$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cd6133c-17bd-3695-bc3f-08c47150081d.roa File: 4cd6133c-17bd-3695-bc3f-08c47150081d.roa (raw, json) Hash identifier: IsbC2nN7MszJ7YTbXVEoi3sugSMPXnV+kuHanFDttgM= Subject key identifier: 65:DB:14:0E:F7:16:9C:33:E7:94:C4:67:E3:A6:9F:4F:BD:0F:A0:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D4B80EE65D565EE491B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cd6133c-17bd-3695-bc3f-08c47150081d.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.52.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:4b:80:ee:65:d5:65:ee:49:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=aa994ad9-fc2b-42d4-afc5-363a440927e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:af:75:54:3f:61:a4:2c:24:dd:af:b5:d6: f1:01:4a:97:d0:50:bd:e4:8f:04:e8:a3:58:b1:85: e0:b8:99:9c:1c:6c:5a:f2:dd:da:8e:03:00:8c:15: 93:24:78:01:a7:70:6f:c4:0d:58:9f:ec:7c:56:43: 9b:67:00:32:ad:98:61:0e:56:20:e1:f3:8c:85:a2: bd:c4:4b:53:49:fc:4a:da:45:ff:fc:6f:cf:8a:72: 0c:25:0a:09:f6:b3:a7:c6:a4:a0:df:5d:b1:22:a8: 75:9b:90:76:83:b6:4c:80:68:a7:e5:37:79:d7:28: 07:d2:c1:f1:e5:b5:81:f4:f2:42:4c:ca:30:6b:16: 3b:fa:6b:09:96:41:7a:e3:eb:f6:59:16:d1:4d:bd: a7:53:49:5f:20:16:1f:b3:ab:62:77:01:3f:12:34: 81:b2:6e:39:e9:58:29:5b:0b:ca:f2:99:ef:d9:be: 2d:c0:48:58:89:54:c2:8f:98:98:8b:a9:b2:1a:56: c8:f0:04:c5:7c:c9:46:92:9d:83:40:98:b6:46:bb: d3:3f:5a:3a:f7:80:49:9d:69:2f:a7:4e:5a:8e:e2: 9d:28:3f:4d:f2:66:c8:aa:3d:3e:85:19:48:d2:b9: 4c:26:5e:df:c6:b6:32:ef:1d:50:d8:71:57:1a:55: 15:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DB:14:0E:F7:16:9C:33:E7:94:C4:67:E3:A6:9F:4F:BD:0F:A0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cd6133c-17bd-3695-bc3f-08c47150081d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1b:3b:2a:02:0f:9b:33:eb:f1:19:78:04:d0:33:e9:5c:99: 85:d1:65:07:d4:12:be:9a:e0:c9:44:4c:25:53:7c:83:cc:f8: 7f:6b:bc:0f:e6:2d:7e:a2:8c:d9:31:2c:e5:53:bd:ed:4d:53: c0:ee:c4:a0:5b:44:55:ab:c1:13:61:ed:d1:07:0f:04:83:57: 89:17:34:94:ac:2a:74:56:96:d2:15:9f:c6:38:0b:82:0f:b3: 88:5f:0e:e6:36:9c:4d:cf:59:a4:ec:c3:74:75:c2:50:fb:2d: 30:a6:c4:61:68:5d:cd:79:98:a0:32:a2:34:96:79:fe:45:c3: 11:48:7c:b3:06:a6:fd:d3:8a:a1:24:4e:9e:25:88:77:96:46: 2d:8c:a9:b4:de:be:9d:09:e1:4b:34:44:8f:cd:3b:43:18:01: 56:d3:48:29:54:43:d0:0d:b9:5e:e6:54:c8:18:04:58:e8:87: 9c:b4:34:09:0c:13:32:3c:8c:af:28:2f:01:18:49:34:d4:ce: 62:b6:ed:5c:f3:01:15:08:bb:2e:d1:bf:35:ca:2d:d9:14:98: fd:9e:82:2d:43:ef:0d:18:3f:1c:c5:a0:2f:b8:b6:68:d7:6b: 67:fe:f8:b7:58:8f:59:3f:58:d0:bd:cc:ff:5c:0d:b0:87:0b: a8:ee:3c:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUuA7mXVZe5JGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YWE5OTRhZDktZmMyYi00MmQ0LWFmYzUtMzYzYTQ0MDkyN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNyvdVQ/YaQsJN2vtdbxAUqX0FC95I8E6KNY sYXguJmcHGxa8t3ajgMAjBWTJHgBp3BvxA1Yn+x8VkObZwAyrZhhDlYg4fOMhaK9 xEtTSfxK2kX//G/PinIMJQoJ9rOnxqSg312xIqh1m5B2g7ZMgGin5Td51ygH0sHx 5bWB9PJCTMowaxY7+msJlkF64+v2WRbRTb2nU0lfIBYfs6tidwE/EjSBsm456Vgp WwvK8pnv2b4twEhYiVTCj5iYi6myGlbI8ATFfMlGkp2DQJi2RrvTP1o694BJnWkv p05ajuKdKD9N8mbIqj0+hRlI0rlMJl7fxrYy7x1Q2HFXGlUVTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXbFA73Fpwz55TEZ+Omn0+9D6AzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGNkNjEzM2MtMTdiZC0z Njk1LWJjM2YtMDhjNDcxNTAwODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIbOyoCD5sz6/EZeATQM+lcmYXRZQfUEr6a4MlETCVTfIPM+H9rvA/m LX6ijNkxLOVTve1NU8DuxKBbRFWrwRNh7dEHDwSDV4kXNJSsKnRWltIVn8Y4C4IP s4hfDuY2nE3PWaTsw3R1wlD7LTCmxGFoXc15mKAyojSWef5FwxFIfLMGpv3TiqEk Tp4liHeWRi2MqbTevp0J4Us0RI/NO0MYAVbTSClUQ9ANuV7mVMgYBFjoh5y0NAkM EzI8jK8oLwEYSTTUzmK27VzzARUIuy7RvzXKLdkUmP2egi1D7w0YPxzFoC+4tmjX a2f++LdYj1k/WNC9zP9cDbCHC6juPAg= -----END CERTIFICATE-----Generated at Fri Sep 25 23:50:25 2026 by rpki-client