$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fa9a78-d49e-39e9-ad75-d7076cf13110.roa File: 39fa9a78-d49e-39e9-ad75-d7076cf13110.roa (raw, json) Hash identifier: I1Ca7ATxomdsMwv8PpKD3YFP/yR/kZhESrUprblBW58= Subject key identifier: D1:B8:57:97:14:E2:19:3A:20:9E:9E:E4:A2:C7:99:70:FF:B9:44:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F13003E7FBADCC63CA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fa9a78-d49e-39e9-ad75-d7076cf13110.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.38.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f1:30:03:e7:fb:ad:cc:63:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=4a06d8d8-d57a-4ac3-a31c-ddfadfb2252b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:09:35:9b:85:6d:3d:d5:5f:83:01:f4:dd: 95:1e:83:4a:cf:12:8a:34:b7:40:f6:21:f6:56:b6: 6f:2a:b7:2d:ec:88:5f:28:67:ef:e0:6d:51:37:d6: 18:79:06:85:27:fa:b7:9b:67:54:6c:80:42:4c:c6: 14:3a:95:07:ba:c5:19:a3:9c:cf:b4:d9:30:0c:5a: cb:e8:f8:7d:9f:d3:0b:dc:da:f1:d2:46:0f:68:6e: a7:ae:87:17:5f:b6:8a:8b:e0:e1:21:45:f9:67:ee: bb:07:5a:03:0e:d7:5b:ea:74:f9:61:64:8f:b0:42: 31:fb:1e:c0:f9:f4:8d:f3:0d:ba:e1:25:43:fa:82: 1d:6e:ec:c5:9e:98:01:46:c7:ac:68:c3:5f:a9:8e: 3a:2a:70:8b:3c:81:ff:e8:38:70:12:bf:50:c5:41: 34:f0:15:ee:6d:c4:bc:76:0c:42:fc:fb:08:10:a5: 7b:9e:6e:4e:3d:f0:58:59:84:bb:75:54:62:28:c5: 75:c8:d4:76:36:68:f9:43:ed:8c:00:b4:fd:e9:d8: e4:74:88:dd:65:86:78:40:ac:e5:54:b1:dc:f5:d2: 54:60:54:b9:89:1e:8e:98:86:6b:3c:37:c6:b7:b0: d7:6b:93:86:9e:c5:ae:21:74:5e:96:0e:f4:7d:f3: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B8:57:97:14:E2:19:3A:20:9E:9E:E4:A2:C7:99:70:FF:B9:44:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39fa9a78-d49e-39e9-ad75-d7076cf13110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c9:86:4c:5a:cf:db:17:a1:17:ad:b1:7a:42:e4:ca:60:e5: 93:15:4b:e3:80:24:26:eb:db:89:43:e1:79:79:b7:83:a6:fd: b4:e4:ba:fd:6c:48:fe:06:b8:97:31:2d:1c:e1:c0:16:58:28: af:8b:ae:2f:11:0b:d5:35:90:b9:f3:9d:69:38:29:ca:c3:af: ec:9a:72:f5:13:9b:69:10:6c:b8:b3:c3:0e:28:62:69:28:6a: 6a:1b:81:c3:36:6d:3c:c2:5d:df:12:cb:8e:63:b3:9a:2b:94: 48:74:bb:28:84:bb:05:1d:a6:48:7c:9a:32:73:85:50:89:07: 5d:8e:75:2d:a9:89:26:89:bd:9c:89:35:59:75:c0:2c:77:1e: e9:62:dc:67:37:a4:c6:dd:7d:5e:8f:ae:30:99:c7:63:8a:32: 41:37:8f:48:1f:37:54:fb:38:1f:fb:fa:a5:0f:9c:4c:8d:4e: 63:f5:f4:1d:6a:20:e5:f9:37:92:3a:c2:51:a4:14:ed:aa:34: 2a:82:ae:f3:72:6a:e5:0b:10:3b:17:49:0e:01:18:72:7b:cb: ef:50:f6:14:21:d1:ef:4b:28:bd:85:54:61:05:22:4e:2e:c9: 63:54:34:81:aa:f7:5e:22:b8:cc:d7:12:6c:cf:56:8f:16:72: 73:f4:35:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/EwA+f7rcxjykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NGEwNmQ4ZDgtZDU3YS00YWMzLWEzMWMtZGRmYWRmYjIyNTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNMJNZuFbT3VX4MB9N2VHoNKzxKKNLdA9iH2 VrZvKrct7IhfKGfv4G1RN9YYeQaFJ/q3m2dUbIBCTMYUOpUHusUZo5zPtNkwDFrL 6Ph9n9ML3Nrx0kYPaG6nrocXX7aKi+DhIUX5Z+67B1oDDtdb6nT5YWSPsEIx+x7A +fSN8w264SVD+oIdbuzFnpgBRsesaMNfqY46KnCLPIH/6DhwEr9QxUE08BXubcS8 dgxC/PsIEKV7nm5OPfBYWYS7dVRiKMV1yNR2Nmj5Q+2MALT96djkdIjdZYZ4QKzl VLHc9dJUYFS5iR6OmIZrPDfGt7DXa5OGnsWuIXRelg70ffPpLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG4V5cU4hk6IJ6e5KLHmXD/uUSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzlmYTlhNzgtZDQ5ZS0z OWU5LWFkNzUtZDcwNzZjZjEzMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFybFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHJhkxaz9sXoRetsXpC5Mpg5ZMVS+OAJCbr24lD4Xl5t4Om/bTkuv1s SP4GuJcxLRzhwBZYKK+Lri8RC9U1kLnznWk4KcrDr+yacvUTm2kQbLizww4oYmko amobgcM2bTzCXd8Sy45js5orlEh0uyiEuwUdpkh8mjJzhVCJB12OdS2piSaJvZyJ NVl1wCx3Huli3Gc3pMbdfV6PrjCZx2OKMkE3j0gfN1T7OB/7+qUPnEyNTmP19B1q IOX5N5I6wlGkFO2qNCqCrvNyauULEDsXSQ4BGHJ7y+9Q9hQh0e9LKL2FVGEFIk4u yWNUNIGq914iuMzXEmzPVo8WcnP0NYM= -----END CERTIFICATE-----Generated at Thu Sep 24 02:53:17 2026 by rpki-client