$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3617dcdb-5ac2-38e8-8abd-f0bd63fcfa56.roa File: 3617dcdb-5ac2-38e8-8abd-f0bd63fcfa56.roa (raw, json) Hash identifier: l+qgkSLmTuUJbQl8IA6PR9Cvyl00YZGTv2jXC2uNC4I= Subject key identifier: 15:38:B1:1E:76:2D:F1:B0:C3:10:3C:57:DD:90:A2:8B:38:9C:4E:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985AB29E24AC2BCAA35CC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3617dcdb-5ac2-38e8-8abd-f0bd63fcfa56.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.197.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:ab:29:e2:4a:c2:bc:aa:35:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3d670830-8e5c-433c-a338-61c4aa63215f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7c:c3:6a:56:23:85:bf:48:bd:86:8a:16:42: 94:f6:88:e9:b1:10:20:19:c6:09:65:09:b9:af:1d: 82:a8:de:4b:95:51:49:4a:b0:dc:6d:f1:0b:48:d4: 4a:b5:71:e0:9e:b2:55:1c:ed:55:5c:c2:80:5e:83: df:9a:9e:d7:40:0c:ce:ad:d6:ae:7e:79:89:0c:d4: 22:aa:04:bd:8b:68:ea:ab:d3:a0:64:d0:4a:9b:12: 97:23:44:63:a6:13:54:e7:de:62:dc:e9:9d:66:f1: 89:4c:51:ee:d8:85:f3:fb:82:83:43:db:b4:a9:68: 08:ff:db:62:9c:c6:84:3b:16:96:7b:04:30:4e:d2: 17:b1:71:87:c7:35:6b:63:56:f0:db:aa:b6:1a:ff: 62:3d:71:45:41:9f:a2:a7:79:21:e0:03:4b:36:02: dd:d8:c1:0d:68:70:1b:ac:2f:d9:25:e8:85:65:75: 3b:81:72:58:00:ab:5f:bc:6c:a8:b5:ad:58:ee:f6: aa:48:bc:28:50:84:de:58:9a:02:cb:42:64:d8:95: f9:35:40:5c:b9:1f:82:d9:55:77:cd:d7:0a:40:24: e7:3c:44:e0:eb:bc:ec:17:7e:12:c1:b8:09:04:22: 99:ea:93:19:34:60:c1:a2:12:ad:36:58:d4:6c:9e: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:38:B1:1E:76:2D:F1:B0:C3:10:3C:57:DD:90:A2:8B:38:9C:4E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3617dcdb-5ac2-38e8-8abd-f0bd63fcfa56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4b:85:e6:64:dc:02:32:c0:86:66:cc:cf:66:bb:fe:e0:31: f9:b2:97:e2:b9:8f:dc:86:10:63:ea:91:5d:5b:8f:b8:ef:a8: 54:e8:1e:1b:df:29:c3:7e:66:9a:22:47:c8:0c:0a:58:b5:26: 92:92:2f:c6:fd:80:19:5a:80:e9:b5:13:e2:e0:00:c6:47:d3: e4:83:b9:41:b8:9b:34:bf:bc:aa:f4:34:b4:3f:07:1b:52:08: 84:62:03:80:38:8c:d8:fc:45:96:3c:56:50:be:d0:82:13:bb: eb:43:6f:5d:e3:3c:2f:83:15:c9:45:0a:78:c7:f9:c0:59:43: 54:17:e6:23:12:92:62:61:c4:1f:2f:ca:f8:3e:ed:72:69:dc: 83:5d:bf:47:f8:7d:d6:59:5c:be:f3:e1:90:d4:d8:b1:59:32: 78:ab:a8:4c:2b:9d:54:11:5f:af:57:82:3b:bc:a4:60:a1:bb: 85:7b:2b:0d:c4:bb:69:31:84:69:6d:de:5d:f1:8f:c9:19:b6: cd:f5:94:35:a2:4c:c3:fb:59:fe:22:f7:71:33:85:85:88:55: 80:9e:a9:f7:af:07:ef:5f:d6:de:59:ea:45:35:b6:20:01:14: bf:94:fd:0c:84:4d:6a:ba:fc:af:57:6d:e2:cd:40:ae:2b:62: 31:09:7e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhasp4krCvKo1zEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2Q2NzA4MzAtOGU1Yy00MzNjLWEzMzgtNjFjNGFhNjMyMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3zDalYjhb9IvYaKFkKU9ojpsRAgGcYJZQm5 rx2CqN5LlVFJSrDcbfELSNRKtXHgnrJVHO1VXMKAXoPfmp7XQAzOrdaufnmJDNQi qgS9i2jqq9OgZNBKmxKXI0RjphNU595i3OmdZvGJTFHu2IXz+4KDQ9u0qWgI/9ti nMaEOxaWewQwTtIXsXGHxzVrY1bw26q2Gv9iPXFFQZ+ip3kh4ANLNgLd2MENaHAb rC/ZJeiFZXU7gXJYAKtfvGyota1Y7vaqSLwoUITeWJoCy0Jk2JX5NUBcuR+C2VV3 zdcKQCTnPETg67zsF34SwbgJBCKZ6pMZNGDBohKtNljUbJ7UzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBU4sR52LfGwwxA8V92Qoos4nE5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzYxN2RjZGItNWFjMi0z OGU4LThhYmQtZjBiZDYzZmNmYTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8VYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxLheZk3AIywIZmzM9mu/7gMfmyl+K5j9yGEGPqkV1bj7jvqFToHhvf KcN+ZpoiR8gMCli1JpKSL8b9gBlagOm1E+LgAMZH0+SDuUG4mzS/vKr0NLQ/BxtS CIRiA4A4jNj8RZY8VlC+0IITu+tDb13jPC+DFclFCnjH+cBZQ1QX5iMSkmJhxB8v yvg+7XJp3INdv0f4fdZZXL7z4ZDU2LFZMnirqEwrnVQRX69Xgju8pGChu4V7Kw3E u2kxhGlt3l3xj8kZts31lDWiTMP7Wf4i93EzhYWIVYCeqfevB+9f1t5Z6kU1tiAB FL+U/QyETWq6/K9XbeLNQK4rYjEJfuE= -----END CERTIFICATE-----Generated at Sun Sep 27 01:05:26 2026 by rpki-client