$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62f88418-0f96-39cb-9f83-ee6e6ff4ea16.roa File: 62f88418-0f96-39cb-9f83-ee6e6ff4ea16.roa (raw, json) Hash identifier: W0F7D/YS9BfQWJdeOwj1q6NtiC+18gPBsRsWBvSLZqQ= Subject key identifier: 78:43:78:C9:85:4D:18:23:0D:C6:13:44:1D:5C:47:B0:06:2C:A0:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D5EF973809C776F6E6100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62f88418-0f96-39cb-9f83-ee6e6ff4ea16.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4761 IP address blocks: 23.202.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:5e:f9:73:80:9c:77:6f:6e:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a5574d18-dc3e-4140-b175-704289ea6fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4c:f4:7d:3a:96:39:48:ed:79:10:27:bc:16: 7d:c8:0c:77:43:2d:72:f5:c1:4c:ef:da:70:30:19: 1a:9f:50:99:3b:3a:20:df:ab:66:62:d3:1d:00:e2: a2:39:37:24:a7:43:a3:0b:d2:f3:67:8f:91:dc:34: 42:60:35:28:6d:29:54:d7:ca:21:ac:ab:72:78:40: 43:2f:d0:00:21:00:60:82:9b:99:f7:ef:d6:ec:d3: 25:3c:c1:9c:9e:08:35:7e:25:a9:cf:1d:cd:7b:32: 90:0e:7a:b3:de:ac:6b:b1:61:f9:ac:31:0c:5f:0e: c4:12:e9:b2:2a:7c:94:db:7e:c0:55:91:29:91:6d: 09:25:67:c0:7d:a3:53:3c:0e:bb:40:70:e0:37:84: 83:dd:23:c4:03:f0:eb:69:1c:2c:2f:09:74:07:74: de:77:51:4c:90:90:46:1c:3b:38:95:70:66:33:a8: f0:f4:df:3a:d3:b7:c5:36:15:4c:ee:d5:b5:8c:1e: fd:b7:bb:1c:ba:bb:b1:05:c7:79:b8:02:64:57:90: 35:c8:ac:23:30:ac:d0:e5:77:18:9c:89:f4:65:92: 8c:db:30:bd:b1:45:cf:28:f2:eb:86:25:f8:2d:06: 52:e3:c7:2f:36:30:12:48:5a:cc:a5:5a:39:90:0c: 3f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:43:78:C9:85:4D:18:23:0D:C6:13:44:1D:5C:47:B0:06:2C:A0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62f88418-0f96-39cb-9f83-ee6e6ff4ea16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:80:28:85:ab:2a:f1:62:25:10:83:4e:92:ee:7a:5c:dd:64: 76:8b:fe:13:57:86:4f:eb:b0:2c:3b:fa:08:a9:ea:ea:4e:7f: 6e:34:35:98:d3:89:43:1d:dd:5e:7d:5e:03:99:48:fa:46:0c: b1:40:cc:6e:f4:27:aa:6d:96:26:05:c3:98:62:2b:e3:88:00: 2a:a3:1d:ec:03:90:e9:93:6f:e8:90:4b:31:5b:c6:b7:e8:23: b0:5a:51:9e:b8:9a:94:9b:ec:7c:03:33:7e:f8:76:85:60:3c: bf:0b:5d:f0:02:4c:24:1b:ce:26:92:3b:50:c7:fc:1a:5d:44: ec:55:20:8e:d8:51:e4:6d:c3:7e:13:b8:4e:71:2a:1d:55:52: c0:35:e1:9e:34:8a:ef:0a:a3:db:bb:c2:03:f0:e1:10:1d:00: 6a:53:83:31:41:ba:5c:3f:17:f6:a2:cc:e7:18:75:93:a9:4b: 0b:29:db:ff:3d:a3:8e:fe:02:00:ff:5c:ba:d2:26:22:aa:2d: b4:f1:f9:26:4e:51:38:30:58:04:f0:13:36:ed:6b:3e:d4:3e: c1:8a:ae:01:c7:8c:e4:fc:6e:ca:73:b3:d0:bf:a0:84:0a:cb: 11:27:a3:1f:7c:b1:ed:6c:01:69:9a:07:52:29:2d:27:e6:33: b1:8a:62:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfV75c4Ccd29uYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTU1NzRkMTgtZGMzZS00MTQwLWIxNzUtNzA0Mjg5ZWE2ZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30z0fTqWOUjteRAnvBZ9yAx3Qy1y9cFM79pw MBkan1CZOzog36tmYtMdAOKiOTckp0OjC9LzZ4+R3DRCYDUobSlU18ohrKtyeEBD L9AAIQBggpuZ9+/W7NMlPMGcngg1fiWpzx3NezKQDnqz3qxrsWH5rDEMXw7EEumy KnyU237AVZEpkW0JJWfAfaNTPA67QHDgN4SD3SPEA/DraRwsLwl0B3Ted1FMkJBG HDs4lXBmM6jw9N8607fFNhVM7tW1jB79t7scuruxBcd5uAJkV5A1yKwjMKzQ5XcY nIn0ZZKM2zC9sUXPKPLrhiX4LQZS48cvNjASSFrMpVo5kAw/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhDeMmFTRgjDcYTRB1cR7AGLKDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjJmODg0MTgtMGY5Ni0z OWNiLTlmODMtZWU2ZTZmZjRlYTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiAKIWrKvFiJRCDTpLuelzdZHaL/hNXhk/rsCw7+gip6upOf240NZjT iUMd3V59XgOZSPpGDLFAzG70J6ptliYFw5hiK+OIACqjHewDkOmTb+iQSzFbxrfo I7BaUZ64mpSb7HwDM374doVgPL8LXfACTCQbziaSO1DH/BpdROxVII7YUeRtw34T uE5xKh1VUsA14Z40iu8Ko9u7wgPw4RAdAGpTgzFBulw/F/aizOcYdZOpSwsp2/89 o47+AgD/XLrSJiKqLbTx+SZOUTgwWATwEzbtaz7UPsGKrgHHjOT8bspzs9C/oIQK yxEnox98se1sAWmaB1IpLSfmM7GKYg8= -----END CERTIFICATE-----Generated at Fri Sep 25 23:54:20 2026 by rpki-client