$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8157872f-cf4a-383c-a65e-fb7ec2fbf341.roa File: 8157872f-cf4a-383c-a65e-fb7ec2fbf341.roa (raw, json) Hash identifier: CBrIZoYn/sYOXqz1qHjaSIQav1NaKZ0PZTB8A4bRw5w= Subject key identifier: E3:94:7A:5E:66:21:02:8B:66:F7:5C:E5:EF:A2:8B:18:BB:22:86:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985BC3291E0D752D071C880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8157872f-cf4a-383c-a65e-fb7ec2fbf341.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.202.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:bc:32:91:e0:d7:52:d0:71:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec82b41a-8d3a-4760-93f2-2393d390feda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:07:22:5b:cc:85:63:70:a5:a9:88:c0:3e: 18:b7:96:12:f3:91:34:92:70:f1:7e:9a:80:6a:82: 87:71:c7:89:fc:89:6e:3c:b7:66:8f:74:2a:d5:9b: c0:c4:89:8d:53:78:4b:73:45:a6:7c:56:64:d0:fe: 72:4e:1b:7e:a9:fe:11:1a:07:be:e5:fb:e3:61:34: 01:e7:25:a2:24:ef:8b:d9:7f:11:14:c5:37:ad:2b: b2:a0:4c:b0:05:e7:3a:05:b3:4a:ad:b1:44:1b:8f: f0:37:9f:73:16:f3:29:e7:58:d1:f4:54:f0:20:6f: 7d:63:02:80:65:a0:7b:04:6e:0c:ca:16:f0:d5:44: 67:04:1c:c3:2e:62:38:e5:aa:e8:fd:f6:49:32:81: 45:31:75:41:1d:f2:3f:84:fa:b4:26:44:87:97:8f: b7:e3:42:28:b2:eb:c3:65:38:c4:55:b3:27:a0:31: 46:bd:ac:2f:9d:f3:23:ee:25:d5:78:3c:9c:9a:68: 05:08:88:8c:b8:eb:cd:10:b3:72:17:05:8d:3a:89: 38:67:f5:d0:b4:d3:33:22:e7:ed:0f:2d:de:7b:87: b5:42:f5:ac:48:9e:29:20:c5:23:f7:4d:26:24:da: 4b:92:48:21:82:f3:b2:11:65:e8:73:e0:32:7b:e5: 73:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:94:7A:5E:66:21:02:8B:66:F7:5C:E5:EF:A2:8B:18:BB:22:86:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8157872f-cf4a-383c-a65e-fb7ec2fbf341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ea:c8:38:b9:1d:85:f0:57:98:8f:fa:a9:b3:a2:85:eb:d4: 18:cf:e7:54:ca:3b:d1:6b:e6:bc:89:6d:01:30:b5:ab:48:de: 55:2d:2c:22:5d:8b:43:55:26:e7:f1:25:b7:b6:9a:2a:02:a5: d3:2c:9a:5d:e3:0e:74:cc:de:a5:59:e2:21:ee:93:24:c6:e0: 79:93:a8:6d:8a:ab:df:94:24:3b:50:a2:e5:48:55:9b:49:af: 82:f6:1b:a2:f4:91:f4:92:40:64:24:41:89:b1:79:09:09:cd: 53:87:64:28:50:56:93:25:95:fd:a0:fc:ae:79:52:60:b8:e2: a4:fa:4f:1a:95:46:97:ff:0f:2f:99:9b:81:65:8d:dd:a5:19: 20:48:88:43:bd:d9:33:18:27:bf:33:d7:ee:f3:c1:a7:bf:1f: 11:f6:39:e8:07:fe:04:4b:9d:f8:cb:28:4a:84:5a:d1:c5:e4: ad:5b:6e:61:3d:33:1c:29:b3:2f:fe:3b:20:f8:76:75:3a:c0: cd:93:54:85:6b:df:d3:e3:e9:74:99:22:55:97:7b:60:a8:7c: a1:00:2b:d2:1f:36:0b:b4:d9:97:a2:6d:09:24:12:51:4b:de: 74:31:7a:2d:5d:ab:67:71:dd:32:11:dc:e4:f8:57:02:94:41: ff:56:49:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhbwykeDXUtBxyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWM4MmI0MWEtOGQzYS00NzYwLTkzZjItMjM5M2QzOTBmZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLAHIlvMhWNwpamIwD4Yt5YS85E0knDxfpqA aoKHcceJ/IluPLdmj3Qq1ZvAxImNU3hLc0WmfFZk0P5yTht+qf4RGge+5fvjYTQB 5yWiJO+L2X8RFMU3rSuyoEywBec6BbNKrbFEG4/wN59zFvMp51jR9FTwIG99YwKA ZaB7BG4Myhbw1URnBBzDLmI45aro/fZJMoFFMXVBHfI/hPq0JkSHl4+340IosuvD ZTjEVbMnoDFGvawvnfMj7iXVeDycmmgFCIiMuOvNELNyFwWNOok4Z/XQtNMzIuft Dy3ee4e1QvWsSJ4pIMUj900mJNpLkkghgvOyEWXoc+Aye+Vz/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOUel5mIQKLZvdc5e+iixi7IoZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODE1Nzg3MmYtY2Y0YS0z ODNjLWE2NWUtZmI3ZWMyZmJmMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8paMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvqyDi5HYXwV5iP+qmzooXr1BjP51TKO9Fr5ryJbQEwtatI3lUtLCJd i0NVJufxJbe2mioCpdMsml3jDnTM3qVZ4iHukyTG4HmTqG2Kq9+UJDtQouVIVZtJ r4L2G6L0kfSSQGQkQYmxeQkJzVOHZChQVpMllf2g/K55UmC44qT6TxqVRpf/Dy+Z m4Fljd2lGSBIiEO92TMYJ78z1+7zwae/HxH2OegH/gRLnfjLKEqEWtHF5K1bbmE9 Mxwpsy/+OyD4dnU6wM2TVIVr39Pj6XSZIlWXe2CofKEAK9IfNgu02ZeibQkkElFL 3nQxei1dq2dx3TIR3OT4VwKUQf9WSQ8= -----END CERTIFICATE-----Generated at Fri Sep 25 23:41:08 2026 by rpki-client