$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24a6c8-c8b8-3e0c-80db-d94358f13532.roa File: 1e24a6c8-c8b8-3e0c-80db-d94358f13532.roa (raw, json) Hash identifier: sm20p66i03Ft44w9gFLvdzAZcszgkC5EurG2H78JNo8= Subject key identifier: F6:27:22:7D:4A:B6:F8:29:6E:D0:2E:92:45:6F:44:F5:01:B8:B9:B8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F005DA911C0CCEC09C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24a6c8-c8b8-3e0c-80db-d94358f13532.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.37.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f0:05:da:91:1c:0c:ce:c0:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=d79da8e7-b902-4a6c-9245-b663b364f602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:49:08:54:aa:f3:dd:e0:61:99:f9:53:c7: c2:13:9a:c1:f2:10:40:2b:fd:2a:a7:f1:ac:95:9b: 1b:ad:e2:cf:af:a1:07:4c:2a:28:a1:70:74:c2:93: f5:48:67:29:d4:67:7d:2f:87:20:f9:70:e1:81:b3: 77:84:bc:f3:79:60:2d:33:4f:bc:f8:3d:67:74:dc: 5b:ae:03:a8:63:11:2e:b8:17:dd:8a:1c:8c:38:99: 2e:e5:c3:cf:ba:ab:33:69:16:c5:93:cd:bc:4d:c8: a7:c4:61:6f:33:dd:d6:56:ee:ee:59:58:b4:43:17: cb:d9:68:4a:da:16:9d:a2:d2:07:e2:16:ed:19:b4: 65:b7:d6:69:cc:16:4a:f3:14:ec:d0:73:1d:2d:5e: 59:b9:26:c5:ee:b1:0a:cd:c3:9b:9f:7b:49:ad:c3: 60:94:fa:7a:65:88:e1:73:d5:15:41:95:7d:b9:30: a6:b5:87:e4:83:01:c2:a6:96:b1:44:a6:2e:d0:84: 71:45:21:52:19:09:24:86:9b:8c:32:69:a8:64:4d: 30:ce:81:15:b0:7b:eb:06:14:1d:84:a0:76:23:c1: dd:3f:92:44:a3:34:71:46:aa:95:f2:e4:b0:cc:03: 04:f4:58:e7:67:37:ba:56:5f:f5:c1:a1:58:85:c0: 40:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:27:22:7D:4A:B6:F8:29:6E:D0:2E:92:45:6F:44:F5:01:B8:B9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e24a6c8-c8b8-3e0c-80db-d94358f13532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:86:ed:ae:bf:00:83:20:3f:dc:ca:cd:b2:ea:90:54:93:8b: 7d:a9:82:34:34:07:b4:f8:66:69:dc:df:4b:d5:c7:89:68:0a: 20:bb:ef:0c:bd:fa:f4:0a:d4:de:35:08:d0:aa:48:c8:88:17: 0e:28:59:f7:ee:8a:b2:88:7a:03:96:62:aa:56:a7:90:0f:3b: bd:7a:03:58:6a:4f:f3:f1:52:ad:6a:ae:99:6f:02:e7:2d:22: e8:3e:59:93:5e:33:82:bd:85:f5:c4:43:a0:38:8a:39:93:32: 86:37:44:e1:a7:fb:10:d7:ca:41:de:5f:cc:68:04:20:80:42: 87:2c:b5:29:29:d3:08:85:43:95:fc:6b:9c:da:80:67:92:1f: b7:a5:a9:26:07:3b:b2:97:e0:03:d8:2a:3d:ac:fc:45:cd:f2: 4b:11:e2:48:ab:9e:bf:21:48:1f:16:7a:f3:0e:c4:7a:71:2f: 6a:18:e5:17:a2:1d:38:05:c9:fe:5d:f4:2b:7d:50:88:94:31: e9:1a:93:d5:44:c8:20:0a:a3:f0:04:ed:cf:2d:cb:b5:f5:e6: e9:8f:35:0b:50:21:c8:5d:15:d2:d1:35:5c:a5:d0:f2:d4:cf: a2:c6:55:1e:a5:d8:a5:03:f3:03:c5:0f:d1:5b:7c:8e:a2:a0: d2:ac:9a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/AF2pEcDM7AnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZDc5ZGE4ZTctYjkwMi00YTZjLTkyNDUtYjY2M2IzNjRmNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrtJCFSq893gYZn5U8fCE5rB8hBAK/0qp/Gs lZsbreLPr6EHTCoooXB0wpP1SGcp1Gd9L4cg+XDhgbN3hLzzeWAtM0+8+D1ndNxb rgOoYxEuuBfdihyMOJku5cPPuqszaRbFk828TcinxGFvM93WVu7uWVi0QxfL2WhK 2hadotIH4hbtGbRlt9ZpzBZK8xTs0HMdLV5ZuSbF7rEKzcObn3tJrcNglPp6ZYjh c9UVQZV9uTCmtYfkgwHCppaxRKYu0IRxRSFSGQkkhpuMMmmoZE0wzoEVsHvrBhQd hKB2I8HdP5JEozRxRqqV8uSwzAME9FjnZze6Vl/1waFYhcBAXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYnIn1KtvgpbtAukkVvRPUBuLm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUyNGE2YzgtYzhiOC0z ZTBjLTgwZGItZDk0MzU4ZjEzNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImG7a6/AIMgP9zKzbLqkFSTi32pgjQ0B7T4Zmnc30vVx4loCiC77wy9 +vQK1N41CNCqSMiIFw4oWffuirKIegOWYqpWp5APO716A1hqT/PxUq1qrplvAuct Iug+WZNeM4K9hfXEQ6A4ijmTMoY3ROGn+xDXykHeX8xoBCCAQocstSkp0wiFQ5X8 a5zagGeSH7elqSYHO7KX4APYKj2s/EXN8ksR4kirnr8hSB8WevMOxHpxL2oY5Rei HTgFyf5d9Ct9UIiUMekak9VEyCAKo/AE7c8ty7X15umPNQtQIchdFdLRNVyl0PLU z6LGVR6l2KUD8wPFD9FbfI6ioNKsmoM= -----END CERTIFICATE-----Generated at Thu Sep 24 23:54:33 2026 by rpki-client