$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34f4ba50-b50c-3f64-a64b-31107bae15d4.roa File: 34f4ba50-b50c-3f64-a64b-31107bae15d4.roa (raw, json) Hash identifier: GovE6MoM6vHkreiS1/gGww8aoDd/mAxis8zjoV6TAig= Subject key identifier: 07:7B:E2:01:70:59:54:E4:A5:0A:ED:3E:72:B6:38:87:2A:52:57:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D5397A7091396BB84C400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34f4ba50-b50c-3f64-a64b-31107bae15d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.62.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:53:97:a7:09:13:96:bb:84:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7f8912d-e056-4b24-95d6-33bbceba6941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:18:31:d5:77:8b:4e:b0:aa:c9:5a:f8:35:2c: 39:44:18:34:5f:05:06:6e:fb:ec:c5:c8:a7:ba:fd: 44:6a:3d:72:c5:58:81:48:67:9e:51:ef:03:c5:e9: 68:67:e5:7c:74:bd:b1:a1:65:11:7c:7b:8a:6d:de: a6:bb:7d:95:4d:67:73:44:51:be:5f:f1:12:45:3c: 61:84:84:57:58:09:34:15:51:f6:ce:2a:9f:01:8d: 00:90:b4:e9:dd:e1:15:b1:e6:96:54:b3:9c:e6:3e: fb:a6:27:98:5c:2d:53:b2:03:52:7a:23:bd:c8:07: 30:66:9c:6a:3d:77:a5:49:f6:a3:d1:03:9f:a2:fc: f4:e9:e1:dc:bb:d9:1d:55:b8:01:4d:e2:c9:1e:12: 0d:bf:49:ab:96:c8:79:38:5b:5c:c0:f4:0f:87:bd: b1:6c:df:62:53:23:61:d3:13:2c:23:ec:ae:9a:db: 29:38:a2:fe:0c:9c:dc:ec:59:8e:e5:66:32:cf:ce: fb:70:16:01:12:3a:12:29:48:e4:f5:3c:2a:5c:b9: aa:64:a1:49:dc:1f:f3:00:d3:11:0d:81:6c:5c:d4: 77:eb:3b:2f:40:15:26:82:01:bb:6e:44:82:62:11: 72:08:e4:69:a7:26:60:12:74:06:ef:fb:5d:f7:04: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7B:E2:01:70:59:54:E4:A5:0A:ED:3E:72:B6:38:87:2A:52:57:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34f4ba50-b50c-3f64-a64b-31107bae15d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a1:b7:df:84:5c:b7:29:63:b8:67:8c:63:ec:04:26:e8:c1: d2:30:d2:1d:e0:50:55:9b:e4:21:38:55:43:0d:59:6e:12:e8: 70:34:58:4b:ae:9b:cf:63:61:e4:78:0f:01:42:21:aa:95:e8: 74:27:33:bf:39:a3:06:09:bf:c7:b5:40:26:8d:59:b7:ea:35: 8e:19:66:0e:d8:4f:54:b0:5f:14:2d:b0:06:63:0b:c7:94:96: df:5b:fe:9d:e7:88:f2:85:6c:c5:79:76:d6:16:c7:88:fe:39: 11:e3:cb:a1:94:f1:12:07:59:45:46:6a:81:fa:4c:48:3c:57: ea:b0:c4:af:1e:d0:08:2e:c2:9c:1f:fe:50:1e:fd:e5:c7:c5: 13:7a:ac:b6:8f:32:f9:8c:bf:92:29:4c:5e:a2:e2:36:6b:11: 57:61:cd:5f:bd:31:e9:15:f0:b7:bd:f7:a1:87:8c:96:d3:8f: 45:24:9b:22:76:84:87:85:bf:05:6e:a6:cf:95:5f:b6:f2:bd: b2:32:c9:5f:48:c7:f0:c0:2e:28:e3:9a:bc:5f:e0:19:45:81: 05:69:c9:0d:9c:19:a1:52:5f:f5:0d:07:c7:dd:43:22:9d:ae: e1:e5:1c:74:15:5d:97:07:4f:c7:8e:d7:76:e4:dd:eb:6c:91: c0:16:0a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfVOXpwkTlruExAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDdmODkxMmQtZTA1Ni00YjI0LTk1ZDYtMzNiYmNlYmE2OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxgx1XeLTrCqyVr4NSw5RBg0XwUGbvvsxcin uv1Eaj1yxViBSGeeUe8DxeloZ+V8dL2xoWURfHuKbd6mu32VTWdzRFG+X/ESRTxh hIRXWAk0FVH2ziqfAY0AkLTp3eEVseaWVLOc5j77pieYXC1TsgNSeiO9yAcwZpxq PXelSfaj0QOfovz06eHcu9kdVbgBTeLJHhINv0mrlsh5OFtcwPQPh72xbN9iUyNh 0xMsI+yumtspOKL+DJzc7FmO5WYyz877cBYBEjoSKUjk9TwqXLmqZKFJ3B/zANMR DYFsXNR36zsvQBUmggG7bkSCYhFyCORppyZgEnQG7/td9wRM3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAd74gFwWVTkpQrtPnK2OIcqUlf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzRmNGJhNTAtYjUwYy0z ZjY0LWE2NGItMzExMDdiYWUxNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSht9+EXLcpY7hnjGPsBCbowdIw0h3gUFWb5CE4VUMNWW4S6HA0WEuu m89jYeR4DwFCIaqV6HQnM785owYJv8e1QCaNWbfqNY4ZZg7YT1SwXxQtsAZjC8eU lt9b/p3niPKFbMV5dtYWx4j+ORHjy6GU8RIHWUVGaoH6TEg8V+qwxK8e0Aguwpwf /lAe/eXHxRN6rLaPMvmMv5IpTF6i4jZrEVdhzV+9MekV8Le996GHjJbTj0UkmyJ2 hIeFvwVups+VX7byvbIyyV9Ix/DALijjmrxf4BlFgQVpyQ2cGaFSX/UNB8fdQyKd ruHlHHQVXZcHT8eO13bk3etskcAWCmQ= -----END CERTIFICATE-----Generated at Sat Sep 26 00:06:07 2026 by rpki-client