$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84bf5abf-8463-33fb-a5b5-8746a4d031d0.roa File: 84bf5abf-8463-33fb-a5b5-8746a4d031d0.roa (raw, json) Hash identifier: ctEHGX8z7s/uIT4AvboqX5L1hUAFlUbMfxdmObAuGtw= Subject key identifier: D0:D9:23:74:9F:41:37:E1:F4:F5:D7:18:A7:E7:04:5E:44:B3:B8:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D7FFD4FC0EE5E73DA48D6 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84bf5abf-8463-33fb-a5b5-8746a4d031d0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.199.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:7f:fd:4f:c0:ee:5e:73:da:48:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a1831eb-10e5-4ad2-94dc-0c884f05aa98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:e8:d8:6b:cb:5c:06:12:74:42:88:7e:a8: 23:54:1e:26:a9:46:ee:5c:03:fe:d3:fc:6b:92:b2: 1b:e4:0f:0a:28:90:33:40:e5:31:34:bf:25:af:79: cd:fd:3b:9a:b0:45:93:28:79:a3:af:42:aa:ae:4f: 0f:25:f6:0b:d3:55:7c:a1:c6:5b:26:8a:45:49:7c: 3c:04:b7:98:f3:41:7f:fa:2f:1c:fb:6a:e5:1c:af: a1:b0:34:b1:a5:27:5b:9f:9e:fa:0a:22:9d:ed:78: 1d:03:fe:1e:b2:6e:14:70:b5:8f:24:3f:e4:11:58: 97:42:6e:95:27:bb:7a:96:7e:aa:f6:43:23:b9:2f: f6:7e:f1:9d:dd:62:f6:d3:c2:e9:2b:fd:e8:55:3e: 76:16:f3:9d:12:fd:83:9c:b0:4a:54:6c:3a:6f:df: 8d:77:19:0f:c8:be:28:a2:6e:70:75:c7:dc:6c:91: c7:f5:94:f3:5e:ab:6a:43:7e:fc:63:3e:15:c2:96: cc:4f:84:09:ea:62:2c:50:d4:ea:74:73:ab:da:8f: bd:33:ca:2f:00:69:12:10:22:7a:e2:63:04:3c:6c: e3:65:3b:f2:20:5e:9c:a8:b3:17:62:3f:4a:46:1f: 53:cd:2d:e6:78:8a:ff:da:9c:20:65:a4:64:e8:cc: b3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D9:23:74:9F:41:37:E1:F4:F5:D7:18:A7:E7:04:5E:44:B3:B8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84bf5abf-8463-33fb-a5b5-8746a4d031d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.199.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4b:b9:c2:74:57:98:66:14:70:c1:fe:67:fd:66:50:ab:d5: 9c:d2:b5:24:be:02:3c:24:74:d9:bb:2f:ad:41:26:e8:18:a3: 37:88:b8:12:b1:a1:57:4a:36:83:f5:3c:43:b4:e7:fc:dd:83: 32:14:cb:4d:3c:c9:bf:27:d8:37:8a:f9:c5:bf:a4:36:3d:f8: 02:28:94:91:75:fb:70:ae:76:a8:d8:77:ac:22:4e:c0:7c:6d: f1:05:f5:37:c1:4b:8d:ac:f5:fc:a1:08:3f:0d:12:74:26:90: 87:c2:06:99:67:d3:a5:e8:2f:a9:fa:0e:7b:3c:54:b3:5d:9d: d6:c6:f6:62:cb:3e:d5:dc:7f:11:af:a6:80:ba:fb:79:f5:94: 10:bd:89:46:e1:94:7e:b2:2b:ae:cc:47:66:87:17:dd:53:2f: d8:04:b6:bf:ab:0e:da:06:bf:38:ee:91:13:d0:bc:bd:8b:c3: 79:09:a4:e6:41:6a:01:41:94:32:14:6a:e5:7f:c5:c9:88:f3: e6:31:24:72:8c:a4:bd:4a:ca:8d:c2:67:3a:1d:b0:d1:0d:e3: 2a:81:b1:53:ac:fb:ea:93:31:d2:46:e5:d9:13:79:e9:35:87: f5:93:9d:1f:49:62:7e:6e:bc:5d:49:b3:7a:06:a1:9c:c0:9e: d4:c1:97:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfX/9T8DuXnPaSNYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGExODMxZWItMTBlNS00YWQyLTk0ZGMtMGM4ODRmMDVhYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTLo2GvLXAYSdEKIfqgjVB4mqUbuXAP+0/xr krIb5A8KKJAzQOUxNL8lr3nN/TuasEWTKHmjr0Kqrk8PJfYL01V8ocZbJopFSXw8 BLeY80F/+i8c+2rlHK+hsDSxpSdbn576CiKd7XgdA/4esm4UcLWPJD/kEViXQm6V J7t6ln6q9kMjuS/2fvGd3WL208LpK/3oVT52FvOdEv2DnLBKVGw6b9+NdxkPyL4o om5wdcfcbJHH9ZTzXqtqQ378Yz4VwpbMT4QJ6mIsUNTqdHOr2o+9M8ovAGkSECJ6 4mMEPGzjZTvyIF6cqLMXYj9KRh9TzS3meIr/2pwgZaRk6MyzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDZI3SfQTfh9PXXGKfnBF5Es7huMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODRiZjVhYmYtODQ2My0z M2ZiLWE1YjUtODc0NmE0ZDAzMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8cIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9LucJ0V5hmFHDB/mf9ZlCr1ZzStSS+AjwkdNm7L61BJugYozeIuBKx oVdKNoP1PEO05/zdgzIUy008yb8n2DeK+cW/pDY9+AIolJF1+3CudqjYd6wiTsB8 bfEF9TfBS42s9fyhCD8NEnQmkIfCBpln06XoL6n6Dns8VLNdndbG9mLLPtXcfxGv poC6+3n1lBC9iUbhlH6yK67MR2aHF91TL9gEtr+rDtoGvzjukRPQvL2Lw3kJpOZB agFBlDIUauV/xcmI8+YxJHKMpL1Kyo3CZzodsNEN4yqBsVOs++qTMdJG5dkTeek1 h/WTnR9JYn5uvF1Js3oGoZzAntTBl/M= -----END CERTIFICATE-----Generated at Fri Sep 25 22:41:44 2026 by rpki-client