0e:f3:15:12:79:5a:87:55:6c:fc:df:e0:48:b8: 84:6e:86:47:fb:ff:e4:ca:bb:e3:e6:5d:63:f3:7a:22:49:d9: 61:b8:06:c3:42:66:4b:4b:e9:b5:fe:28:21:df:d3:fb:da:33: ca:d5:4a:72:a3:c7:66:d5:e6:f1:fa:7d:04:35:90:27:8a:7d: 58:06:39:a6:9d:4a:dc:a1:95:fc:b8:eb:02:8a:6d:85:d8:65: ee:1e:a4:54:b6:4a:ce:1d:97:78:4a:65:56:c8:20:4d:6b:91: 2e:7f:f9:32:c8:bc:ca:3d:16:d1:1e:f8:21:9f:30:ca:7e:92: 50:7d:a6:de:a5:8c:6e:1e:30:e6:1f:c3:68:39:fe:7f:71:1f: 73:6f:0d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSUx6j2nHHQFcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk YzMwN2E0M2ItMTBlZC00NjQ0LTgwM2EtMjFlM2ZkNDU5MzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphJ3fYelveJBwtFHKzTcwzhHm6Zvair9U4ss XAGHzmti0m9Ww4vximwAUb7FaXfFpk3LQpHxGhnGFqt036OHYhtx8aVu/S+2LNlK 1AgYtTgg70n6V7a8A1c05Q9EQe6S2FhPSu13WbuOLiW7bVh2YiMp8UyceDOemiTL +fY2RKuGpZpCDsztaLxtKhFwcDZYjpeA/buxjMF+JQ8wlBSL99WMAsDdLOOXqjWY fRRYXG3H6T9HhPz+54dtY5RsYfaUSbRjE0qopDQOOt8dgdsyNo3oJvchaM9yEc7J xsuyZmHBNebeDTLT7YDDiCbhI4cqV/ryRpawMww/5E9ko7qbqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpetq1P7Ya1+AIE7mL+CyJhiAK+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTI5NmQxMjktODcxZS0z MmQ3LWI5N2UtNzI1ZmUzYjVkYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz3KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2gRSIalt8hzPxzSB8yRE4E6wSOzVimlmVROjW4Wg/VgLk2eWn5bIF+ YkSC7NeDvTH884tTddW7pnczQnhr8Gd2RNMwyvkcXOUsKnLP7LQ5UqR7TaZk4jIA a7yjQx7xJDxi6tZXGpbPu4jZGdpyeRIO8xUSeVqHVWz83+BIuIRuhkf7/+TKu+Pm XWPzeiJJ2WG4BsNCZktL6bX+KCHf0/vaM8rVSnKjx2bV5vH6fQQ1kCeKfVgGOaad Styhlfy46wKKbYXYZe4epFS2Ss4dl3hKZVbIIE1rkS5/+TLIvMo9FtEe+CGfMMp+ klB9pt6ljG4eMOYfw2g5/n9xH3NvDcE= -----END CERTIFICATE-----Generated at Thu Sep 24 19:22:50 2026 by rpki-client