$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b9804fc-1041-3693-aeae-482897b57ee1.roa File: 7b9804fc-1041-3693-aeae-482897b57ee1.roa (raw, json) Hash identifier: 5yP/7RiJAdnEfi/U014IQ8KiIJdNynHmjsKU83dkVZI= Subject key identifier: 43:49:5D:27:5A:A3:90:3C:BA:30:84:AE:AF:46:FD:89:14:A7:4F:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D83BA2006FE11F966D970 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b9804fc-1041-3693-aeae-482897b57ee1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.199.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:83:ba:20:06:fe:11:f9:66:d9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=767d0386-9da0-4c98-9042-be5458be483e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:90:43:7c:49:47:a2:ed:40:8e:63:a0:47:42: 99:75:a5:1a:b9:ea:8f:e2:21:3e:57:21:08:52:3f: 42:37:8a:34:93:90:aa:b6:2f:a8:90:f4:6e:0b:86: 77:fe:2b:8a:c5:a2:75:15:6c:44:d2:7a:03:93:d8: fa:4e:49:12:59:73:13:a3:58:69:45:54:e2:eb:f2: 11:63:23:fb:c5:74:1a:2f:97:17:bb:6a:fa:bd:05: 6a:b4:2e:dd:83:41:00:cb:b5:c3:df:fb:e5:21:bc: 34:7a:ed:4b:e5:a8:24:a0:57:69:25:65:74:11:e0: e3:2a:28:d3:b7:ef:f3:f6:10:5c:df:27:7f:5c:e0: fe:3b:06:ee:92:90:1b:6e:19:d4:f5:02:24:d9:f4: 90:ee:b3:70:81:5c:dd:93:50:83:e2:ae:fb:50:b0: 93:50:1c:7f:be:a0:87:b6:a1:10:a4:36:96:b6:fb: f2:3d:09:d3:3b:b0:c7:02:9b:ed:64:bc:6f:79:9f: 42:48:53:17:9d:2a:61:5f:95:49:81:7d:bd:5c:e2: 48:21:24:ed:23:15:e4:3c:32:77:7f:1f:9b:f4:74: 39:d3:6b:29:59:c1:f6:a7:8f:e2:99:05:45:a9:d8: a1:5f:85:26:d9:2a:1b:1a:82:cd:a5:bc:86:0a:e7: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:5D:27:5A:A3:90:3C:BA:30:84:AE:AF:46:FD:89:14:A7:4F:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b9804fc-1041-3693-aeae-482897b57ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:bf:81:e6:4c:8a:16:89:d0:fb:72:c3:c4:f0:53:35:0d:2c: 77:e8:57:91:38:ca:9d:08:e9:4e:a4:9e:19:ad:86:e4:77:f2: 39:57:2d:25:da:f5:8f:54:80:e9:d3:cb:13:c5:33:14:81:cc: d2:23:fb:c3:52:7f:00:60:ab:c8:b1:fd:33:10:53:f1:ae:38: 18:62:91:7e:d1:82:ae:f7:f0:fe:11:bd:aa:3c:00:6c:80:16: bd:3f:9e:08:d0:26:e9:86:3f:47:64:b8:f8:bb:26:ba:bc:c8: 5a:e8:e1:31:f1:73:35:d5:0e:4c:58:99:3d:80:7b:d3:45:f0: db:1a:cf:9b:a1:f1:b2:9c:d2:97:10:1f:cf:9c:d7:36:3b:73: 46:bf:24:ac:83:49:77:99:10:2b:d8:5f:6b:a0:db:23:7d:b8: 19:46:59:24:db:62:f1:7e:1f:65:f7:7b:70:6e:ec:64:bd:10: 87:29:4f:94:0b:40:98:b8:63:81:59:8c:d0:7b:cb:eb:5e:a4: e2:0b:0b:52:38:c1:22:b1:56:4a:e8:f1:a3:12:b0:3c:02:17: 14:36:1b:f3:87:fd:0f:65:a3:c7:c8:16:d5:1d:af:f1:04:92: 82:0d:8f:d9:6d:2e:8b:cc:ff:61:03:9e:46:43:64:e3:14:69: 08:34:0e:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfYO6IAb+Eflm2XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzY3ZDAzODYtOWRhMC00Yzk4LTkwNDItYmU1NDU4YmU0ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpBDfElHou1AjmOgR0KZdaUaueqP4iE+VyEI Uj9CN4o0k5Cqti+okPRuC4Z3/iuKxaJ1FWxE0noDk9j6TkkSWXMTo1hpRVTi6/IR YyP7xXQaL5cXu2r6vQVqtC7dg0EAy7XD3/vlIbw0eu1L5agkoFdpJWV0EeDjKijT t+/z9hBc3yd/XOD+OwbukpAbbhnU9QIk2fSQ7rNwgVzdk1CD4q77ULCTUBx/vqCH tqEQpDaWtvvyPQnTO7DHApvtZLxveZ9CSFMXnSphX5VJgX29XOJIISTtIxXkPDJ3 fx+b9HQ502spWcH2p4/imQVFqdihX4Um2SobGoLNpbyGCuegDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENJXSdao5A8ujCErq9G/YkUp090MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2I5ODA0ZmMtMTA0MS0z NjkzLWFlYWUtNDgyODk3YjU3ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8c7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACK/geZMihaJ0Ptyw8TwUzUNLHfoV5E4yp0I6U6knhmthuR38jlXLSXa 9Y9UgOnTyxPFMxSBzNIj+8NSfwBgq8ix/TMQU/GuOBhikX7Rgq738P4Rvao8AGyA Fr0/ngjQJumGP0dkuPi7Jrq8yFro4THxczXVDkxYmT2Ae9NF8Nsaz5uh8bKc0pcQ H8+c1zY7c0a/JKyDSXeZECvYX2ug2yN9uBlGWSTbYvF+H2X3e3Bu7GS9EIcpT5QL QJi4Y4FZjNB7y+tepOILC1I4wSKxVkro8aMSsDwCFxQ2G/OH/Q9lo8fIFtUdr/EE koINj9ltLovM/2EDnkZDZOMUaQg0Drs= -----END CERTIFICATE-----Generated at Sat Sep 26 04:04:38 2026 by rpki-client