$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa File: a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa (raw, json) Hash identifier: IGBjEyefBTYc0Oa5ep0HNeOP+bRhB7q32yxp9SLZ/q8= Subject key identifier: 40:3F:AC:67:11:4A:95:4F:54:BD:C7:DD:C0:3B:D6:AA:9A:3B:ED:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497DAB39F5768E1681DC9380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.201.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:ab:39:f5:76:8e:16:81:dc:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a733327-fa97-418d-b8c3-e439899f63aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:54:5d:af:0d:7d:22:74:f8:4c:c7:34:43: 8b:64:a1:c1:10:d2:67:fb:3d:83:78:25:06:bb:cb: 38:0d:4c:2c:f3:a0:2b:dd:29:43:a2:e4:7e:aa:c9: 45:88:27:cf:ab:88:7c:de:11:21:0f:e4:13:c5:ea: 89:45:0f:cf:ea:2c:bd:e5:b8:e2:bb:e2:ef:25:bc: 89:15:7a:f1:dd:a6:9f:ab:15:85:6a:6a:a9:1e:03: eb:65:1c:8a:88:93:bf:e2:6e:3a:19:4e:54:b2:7a: 05:63:a7:da:e7:37:89:2f:fd:be:4f:11:98:b2:10: dd:c6:c3:cd:cd:06:68:b3:17:3b:91:66:36:96:3a: c0:50:99:4d:bb:82:9f:b3:02:42:4d:16:7b:e0:e6: 7e:20:f1:18:bf:28:fb:8f:6a:dc:dc:86:de:31:06: 7a:b0:5c:32:70:eb:1d:57:d1:31:f9:75:c4:9b:8e: 00:70:c8:83:42:3b:0a:f4:7a:a5:9b:2d:f7:ea:bc: 5e:a5:09:0e:ee:94:d2:f8:e5:d4:b5:0a:f9:0e:9a: 58:7e:9b:96:0c:47:7f:fe:18:12:60:ab:f4:8b:7a: 93:27:c3:6d:70:6e:cc:6d:18:83:b5:f9:7e:0d:08: eb:d4:03:8b:b3:4d:88:69:de:e5:f9:aa:06:5b:48: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3F:AC:67:11:4A:95:4F:54:BD:C7:DD:C0:3B:D6:AA:9A:3B:ED:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a572a0b1-1a57-3e9f-9b15-b285f4ec3fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a5:62:96:73:12:69:c0:05:62:6b:4c:69:9c:ab:a1:2d:6a: 90:11:ed:04:d9:75:0e:3e:76:69:46:51:4d:66:19:06:8c:8c: 15:aa:c8:3a:e3:43:96:60:54:fb:41:4a:75:fb:22:56:3b:53: 1d:e7:6d:f4:ec:39:a2:d4:2e:ed:d4:d6:22:09:68:89:5f:3a: 9f:00:3b:fc:91:02:42:15:e0:b2:44:56:90:55:fa:32:4c:c7: 66:b8:d5:c5:22:aa:4f:f2:23:30:17:12:f4:2b:3f:bd:62:e6: a5:fd:9c:36:e2:a2:2f:f8:f2:71:77:ae:b1:ab:65:39:2b:ba: c7:ac:f9:ce:e0:76:a9:be:b7:6d:8b:d7:a4:22:3e:1f:7a:76: d7:ac:f0:4b:ba:be:af:6b:96:ea:4d:04:af:0e:74:03:c3:73: 7d:68:25:ed:40:20:bf:67:3e:9c:9a:f7:d6:af:d8:a0:83:8c: 3d:c1:29:cf:44:5c:0c:d9:ee:1b:a3:27:a2:da:86:38:c1:93: 19:25:d1:e7:b8:a6:87:38:fc:7d:f8:14:6d:06:7b:c9:ba:f0: 46:d0:31:3e:a8:5f:81:25:86:99:03:bf:fd:eb:48:b1:f0:b4: a5:6e:e9:82:08:37:db:2d:9a:cb:8c:79:9f:3f:d0:0d:ca:24: 36:ca:11:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfas59XaOFoHck4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGE3MzMzMjctZmE5Ny00MThkLWI4YzMtZTQzOTg5OWY2M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOlUXa8NfSJ0+EzHNEOLZKHBENJn+z2DeCUG u8s4DUws86Ar3SlDouR+qslFiCfPq4h83hEhD+QTxeqJRQ/P6iy95bjiu+LvJbyJ FXrx3aafqxWFamqpHgPrZRyKiJO/4m46GU5UsnoFY6fa5zeJL/2+TxGYshDdxsPN zQZosxc7kWY2ljrAUJlNu4KfswJCTRZ74OZ+IPEYvyj7j2rc3IbeMQZ6sFwycOsd V9Ex+XXEm44AcMiDQjsK9Hqlmy336rxepQkO7pTS+OXUtQr5DppYfpuWDEd//hgS YKv0i3qTJ8NtcG7MbRiDtfl+DQjr1AOLs02Iad7l+aoGW0gDSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA/rGcRSpVPVL3H3cA71qqaO+1rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTU3MmEwYjEtMWE1Ny0z ZTlmLTliMTUtYjI4NWY0ZWMzZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHelYpZzEmnABWJrTGmcq6EtapAR7QTZdQ4+dmlGUU1mGQaMjBWqyDrj Q5ZgVPtBSnX7IlY7Ux3nbfTsOaLULu3U1iIJaIlfOp8AO/yRAkIV4LJEVpBV+jJM x2a41cUiqk/yIzAXEvQrP71i5qX9nDbioi/48nF3rrGrZTkruses+c7gdqm+t22L 16QiPh96dtes8Eu6vq9rlupNBK8OdAPDc31oJe1AIL9nPpya99av2KCDjD3BKc9E XAzZ7hujJ6LahjjBkxkl0ee4poc4/H34FG0Ge8m68EbQMT6oX4ElhpkDv/3rSLHw tKVu6YIIN9stmsuMeZ8/0A3KJDbKETg= -----END CERTIFICATE-----Generated at Fri Sep 25 07:11:34 2026 by rpki-client