$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa File: 867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa (raw, json) Hash identifier: TmrGOViiHBOi4JzW4nwZ6DOUwzb8/VVXMKyOnhRxm4A= Subject key identifier: 16:BA:54:D1:4F:79:E2:9A:1D:E7:72:CC:92:21:0E:93:11:5C:0C:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F11A13A8E6B2B5AD458A15580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 45899 IP address blocks: 23.32.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:3a:8e:6b:2b:5a:d4:58:a1:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f5433022-4267-4909-ae8c-33084a4e9718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:5c:1f:3f:ae:62:de:ff:f0:61:5a:ce:99: 25:ef:5d:5a:47:a7:57:b3:a5:70:26:d0:d4:6f:fb: a3:ce:96:3b:4a:a4:05:06:9f:04:56:c9:ad:79:55: 80:91:23:26:0c:8a:6e:f0:0e:7f:93:ff:99:2f:d1: d8:ea:ee:dd:c7:33:ae:47:97:3a:38:8a:df:67:b2: 9b:92:16:a7:7a:79:95:94:30:4c:bf:ab:59:37:ac: 06:b9:d3:3a:22:90:1e:67:b8:06:ca:5b:f3:e8:89: 49:5d:29:1f:d0:87:d8:f8:64:3a:6e:20:1a:9d:87: e9:ec:58:b0:ef:f9:4f:29:d6:a4:8b:39:bb:6a:de: c9:77:be:ac:cc:d1:9a:f2:e9:71:4d:4e:4f:40:c9: c3:1b:32:8e:47:81:a0:7b:8e:c2:31:24:c0:fc:0f: 4b:af:96:24:3a:b5:51:c9:52:e3:09:80:e2:82:8f: 3b:f3:e9:9b:18:43:17:fe:2e:43:1a:52:d6:3b:3e: 78:5c:9d:02:23:34:f0:94:7b:27:80:37:4e:79:6e: 29:fb:b9:1c:d5:a5:c7:9e:d4:ae:08:a1:29:44:b9: 41:29:49:6c:2b:35:1d:c0:2c:ef:38:30:66:b1:7c: da:0b:72:ba:08:68:12:f7:9a:90:3b:81:77:ac:c6: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BA:54:D1:4F:79:E2:9A:1D:E7:72:CC:92:21:0E:93:11:5C:0C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/867e4fa6-dc6f-311d-a0a1-13ef3472b803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f3:5f:ec:d7:69:90:17:72:f5:a6:3c:89:15:0a:9b:dc:04: fb:e2:86:4b:9b:15:ef:f4:6e:a2:e7:87:47:1f:0a:99:2c:e5: d6:49:fc:6b:dc:26:0f:80:e3:c8:11:77:45:ff:ce:1c:b2:72: b3:ac:66:18:2b:32:2d:9b:50:17:91:96:c0:ac:ef:53:89:cf: fa:e7:a1:07:50:68:2a:99:42:ce:29:5f:4c:f1:16:0c:21:eb: 7d:cd:29:be:f9:49:8b:cb:ef:f2:0f:bb:a5:fa:13:80:05:d1: d7:6d:15:ca:38:cf:64:47:cb:b9:91:48:2c:57:58:1d:66:f4: 2c:30:2f:04:63:0d:46:cf:63:87:08:6a:26:a2:a7:b6:1b:57: 63:9d:5c:7b:e8:c1:33:35:15:30:09:39:ba:f6:1b:5a:c9:3b: 12:65:c0:ac:5f:2c:88:7a:33:b5:14:6a:ca:9f:cf:6b:22:fe: cc:b2:3d:ee:4a:a6:26:b5:db:8f:d8:a7:03:e9:42:70:ab:52: 0b:f7:dd:35:28:53:e0:cd:0b:c5:ec:6c:d4:70:6e:2c:2c:6d: 6f:66:43:d5:7e:32:1b:e2:a4:4e:ba:cf:41:79:17:87:ed:e8: 68:3e:6a:f5:74:ba:cc:a2:7b:19:e6:be:f4:92:34:ef:d2:a9: 14:ac:1d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoTqOayta1FihVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjU0MzMwMjItNDI2Ny00OTA5LWFlOGMtMzMwODRhNGU5NzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAZcHz+uYt7/8GFazpkl711aR6dXs6VwJtDU b/ujzpY7SqQFBp8EVsmteVWAkSMmDIpu8A5/k/+ZL9HY6u7dxzOuR5c6OIrfZ7Kb khanenmVlDBMv6tZN6wGudM6IpAeZ7gGylvz6IlJXSkf0IfY+GQ6biAanYfp7Fiw 7/lPKdakizm7at7Jd76szNGa8ulxTU5PQMnDGzKOR4Gge47CMSTA/A9Lr5YkOrVR yVLjCYDigo878+mbGEMX/i5DGlLWOz54XJ0CIzTwlHsngDdOeW4p+7kc1aXHntSu CKEpRLlBKUlsKzUdwCzvODBmsXzaC3K6CGgS95qQO4F3rMY0iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa6VNFPeeKaHedyzJIhDpMRXAxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODY3ZTRmYTYtZGM2Zi0z MTFkLWEwYTEtMTNlZjM0NzJiODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyD5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLzX+zXaZAXcvWmPIkVCpvcBPvihkubFe/0bqLnh0cfCpks5dZJ/Gvc Jg+A48gRd0X/zhyycrOsZhgrMi2bUBeRlsCs71OJz/rnoQdQaCqZQs4pX0zxFgwh 633NKb75SYvL7/IPu6X6E4AF0ddtFco4z2RHy7mRSCxXWB1m9CwwLwRjDUbPY4cI aiaip7YbV2OdXHvowTM1FTAJObr2G1rJOxJlwKxfLIh6M7UUasqfz2si/syyPe5K pia124/YpwPpQnCrUgv33TUoU+DNC8XsbNRwbiwsbW9mQ9V+MhvipE66z0F5F4ft 6Gg+avV0usyiexnmvvSSNO/SqRSsHWg= -----END CERTIFICATE-----Generated at Fri Sep 25 05:27:30 2026 by rpki-client