$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52cd21c3-a27f-3208-8795-3ced15adedf5.roa File: 52cd21c3-a27f-3208-8795-3ced15adedf5.roa (raw, json) Hash identifier: sHG3m+HncxDoOWdJrrg+qt2vGW7HxqCpsURqL9AScNI= Subject key identifier: 8C:5D:A3:37:29:14:01:2B:A1:17:47:8E:DD:DF:01:2A:92:E9:BF:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985B008B5279E959C647FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52cd21c3-a27f-3208-8795-3ced15adedf5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.199.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:b0:08:b5:27:9e:95:9c:64:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a065b168-2380-4713-8f7c-70aabe6b1de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:39:d9:2f:7b:5f:33:29:9f:e3:f2:c7:af:62: a7:48:90:b5:76:d5:9d:ac:ba:eb:d7:e6:40:77:bc: dd:52:5d:25:e3:e7:89:af:13:59:28:19:4a:b2:37: 4c:b2:26:1f:e9:b3:1d:28:d5:47:e9:8c:49:38:d6: 35:c1:8f:fa:52:62:54:0a:ca:dc:6a:c3:ac:1b:db: f7:96:32:f1:1d:a3:9f:4d:aa:d6:61:3c:8c:99:73: ae:85:68:5d:d5:ba:1f:77:e1:96:52:98:a5:93:2e: 71:72:67:90:9f:88:c0:3b:b3:ff:43:0b:6a:4c:30: 1e:9f:9a:6f:1d:fb:25:00:9b:a7:4f:a6:31:84:21: 93:32:9f:19:1c:80:15:e3:22:b7:94:01:55:2a:15: 3f:8b:cf:a6:3b:b4:a8:2f:61:b7:07:95:da:a2:11: c2:8b:5f:c3:aa:3b:fe:98:87:0e:60:b4:af:43:6b: 2b:1b:ef:e3:d2:2f:8a:81:6d:1e:1f:38:fd:37:e1: b2:a5:03:0e:f2:af:f2:3d:32:c8:e2:7b:98:f6:c6: 44:d8:36:49:a6:37:36:b1:c4:9e:cd:90:a3:4f:e5: 8f:1e:05:b4:93:79:02:06:67:b8:4a:e3:39:c9:c5: b9:a4:6c:08:19:25:3a:ea:95:97:f1:d3:90:6b:2a: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5D:A3:37:29:14:01:2B:A1:17:47:8E:DD:DF:01:2A:92:E9:BF:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52cd21c3-a27f-3208-8795-3ced15adedf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:15:a0:9d:24:e3:8b:9e:20:e1:a6:a5:c3:91:71:cd:de:51: 55:65:48:12:c7:59:99:ff:80:1b:76:d2:eb:82:77:b9:8d:89: 91:72:98:e5:7f:b9:6a:23:6b:50:6a:98:8a:2f:61:cd:40:18: d5:14:61:02:cd:75:1c:0a:49:28:95:6d:d1:2c:78:19:84:09: 67:19:07:cb:fa:8c:32:e5:0f:96:94:99:e5:e1:c8:4e:e0:3a: 71:03:a5:46:4d:5f:a1:77:23:a9:58:48:70:7b:c5:22:d1:06: 6c:d2:23:3b:f8:5b:0c:1d:e3:54:96:a4:14:79:56:36:70:9d: 76:1a:4f:eb:8f:8c:34:3f:4e:0d:c5:ba:25:a4:c5:88:ee:5d: 8d:96:4b:3d:b9:89:e6:bf:24:27:8b:1b:8c:cc:f0:e9:31:9c: 76:41:a1:ce:d7:fb:d4:21:e3:8e:ea:0f:8d:fa:e8:ee:37:38: 91:8d:e9:98:27:43:ad:3a:b8:82:6e:f4:95:94:2b:e8:fd:3a: 1f:67:86:fb:a2:eb:75:94:14:1c:f5:27:3e:7b:b9:1a:19:e5: b4:b1:7c:fa:47:e9:89:77:0a:70:fb:07:76:c3:68:7f:80:ea: f9:a4:64:9b:e6:a2:dd:60:a7:07:8c:21:0f:f0:c6:1d:1d:3e: cf:ca:57:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhbAItSeelZxkf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTA2NWIxNjgtMjM4MC00NzEzLThmN2MtNzBhYWJlNmIxZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmznZL3tfMymf4/LHr2KnSJC1dtWdrLrr1+ZA d7zdUl0l4+eJrxNZKBlKsjdMsiYf6bMdKNVH6YxJONY1wY/6UmJUCsrcasOsG9v3 ljLxHaOfTarWYTyMmXOuhWhd1bofd+GWUpilky5xcmeQn4jAO7P/QwtqTDAen5pv HfslAJunT6YxhCGTMp8ZHIAV4yK3lAFVKhU/i8+mO7SoL2G3B5XaohHCi1/Dqjv+ mIcOYLSvQ2srG+/j0i+KgW0eHzj9N+GypQMO8q/yPTLI4nuY9sZE2DZJpjc2scSe zZCjT+WPHgW0k3kCBme4SuM5ycW5pGwIGSU66pWX8dOQayp/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxdozcpFAEroRdHjt3fASqS6b8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTJjZDIxYzMtYTI3Zi0z MjA4LTg3OTUtM2NlZDE1YWRlZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8dUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYVoJ0k44ueIOGmpcORcc3eUVVlSBLHWZn/gBt20uuCd7mNiZFymOV/ uWoja1BqmIovYc1AGNUUYQLNdRwKSSiVbdEseBmECWcZB8v6jDLlD5aUmeXhyE7g OnEDpUZNX6F3I6lYSHB7xSLRBmzSIzv4Wwwd41SWpBR5VjZwnXYaT+uPjDQ/Tg3F uiWkxYjuXY2WSz25iea/JCeLG4zM8OkxnHZBoc7X+9Qh447qD4366O43OJGN6Zgn Q606uIJu9JWUK+j9Oh9nhvui63WUFBz1Jz57uRoZ5bSxfPpH6Yl3CnD7B3bDaH+A 6vmkZJvmot1gpweMIQ/wxh0dPs/KV4E= -----END CERTIFICATE-----Generated at Sat Sep 26 07:42:52 2026 by rpki-client