$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1de10830-a371-3b5f-912d-ac79857cc608.roa File: 1de10830-a371-3b5f-912d-ac79857cc608.roa (raw, json) Hash identifier: kCp+hcX1kiN4f+31bg+yaUTILnT9mgh+++8VGWEW3TA= Subject key identifier: 3C:CA:66:A9:BD:9E:49:E5:3B:70:D4:64:9B:38:6C:A4:D9:03:2D:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F42782489877BE75F36C42180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1de10830-a371-3b5f-912d-ac79857cc608.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.48.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:24:89:87:7b:e7:5f:36:c4:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=611286dd-8fdf-42b7-aec6-eaab8c90ffa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:b8:08:76:a7:62:43:c8:5a:73:92:93:f5: 82:11:67:3d:fd:c5:20:31:d0:5a:2a:6b:13:e6:ae: 3f:01:b6:a5:0c:f9:6b:b7:b8:89:9b:36:59:92:de: de:59:ec:c3:14:e2:4e:0b:fc:56:45:6a:94:2a:a7: dd:5e:00:aa:41:b2:31:4f:64:0e:0f:05:0c:50:0b: 52:04:79:be:87:08:c3:3f:be:b2:61:05:19:9c:a1: 56:7b:6c:eb:ef:48:62:1e:d2:3f:7a:18:d3:b2:1c: b4:c3:32:4e:dd:d5:98:c5:2a:d0:f9:29:9e:9a:c6: 2e:31:d3:25:75:8b:e4:36:aa:e1:82:8c:66:38:38: de:c9:89:5b:c3:ca:d4:59:a5:e2:3e:1a:95:d0:10: 54:9b:37:2c:45:8e:8a:55:2a:7a:ad:f0:fd:1b:94: 8f:f5:54:ee:14:a8:18:11:bb:ca:7f:8d:81:e6:b9: 2c:80:9a:45:b2:8b:fe:c9:c4:7b:76:24:c9:05:aa: 67:cc:1a:a4:f0:8e:c4:55:66:cf:e1:6b:3d:dd:4c: 7a:42:97:21:e7:fa:25:31:6e:47:66:0b:3a:7b:0c: 74:c9:0f:14:19:ba:e2:59:d4:a0:3c:af:fe:99:40: c1:42:d1:7a:4c:49:67:85:79:3d:37:54:d2:34:84: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CA:66:A9:BD:9E:49:E5:3B:70:D4:64:9B:38:6C:A4:D9:03:2D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1de10830-a371-3b5f-912d-ac79857cc608.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2e:18:50:ca:54:e8:b5:64:48:42:98:80:c0:b1:93:8f:dd: fc:bb:3f:6f:f7:20:e7:90:9b:d2:b2:18:48:9c:7b:4d:3d:d0: ae:24:76:e4:76:4d:42:6e:e8:75:5e:02:a6:30:ac:5c:83:88: 07:20:88:df:bf:c8:59:db:23:68:10:e1:00:86:f7:57:8e:af: 40:bf:81:0e:00:71:b0:30:1f:e1:48:a3:3f:f5:f8:08:3d:3f: 1d:1d:05:95:0c:02:fe:de:d0:c6:db:3d:83:f4:cd:27:34:38: a1:e4:95:22:87:be:99:a3:69:dc:6a:ec:fb:df:08:72:52:3e: 52:f7:1f:e9:21:7b:56:87:24:da:a5:a0:0a:03:b3:bb:29:a2: 6f:f2:db:4b:bd:2a:36:b2:58:a8:83:96:ff:8c:5f:cf:c9:72: c4:14:52:f9:04:a1:29:31:52:e2:d3:9c:c3:e4:74:c9:cc:06: 80:9b:55:4e:21:3b:69:4f:52:6d:0e:c2:8e:83:3b:fb:bd:03: 9f:b7:15:54:db:1a:0f:68:89:1f:72:e4:a0:7e:3a:b9:50:2d: 0f:63:50:d6:9f:2b:0b:b5:38:39:b2:e1:da:8c:fb:01:ab:85: 6d:13:e1:ab:37:a8:06:1f:a7:14:18:0c:4c:d5:69:21:63:4c: 73:79:52:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCSJh3vnXzbEIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NjExMjg2ZGQtOGZkZi00MmI3LWFlYzYtZWFhYjhjOTBmZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwS4CHanYkPIWnOSk/WCEWc9/cUgMdBaKmsT 5q4/AbalDPlrt7iJmzZZkt7eWezDFOJOC/xWRWqUKqfdXgCqQbIxT2QODwUMUAtS BHm+hwjDP76yYQUZnKFWe2zr70hiHtI/ehjTshy0wzJO3dWYxSrQ+SmemsYuMdMl dYvkNqrhgoxmODjeyYlbw8rUWaXiPhqV0BBUmzcsRY6KVSp6rfD9G5SP9VTuFKgY EbvKf42B5rksgJpFsov+ycR7diTJBapnzBqk8I7EVWbP4Ws93Ux6Qpch5/olMW5H Zgs6ewx0yQ8UGbriWdSgPK/+mUDBQtF6TElnhXk9N1TSNISXXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzKZqm9nknlO3DUZJs4bKTZAy3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWRlMTA4MzAtYTM3MS0z YjVmLTkxMmQtYWM3OTg1N2NjNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYuGFDKVOi1ZEhCmIDAsZOP3fy7P2/3IOeQm9KyGEice0090K4kduR2 TUJu6HVeAqYwrFyDiAcgiN+/yFnbI2gQ4QCG91eOr0C/gQ4AcbAwH+FIoz/1+Ag9 Px0dBZUMAv7e0MbbPYP0zSc0OKHklSKHvpmjadxq7PvfCHJSPlL3H+khe1aHJNql oAoDs7spom/y20u9KjayWKiDlv+MX8/JcsQUUvkEoSkxUuLTnMPkdMnMBoCbVU4h O2lPUm0Owo6DO/u9A5+3FVTbGg9oiR9y5KB+OrlQLQ9jUNafKwu1ODmy4dqM+wGr hW0T4as3qAYfpxQYDEzVaSFjTHN5UkE= -----END CERTIFICATE-----Generated at Sat Sep 26 07:00:14 2026 by rpki-client