$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849ed731-b636-320e-8182-34b0590c9939.roa File: 849ed731-b636-320e-8182-34b0590c9939.roa (raw, json) Hash identifier: S1lDcUq+AHGrGjbjK0fDOr7zz1wYCOas1mhgURcYKdk= Subject key identifier: 09:24:56:07:1A:CF:45:B9:83:0C:F2:92:C3:22:7F:75:57:68:E4:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985C1F7C490B33D914BC4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849ed731-b636-320e-8182-34b0590c9939.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 35994 IP address blocks: 23.203.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:c1:f7:c4:90:b3:3d:91:4b:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4e30ffc-cc0d-4a20-bfcf-d90fc406be03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:a0:82:9d:80:07:23:8e:85:4c:47:31:4e: 3e:79:2a:a6:95:04:69:9b:94:c4:d3:c7:1a:b3:3a: 21:9c:e0:01:e2:7f:ee:78:c8:78:f9:3a:0c:cb:84: 46:f0:7a:21:b9:f6:78:78:48:6e:74:1f:3c:66:8f: 9b:f8:b8:a5:47:25:73:65:83:30:be:49:fa:da:a2: 0e:26:a3:15:55:69:3c:c7:63:6f:ab:df:25:b7:7d: 55:7f:0f:15:ac:ba:e7:3d:ab:aa:15:08:49:31:1e: 8f:f5:bb:a9:06:e8:a3:74:37:03:31:a9:4d:58:95: 15:24:c0:8f:b1:df:2e:ac:4f:85:e6:03:6f:2d:23: dd:67:63:c1:53:74:e8:8b:3e:18:3d:79:0f:00:90: 86:e1:d4:52:98:cf:f6:3b:b9:5d:c8:13:88:dd:a7: 98:77:2b:16:ed:b3:84:65:de:82:21:1b:b9:d4:87: e1:f5:56:5e:d1:b4:90:0f:7f:83:ee:32:aa:80:3d: 9b:3f:a5:de:3c:10:27:de:cf:72:c5:8d:b9:e0:8c: 4e:fd:86:0d:b1:b4:29:b4:8e:0c:ea:5c:4e:4b:e0: 6f:f9:bb:4d:4e:be:98:34:8c:df:c4:0c:9b:ac:2c: 03:aa:9d:ae:f3:51:ac:d7:75:1f:19:24:e3:d1:38: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:24:56:07:1A:CF:45:B9:83:0C:F2:92:C3:22:7F:75:57:68:E4:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/849ed731-b636-320e-8182-34b0590c9939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:29:48:98:04:34:af:29:57:b7:fa:20:f8:c4:e0:18:e8:51: d5:db:2b:48:25:cb:5a:57:e2:0d:3e:30:05:16:07:e9:c6:2a: 9d:ea:b2:c3:88:57:d0:ba:32:fc:17:a6:51:32:b6:c5:dd:c0: fe:c6:15:70:c7:e1:79:ed:c4:52:84:cf:c8:9d:39:da:ed:b5: 32:00:b0:4b:92:50:82:47:24:4f:79:40:eb:33:a2:ab:ad:97: 92:00:6f:ae:c9:12:25:6c:01:63:77:31:bc:77:1d:24:19:bb: b1:f4:f1:39:75:eb:df:e6:99:07:ab:4e:02:24:c4:b9:e8:dc: 98:5a:59:6a:0f:c6:ac:1f:76:ac:5f:87:38:2c:dc:71:51:9e: 5f:f9:94:eb:31:63:18:58:ff:a4:06:db:0e:69:58:49:f3:de: 99:4f:f5:cf:f8:b6:3d:3f:bf:71:0b:20:51:d4:a6:7b:81:f5: 74:46:19:f7:e3:5b:5d:8d:3e:61:0d:4c:cf:26:d2:ff:9f:46: fd:3e:25:85:53:04:ea:bb:e8:6a:70:2c:7f:9e:65:de:ce:73: 6b:9a:32:89:81:08:c5:43:48:c3:2a:42:9a:d3:95:88:d5:ea: eb:b3:08:09:fa:59:70:b9:e3:d6:49:23:e4:6b:83:28:38:aa: 68:86:61:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhcH3xJCzPZFLxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRlMzBmZmMtY2MwZC00YTIwLWJmY2YtZDkwZmM0MDZiZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoguggp2AByOOhUxHMU4+eSqmlQRpm5TE08ca szohnOAB4n/ueMh4+ToMy4RG8HohufZ4eEhudB88Zo+b+LilRyVzZYMwvkn62qIO JqMVVWk8x2Nvq98lt31Vfw8VrLrnPauqFQhJMR6P9bupBuijdDcDMalNWJUVJMCP sd8urE+F5gNvLSPdZ2PBU3Toiz4YPXkPAJCG4dRSmM/2O7ldyBOI3aeYdysW7bOE Zd6CIRu51Ifh9VZe0bSQD3+D7jKqgD2bP6XePBAn3s9yxY254IxO/YYNsbQptI4M 6lxOS+Bv+btNTr6YNIzfxAybrCwDqp2u81Gs13UfGSTj0Ti+SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkkVgcaz0W5gwzyksMif3VXaOQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ5ZWQ3MzEtYjYzNi0z MjBlLTgxODItMzRiMDU5MGM5OTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8utMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0pSJgENK8pV7f6IPjE4BjoUdXbK0gly1pX4g0+MAUWB+nGKp3qssOI V9C6MvwXplEytsXdwP7GFXDH4XntxFKEz8idOdrttTIAsEuSUIJHJE95QOszoqut l5IAb67JEiVsAWN3Mbx3HSQZu7H08Tl169/mmQerTgIkxLno3JhaWWoPxqwfdqxf hzgs3HFRnl/5lOsxYxhY/6QG2w5pWEnz3plP9c/4tj0/v3ELIFHUpnuB9XRGGffj W12NPmENTM8m0v+fRv0+JYVTBOq76GpwLH+eZd7Oc2uaMomBCMVDSMMqQprTlYjV 6uuzCAn6WXC549ZJI+Rrgyg4qmiGYdw= -----END CERTIFICATE-----Generated at Tue Oct 6 23:25:38 2026 by rpki-client