$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e3aa53-164e-3074-8acd-4e9791931c4a.roa File: a5e3aa53-164e-3074-8acd-4e9791931c4a.roa (raw, json) Hash identifier: 8rnHVgGdcG9fj9AyF7z4rYo8d3dbECIZ3YULBR9mo1I= Subject key identifier: 87:EE:C3:F7:A9:74:24:42:97:DC:64:FF:A4:99:A7:07:0E:02:BA:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985AABFA690F8EF88372300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e3aa53-164e-3074-8acd-4e9791931c4a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.197.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:aa:bf:a6:90:f8:ef:88:37:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f2fd4446-4d15-4844-bd5e-3f1630ed5671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:63:bf:8e:fc:77:f6:8f:0f:53:5f:85:68: 74:59:00:ab:01:b3:c8:ff:ce:ca:04:9c:ac:26:2b: 74:10:29:90:df:20:bd:d5:3c:dc:62:1d:7f:b4:0c: b8:19:07:ee:e5:56:48:88:4f:8b:0f:4d:ff:d7:90: 76:ca:0c:d2:56:15:96:ad:66:e9:b3:71:19:42:4a: 2e:d1:fa:af:a8:61:ca:76:81:a9:57:e6:b3:fa:cd: 0e:df:36:91:5a:58:2c:3f:47:46:ef:98:17:2c:f8: d4:92:6c:a4:f3:ef:e7:4c:b6:aa:12:82:33:65:f6: 67:79:21:80:a2:bc:68:51:a1:ad:37:92:42:a0:80: c9:64:e6:73:9b:e0:4e:75:58:ad:11:e0:ab:c9:81: b8:30:81:b3:4a:0b:b0:40:a3:f9:9b:00:1e:16:60: 0e:ee:89:ef:77:d2:f5:75:7a:f3:37:95:34:52:d2: 7e:58:55:d3:bf:13:18:90:79:ce:29:5d:f4:58:39: 34:02:2c:4e:c9:b5:81:c7:57:06:d0:09:f3:d1:69: 9e:c3:aa:39:45:ff:2d:c6:2f:3b:5d:8f:92:b6:41: ae:03:38:36:03:2e:57:88:48:80:f9:aa:d7:8c:e7: 01:e6:e3:c8:f4:c5:a5:f5:94:6d:ea:3c:c0:dd:ea: 1e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EE:C3:F7:A9:74:24:42:97:DC:64:FF:A4:99:A7:07:0E:02:BA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e3aa53-164e-3074-8acd-4e9791931c4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fd:ad:09:01:9e:89:8d:49:87:d1:db:81:fa:42:ce:d0:85: f1:29:18:e1:78:fd:dc:70:7b:85:33:9c:90:1a:7e:ac:2c:d1: 61:a0:ca:17:18:5c:1c:80:c0:83:9d:36:9b:40:d5:0e:48:9c: 69:60:f3:15:e4:08:85:4e:18:a1:d3:25:ee:6f:76:41:d0:9b: 6f:66:40:14:92:68:91:ad:ba:65:f9:9d:89:33:d1:59:73:02: 74:d7:eb:b0:a5:2f:83:1c:1e:61:35:98:87:48:42:b0:f3:38: a8:59:ff:1e:8f:dd:25:90:8e:d5:21:99:39:cd:08:90:d2:f6: 70:12:3e:21:b3:07:6a:e7:2c:6a:b4:b1:43:f2:2a:2a:c3:2f: e2:a3:e4:88:8d:ad:38:b6:46:d7:24:bc:e5:e2:5e:8e:84:95: 4d:44:b9:df:ed:5f:5c:86:ef:d5:33:7c:98:b4:97:4d:a7:b9: 75:10:ba:c2:08:5f:b9:19:6f:16:9d:2f:66:80:39:db:10:25: 8f:2f:7d:02:97:50:34:d4:0e:d8:15:a7:5b:e6:0b:7d:fe:99: 20:b1:6b:31:14:7c:b2:28:8f:55:43:58:53:b8:b5:17:33:1a: bc:af:6c:de:b2:7e:6b:12:44:1d:10:91:17:79:6f:a0:fa:81: 97:cf:2d:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhaq/ppD474g3IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjJmZDQ0NDYtNGQxNS00ODQ0LWJkNWUtM2YxNjMwZWQ1NjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpBjv478d/aPD1NfhWh0WQCrAbPI/87KBJys Jit0ECmQ3yC91TzcYh1/tAy4GQfu5VZIiE+LD03/15B2ygzSVhWWrWbps3EZQkou 0fqvqGHKdoGpV+az+s0O3zaRWlgsP0dG75gXLPjUkmyk8+/nTLaqEoIzZfZneSGA orxoUaGtN5JCoIDJZOZzm+BOdVitEeCryYG4MIGzSguwQKP5mwAeFmAO7onvd9L1 dXrzN5U0UtJ+WFXTvxMYkHnOKV30WDk0AixOybWBx1cG0Anz0Wmew6o5Rf8txi87 XY+StkGuAzg2Ay5XiEiA+arXjOcB5uPI9MWl9ZRt6jzA3eoeFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfuw/epdCRCl9xk/6SZpwcOArpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTVlM2FhNTMtMTY0ZS0z MDc0LThhY2QtNGU5NzkxOTMxYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8UfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL9rQkBnomNSYfR24H6Qs7QhfEpGOF4/dxwe4UznJAafqws0WGgyhcY XByAwIOdNptA1Q5InGlg8xXkCIVOGKHTJe5vdkHQm29mQBSSaJGtumX5nYkz0Vlz AnTX67ClL4McHmE1mIdIQrDzOKhZ/x6P3SWQjtUhmTnNCJDS9nASPiGzB2rnLGq0 sUPyKirDL+Kj5IiNrTi2RtckvOXiXo6ElU1Eud/tX1yG79UzfJi0l02nuXUQusII X7kZbxadL2aAOdsQJY8vfQKXUDTUDtgVp1vmC33+mSCxazEUfLIoj1VDWFO4tRcz GryvbN6yfmsSRB0QkRd5b6D6gZfPLcg= -----END CERTIFICATE-----Generated at Sat Sep 26 00:38:06 2026 by rpki-client