$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b2c3991-c056-3669-8349-14b096eeca5b.roa File: 4b2c3991-c056-3669-8349-14b096eeca5b.roa (raw, json) Hash identifier: APqxw7Eu5Rmre+Wmio4gOeYRlQRBoxn9CSjLL8mumak= Subject key identifier: C4:9B:43:1D:A8:44:20:36:1E:F2:79:5E:EA:03:69:41:BA:4A:EE:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F49855F9310897DB954D28280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b2c3991-c056-3669-8349-14b096eeca5b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.58.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:5f:93:10:89:7d:b9:54:d2:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5cfda736-0c31-4054-b852-cb98dfa1036b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:5b:b0:6a:ff:ee:2f:74:32:74:0d:01:c6: ae:92:e7:c7:49:22:84:5c:d9:f7:b8:e3:7f:4a:6d: 75:54:91:d6:b9:9c:6d:9d:ea:2d:e2:4c:16:36:ac: d4:ae:89:fc:b8:ae:2b:24:96:ad:f5:32:86:29:df: 72:52:1a:90:69:0e:ad:b4:d1:d7:21:31:19:96:d4: 03:1c:d6:99:e1:c1:68:64:64:fb:09:df:c1:42:91: 74:78:aa:12:02:22:c8:cd:b4:ed:eb:2b:de:bf:96: e9:ff:fe:f7:e1:94:0f:d7:ea:b4:55:b8:61:89:a8: 01:ff:79:91:b0:fc:c3:e8:e9:aa:35:f2:67:f7:0d: cc:e8:a1:d3:44:b8:31:f0:4b:84:ac:9c:8d:d0:50: 11:ee:02:c4:4e:c7:bc:9d:24:bd:51:a6:02:59:e1: a2:2d:b6:75:4d:f1:e6:3e:fd:30:33:e7:c9:8a:cb: 9e:08:6a:cb:4d:ea:be:ea:9a:a0:88:11:85:05:28: 72:71:65:85:03:b7:0b:1e:e4:7d:1b:5e:ee:d1:83: 8e:66:a2:68:98:c1:e4:da:c1:98:1d:47:c7:14:7a: 02:f1:aa:4b:c6:ed:98:d6:3d:8c:5f:0f:37:6a:38: e1:96:c7:b2:dc:b1:45:3f:47:5c:d0:6a:59:6b:80: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9B:43:1D:A8:44:20:36:1E:F2:79:5E:EA:03:69:41:BA:4A:EE:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b2c3991-c056-3669-8349-14b096eeca5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3d:e4:f5:49:c7:8d:50:e2:27:62:d9:ba:19:21:c6:e4:33: 6d:72:95:bf:5e:a4:d2:e2:33:88:2c:81:e5:c2:f8:07:2e:98: 0f:dd:05:ff:2e:fb:4c:8f:40:fc:06:9f:36:bb:83:07:48:bc: f0:03:34:6c:de:f9:99:dc:be:cb:73:41:88:e3:4d:5e:0e:a4: 47:b8:2e:f1:09:8e:db:2a:38:a7:fe:4f:26:b2:2f:c1:87:9c: a5:12:f4:18:4e:7f:dc:6b:48:bd:e1:6d:b4:95:2e:b1:4f:b2: d7:ab:86:06:5d:af:5e:d5:66:93:8f:6e:ac:59:da:e5:fa:2d: cc:15:5d:63:ff:f3:a1:68:09:15:c9:cc:26:77:8b:36:79:d5: 62:9a:93:ca:39:95:55:0d:be:44:bf:9b:1d:3f:5d:9f:ce:cd: cb:af:56:3e:c6:66:fc:b3:bc:9d:46:cc:0e:a1:08:91:f9:7e: fc:9f:2d:a4:6f:f1:fd:d0:e8:43:40:38:e9:d9:b6:cb:d9:5c: 69:08:84:ce:d4:ad:06:0e:af:2c:a5:53:b9:28:91:da:7d:71: 65:9c:4d:a1:27:d6:14:e7:fb:5e:38:41:53:d4:25:c8:2c:86: 22:43:fd:3a:ce:bc:b8:a7:f5:93:fa:c3:66:d8:a9:da:ca:0a: 41:48:32:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhV+TEIl9uVTSgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWNmZGE3MzYtMGMzMS00MDU0LWI4NTItY2I5OGRmYTEwMzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLxbsGr/7i90MnQNAcaukufHSSKEXNn3uON/ Sm11VJHWuZxtneot4kwWNqzUron8uK4rJJat9TKGKd9yUhqQaQ6ttNHXITEZltQD HNaZ4cFoZGT7Cd/BQpF0eKoSAiLIzbTt6yvev5bp//734ZQP1+q0VbhhiagB/3mR sPzD6OmqNfJn9w3M6KHTRLgx8EuErJyN0FAR7gLETse8nSS9UaYCWeGiLbZ1TfHm Pv0wM+fJisueCGrLTeq+6pqgiBGFBShycWWFA7cLHuR9G17u0YOOZqJomMHk2sGY HUfHFHoC8apLxu2Y1j2MXw83ajjhlsey3LFFP0dc0GpZa4DppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSbQx2oRCA2HvJ5XuoDaUG6Su6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGIyYzM5OTEtYzA1Ni0z NjY5LTgzNDktMTRiMDk2ZWVjYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzp5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs95PVJx41Q4idi2boZIcbkM21ylb9epNLiM4gsgeXC+AcumA/dBf8u +0yPQPwGnza7gwdIvPADNGze+ZncvstzQYjjTV4OpEe4LvEJjtsqOKf+TyayL8GH nKUS9BhOf9xrSL3hbbSVLrFPsterhgZdr17VZpOPbqxZ2uX6LcwVXWP/86FoCRXJ zCZ3izZ51WKak8o5lVUNvkS/mx0/XZ/OzcuvVj7GZvyzvJ1GzA6hCJH5fvyfLaRv 8f3Q6ENAOOnZtsvZXGkIhM7UrQYOryylU7kokdp9cWWcTaEn1hTn+144QVPUJcgs hiJD/TrOvLin9ZP6w2bYqdrKCkFIMow= -----END CERTIFICATE-----Generated at Mon Sep 28 11:26:04 2026 by rpki-client