$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24a2f576-65b4-35d1-979d-9071f575dab4.roa File: 24a2f576-65b4-35d1-979d-9071f575dab4.roa (raw, json) Hash identifier: fquaJB/2UaBnt0EGfeCCXY/Rwfku7TSAmaLRYPN+mJI= Subject key identifier: 43:CA:E8:95:B7:ED:FE:4A:34:1D:78:75:9B:0E:9A:49:04:23:D5:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985E4C4ADF251471E256A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24a2f576-65b4-35d1-979d-9071f575dab4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.209.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:e4:c4:ad:f2:51:47:1e:25:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7535779b-74ac-49c8-a5d6-2b10c2f1c08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1b:b6:cb:69:30:20:e4:fe:8d:cc:3d:7a:9a: 3d:f7:09:a3:0e:2c:be:46:51:1e:da:67:25:fc:a2: 5b:ca:7c:bd:7e:b5:10:58:53:29:7e:e7:55:ff:38: ae:90:fc:81:c4:2f:b1:52:d4:79:ce:0c:ad:0f:e3: 4c:69:f8:0b:0e:e5:a2:ec:fb:44:0c:47:fc:b9:2c: 2c:62:4a:29:88:8e:c7:41:1c:29:37:c0:66:0a:b8: b3:82:da:f3:ae:5c:c7:fc:b8:0f:89:cc:11:ae:07: 40:35:48:6a:a4:13:2a:8c:12:54:ad:fc:9e:5a:8a: bc:43:06:cd:a2:fc:74:8d:f3:f2:8c:3f:4c:11:d6: e3:9a:d2:e9:99:8c:be:4d:e1:57:98:a9:c9:a8:57: ea:43:75:8b:27:7e:96:d9:55:a6:f0:82:b3:9c:25: f3:1b:ab:5f:ed:17:2a:b5:6b:70:61:da:23:7f:a3: 89:f1:bd:d0:d9:ee:11:2c:05:61:2d:2a:14:ee:81: 5e:f4:0a:a6:89:01:81:c6:c5:8a:2b:d5:6c:eb:84: 57:60:b9:93:a4:8a:27:b3:69:c1:85:3b:df:60:a5: 06:18:d2:95:54:e6:ef:e7:66:52:a9:02:40:ae:ef: 95:68:43:1c:56:82:b9:02:4d:87:1f:2a:b5:89:2e: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CA:E8:95:B7:ED:FE:4A:34:1D:78:75:9B:0E:9A:49:04:23:D5:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/24a2f576-65b4-35d1-979d-9071f575dab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1f:c7:c3:80:24:23:a2:fe:cf:fb:9c:d6:b7:59:9f:28:5e: d0:7c:1d:f8:34:98:05:35:4c:9a:5a:05:92:d7:ce:5a:75:fc: 13:06:29:2a:e3:f7:77:e5:49:9e:70:9d:29:32:8a:25:8b:07: 61:2e:60:80:3a:85:8e:d4:82:5a:62:47:5d:26:eb:92:d7:9f: 7b:8c:d0:ab:52:de:52:6e:85:96:9f:7c:ee:89:08:c3:e8:93: 1b:f4:b5:e7:f2:4d:0f:ad:13:82:34:08:80:93:6a:b6:dc:7a: 8f:06:67:d4:a3:25:01:14:64:f8:fc:60:68:34:c1:d2:af:07: d5:cd:dd:ee:72:fb:a1:53:5f:d8:60:64:89:93:49:67:44:7a: 81:f5:d2:cf:58:e8:78:c4:5a:aa:6e:88:69:13:11:8e:c7:c1: 93:06:99:59:05:3f:a4:5a:1b:0d:27:67:9f:02:cd:18:f3:31: e5:55:36:ac:a8:99:e9:2b:bc:b4:ab:90:0b:d9:04:c6:c0:57: 85:64:a6:f6:b7:a0:0f:5c:ec:10:c2:ef:72:2e:cd:19:20:ec: 6b:03:11:f3:24:67:22:f3:fa:1d:6a:fc:c9:d1:02:b7:bf:71: a0:89:ab:de:2a:25:51:dd:93:79:43:9d:57:11:e4:85:e5:4e: 04:cd:4b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JheTErfJRRx4lagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzUzNTc3OWItNzRhYy00OWM4LWE1ZDYtMmIxMGMyZjFjMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRu2y2kwIOT+jcw9epo99wmjDiy+RlEe2mcl /KJbyny9frUQWFMpfudV/ziukPyBxC+xUtR5zgytD+NMafgLDuWi7PtEDEf8uSws YkopiI7HQRwpN8BmCrizgtrzrlzH/LgPicwRrgdANUhqpBMqjBJUrfyeWoq8QwbN ovx0jfPyjD9MEdbjmtLpmYy+TeFXmKnJqFfqQ3WLJ36W2VWm8IKznCXzG6tf7Rcq tWtwYdojf6OJ8b3Q2e4RLAVhLSoU7oFe9AqmiQGBxsWKK9Vs64RXYLmTpIons2nB hTvfYKUGGNKVVObv52ZSqQJAru+VaEMcVoK5Ak2HHyq1iS4j1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPK6JW37f5KNB14dZsOmkkEI9WiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjRhMmY1NzYtNjViNC0z NWQxLTk3OWQtOTA3MWY1NzVkYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsfx8OAJCOi/s/7nNa3WZ8oXtB8Hfg0mAU1TJpaBZLXzlp1/BMGKSrj 93flSZ5wnSkyiiWLB2EuYIA6hY7UglpiR10m65LXn3uM0KtS3lJuhZaffO6JCMPo kxv0tefyTQ+tE4I0CICTarbceo8GZ9SjJQEUZPj8YGg0wdKvB9XN3e5y+6FTX9hg ZImTSWdEeoH10s9Y6HjEWqpuiGkTEY7HwZMGmVkFP6RaGw0nZ58CzRjzMeVVNqyo mekrvLSrkAvZBMbAV4Vkpva3oA9c7BDC73IuzRkg7GsDEfMkZyLz+h1q/MnRAre/ caCJq94qJVHdk3lDnVcR5IXlTgTNS4s= -----END CERTIFICATE-----Generated at Sat Sep 26 22:18:53 2026 by rpki-client