$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e1128eb-cb6f-3f3d-a0f4-dcbd38314d01.roa File: 1e1128eb-cb6f-3f3d-a0f4-dcbd38314d01.roa (raw, json) Hash identifier: irNnWIV/UDAXExOMtj9UStU8d17mvUn0J58Zx9qafSQ= Subject key identifier: 96:E5:1E:0B:15:6E:7A:8C:7C:6F:C8:40:B5:E8:21:C5:8B:1A:EB:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985E77C2A46126673D16640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e1128eb-cb6f-3f3d-a0f4-dcbd38314d01.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.210.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:e7:7c:2a:46:12:66:73:d1:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd994ea9-179e-48a4-8de0-5b589b2a29c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:8c:5a:9e:76:d2:37:96:ee:6c:2f:88:4a: 82:3b:80:d4:7e:d7:85:b3:81:0c:b1:ff:3c:24:b4: 6f:32:65:52:a9:2c:0f:86:e2:61:67:91:ce:d3:eb: da:02:aa:91:e9:a3:f8:b4:2b:64:d0:dd:3e:d5:e7: 4c:d6:8f:ff:2e:e5:7a:ca:be:6b:b6:47:80:89:68: 71:12:2c:53:09:37:ad:45:30:d9:97:17:f6:76:69: 4b:ca:87:81:df:c3:20:42:57:59:c3:1f:a1:6c:6e: 51:0b:9f:15:77:d0:cd:5f:89:02:ed:8a:25:92:5f: 8e:04:76:c3:0a:fe:99:2e:3f:3c:a3:65:69:16:23: c4:95:05:e8:44:55:d3:b3:c8:83:1a:20:24:4b:7b: 6d:0f:31:0c:f9:70:fe:87:bb:7d:4d:c2:52:37:34: 6f:d8:3c:4e:35:70:7b:76:71:3b:c2:dd:be:8d:f2: 2f:2b:ed:58:a2:d3:68:d3:42:a6:f9:bd:a5:7f:70: 09:ac:45:fe:f6:3e:a5:af:ac:71:7d:aa:b3:c7:c4: 31:0e:b3:79:23:61:c3:ba:03:2b:5a:5a:b8:f1:9d: 9e:91:e2:ee:8d:68:3a:de:1f:cf:43:da:18:76:4f: 25:a3:94:6a:7d:a9:80:67:25:29:76:91:7d:6d:8d: 6f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E5:1E:0B:15:6E:7A:8C:7C:6F:C8:40:B5:E8:21:C5:8B:1A:EB:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e1128eb-cb6f-3f3d-a0f4-dcbd38314d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2c:05:1b:18:8b:72:62:07:23:8c:13:f8:5e:e6:bf:d3:65: 00:95:fc:0c:15:83:d6:c3:49:e1:4e:de:4e:2c:d5:f8:52:31: 36:ee:ac:d9:e0:a7:51:b6:f7:c4:95:e4:14:31:09:88:22:a8: 6e:a6:c4:25:02:d6:81:bc:94:09:c2:fe:36:7d:09:87:9b:2d: 39:ef:13:84:ed:ad:64:54:85:7b:51:dd:e7:80:3d:80:29:5b: a3:25:34:ac:08:0e:b1:5e:d6:fa:90:6e:25:51:f7:db:36:99: 38:53:ce:8b:f5:69:9f:a5:e8:a6:aa:56:0e:8f:3e:22:22:84: d5:d2:a2:d7:82:8b:db:2f:0b:0d:cb:9a:3d:29:7b:87:ce:76: 94:fb:b3:6d:32:9a:ca:08:6f:61:e6:9c:ee:5f:8b:88:db:d5: 55:cb:d5:a6:63:32:49:02:9f:11:89:73:58:78:0b:c9:6e:ce: f7:7e:98:b9:27:7f:e9:99:a1:b1:c9:ad:92:a0:a9:19:96:06: 20:a4:aa:db:b5:fb:fd:00:50:72:7c:c0:4c:3d:8e:f3:8d:0c: d9:d4:7d:87:33:41:76:22:b9:16:8c:f0:67:dc:69:bf:1b:d7: 65:ad:5f:cd:92:2d:92:b9:57:67:ff:de:37:0a:07:47:a2:19: c7:83:40:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhed8KkYSZnPRZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ5OTRlYTktMTc5ZS00OGE0LThkZTAtNWI1ODliMmEyOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAiMWp520jeW7mwviEqCO4DUfteFs4EMsf88 JLRvMmVSqSwPhuJhZ5HO0+vaAqqR6aP4tCtk0N0+1edM1o//LuV6yr5rtkeAiWhx EixTCTetRTDZlxf2dmlLyoeB38MgQldZwx+hbG5RC58Vd9DNX4kC7Yolkl+OBHbD Cv6ZLj88o2VpFiPElQXoRFXTs8iDGiAkS3ttDzEM+XD+h7t9TcJSNzRv2DxONXB7 dnE7wt2+jfIvK+1YotNo00Km+b2lf3AJrEX+9j6lr6xxfaqzx8QxDrN5I2HDugMr Wlq48Z2ekeLujWg63h/PQ9oYdk8lo5RqfamAZyUpdpF9bY1v0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJblHgsVbnqMfG/IQLXoIcWLGuvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUxMTI4ZWItY2I2Zi0z ZjNkLWEwZjQtZGNiZDM4MzE0ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9IkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADksBRsYi3JiByOME/he5r/TZQCV/AwVg9bDSeFO3k4s1fhSMTburNng p1G298SV5BQxCYgiqG6mxCUC1oG8lAnC/jZ9CYebLTnvE4TtrWRUhXtR3eeAPYAp W6MlNKwIDrFe1vqQbiVR99s2mThTzov1aZ+l6KaqVg6PPiIihNXSoteCi9svCw3L mj0pe4fOdpT7s20ymsoIb2HmnO5fi4jb1VXL1aZjMkkCnxGJc1h4C8luzvd+mLkn f+mZobHJrZKgqRmWBiCkqtu1+/0AUHJ8wEw9jvONDNnUfYczQXYiuRaM8Gfcab8b 12WtX82SLZK5V2f/3jcKB0eiGceDQAg= -----END CERTIFICATE-----Generated at Fri Sep 25 14:27:48 2026 by rpki-client