$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c12e51d-8583-388e-8cfa-08f422be2ea7.roa File: 8c12e51d-8583-388e-8cfa-08f422be2ea7.roa (raw, json) Hash identifier: OyIHWfXSUt1ax0WwiWmANtXb/FyEx1G7ba6B4Ov3L6A= Subject key identifier: 57:C5:7D:D0:80:64:CA:77:7A:7C:DF:60:2B:5C:A3:35:56:91:1E:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D7D4D65F9C360EB62B200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c12e51d-8583-388e-8cfa-08f422be2ea7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.197.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:7d:4d:65:f9:c3:60:eb:62:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2f09f63f-7862-4cab-8074-854e0f459bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:3a:30:38:c4:ad:9a:55:5c:e6:9e:bc:3c: 7f:cd:60:09:f6:be:3d:8a:a5:0f:95:78:18:b1:c8: 8c:0b:88:14:4a:b3:69:64:d4:fe:f2:31:f0:6e:40: 71:86:0c:df:78:be:ca:10:d0:88:0b:f9:9d:b5:89: 0c:e1:28:d6:42:5a:c2:19:c8:61:45:22:73:03:ef: ca:6a:ae:6f:34:0a:b6:45:e0:26:f7:db:c8:2a:71: c2:73:6b:0e:44:dd:5b:ac:91:91:dc:a7:da:d7:ff: 3e:48:88:70:a1:e1:f9:01:93:3d:40:78:48:1a:dc: 66:5e:14:f5:24:7c:cd:c1:aa:16:ea:d2:9a:b1:f2: b1:48:41:63:18:dd:b9:d9:de:53:e5:dc:c7:b2:33: 76:ab:56:b5:e3:29:99:02:17:eb:e3:2c:cb:33:4e: 37:60:d8:45:2e:8c:0c:27:f2:70:dc:ea:01:bd:10: d5:4e:ad:e3:ec:76:51:af:29:83:0c:64:7a:57:c1: 78:13:25:4c:ac:b0:27:ce:3d:8a:ec:7a:60:27:a3: fe:31:72:e3:98:e2:a5:a9:71:8a:1a:f1:39:4d:92: 72:a0:70:41:35:3a:5d:ff:ae:5f:f1:4a:c1:37:86: 63:3f:0d:3d:2c:62:7f:53:92:79:9c:e4:bd:11:65: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C5:7D:D0:80:64:CA:77:7A:7C:DF:60:2B:5C:A3:35:56:91:1E:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c12e51d-8583-388e-8cfa-08f422be2ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2c:e1:69:77:28:cd:fd:08:56:b4:e6:75:5a:d7:06:85:20: 9a:90:97:83:a9:9b:7e:57:a5:0d:f6:43:49:42:e9:55:60:a6: 3c:ba:8a:d9:47:9f:c6:43:ca:b4:c1:1a:79:d7:78:01:fe:e3: 30:37:78:f1:6b:d2:cb:7e:1c:28:4b:62:96:4e:3c:c4:01:23: 08:bf:d6:aa:d8:ea:40:b3:03:fe:d0:bb:9b:68:f6:b5:82:63: 88:04:20:95:07:bf:f5:e5:84:45:fe:7b:ba:2c:40:37:24:29: 9d:a8:f7:4d:ba:ec:be:46:36:1a:ae:7c:3b:2a:f3:89:cf:53: e3:a7:79:aa:4d:91:cf:a6:00:d3:2a:b1:af:03:5e:eb:a5:ec: 94:2f:b2:46:76:2d:e0:ae:e1:f3:b2:20:a9:43:d9:3e:b3:4f: 8e:98:e5:08:a7:56:4c:63:08:34:fe:4e:01:ad:d8:3a:85:37: f3:0e:e7:8d:a3:ea:74:55:6b:84:43:27:ae:30:1e:75:f2:df: 33:4b:49:df:b9:15:24:4c:66:6a:91:0c:5e:3f:07:f6:41:6d: 43:32:79:2b:91:8f:b9:f6:e5:76:bd:32:e0:47:b9:84:ae:b0: 70:9c:9b:35:2d:2b:bd:7f:28:c4:f1:2f:43:f4:2a:49:c7:9d: bb:8f:4b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfX1NZfnDYOtisgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmYwOWY2M2YtNzg2Mi00Y2FiLTgwNzQtODU0ZTBmNDU5YmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzg6MDjErZpVXOaevDx/zWAJ9r49iqUPlXgY sciMC4gUSrNpZNT+8jHwbkBxhgzfeL7KENCIC/mdtYkM4SjWQlrCGchhRSJzA+/K aq5vNAq2ReAm99vIKnHCc2sORN1brJGR3Kfa1/8+SIhwoeH5AZM9QHhIGtxmXhT1 JHzNwaoW6tKasfKxSEFjGN252d5T5dzHsjN2q1a14ymZAhfr4yzLM043YNhFLowM J/Jw3OoBvRDVTq3j7HZRrymDDGR6V8F4EyVMrLAnzj2K7HpgJ6P+MXLjmOKlqXGK GvE5TZJyoHBBNTpd/65f8UrBN4ZjPw09LGJ/U5J5nOS9EWXkewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfFfdCAZMp3enzfYCtcozVWkR5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMxMmU1MWQtODU4My0z ODhlLThjZmEtMDhmNDIyYmUyZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEs4Wl3KM39CFa05nVa1waFIJqQl4Opm35XpQ32Q0lC6VVgpjy6itlH n8ZDyrTBGnnXeAH+4zA3ePFr0st+HChLYpZOPMQBIwi/1qrY6kCzA/7Qu5to9rWC Y4gEIJUHv/XlhEX+e7osQDckKZ2o90267L5GNhqufDsq84nPU+OneapNkc+mANMq sa8DXuul7JQvskZ2LeCu4fOyIKlD2T6zT46Y5QinVkxjCDT+TgGt2DqFN/MO542j 6nRVa4RDJ64wHnXy3zNLSd+5FSRMZmqRDF4/B/ZBbUMyeSuRj7n25Xa9MuBHuYSu sHCcmzUtK71/KMTxL0P0KknHnbuPSws= -----END CERTIFICATE-----Generated at Fri Sep 25 20:17:14 2026 by rpki-client