$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7c0c967-c4a9-3274-b772-97c3b4e2b7f3.roa File: b7c0c967-c4a9-3274-b772-97c3b4e2b7f3.roa (raw, json) Hash identifier: vwfJ5sqB/5BCNh8PWk8koQnL9c1Q9zR+Bo2+BGqMbfA= Subject key identifier: 25:31:FD:41:C8:23:1A:EF:55:56:0A:09:BB:A4:EE:D9:D9:00:E7:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F46F98916D924BA9EB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7c0c967-c4a9-3274-b772-97c3b4e2b7f3.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.41.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f4:6f:98:91:6d:92:4b:a9:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=bfaabfaa-e86b-4810-819c-69779436be98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:fd:52:00:cd:1d:76:54:c9:b6:a9:63:cf: 8c:66:93:c9:3f:ff:0c:71:bb:d7:b7:b4:40:78:7a: 22:40:6d:d1:eb:6b:c7:10:b2:ed:3f:af:04:f4:a0: 00:fb:f3:ef:a3:41:f3:6f:4d:9b:63:80:67:a7:4d: 39:59:40:9e:c5:78:c4:a5:09:e9:a1:92:be:5f:3b: 74:3a:a2:dd:c4:6b:1a:4c:e2:66:96:e3:96:d3:41: 6b:6f:f4:2f:47:a4:81:b3:7e:85:7e:2b:f8:5f:da: a6:6f:9f:30:30:3e:82:ea:1a:f2:ff:bc:93:5f:39: 02:e3:cb:8c:c2:f9:6a:dc:4e:9f:89:0e:1f:a6:b6: 9f:ed:1e:3a:f6:c4:d5:5e:08:ed:d0:ad:e2:b1:1a: 07:7f:c0:2d:2f:bf:0e:dc:c6:3a:ac:9d:48:e8:fd: 43:98:aa:fa:ba:bb:2d:bf:7c:6e:08:a9:6f:19:e4: 41:b9:d4:cf:03:2f:da:4c:76:47:2b:18:0c:01:6d: d3:5b:16:b7:04:c7:3b:d0:4b:c3:86:69:fe:34:e1: 3c:ac:1a:df:9f:1e:37:6d:9d:50:07:d2:40:3c:45: 05:52:20:9c:1e:8e:98:d1:a3:34:a1:84:d9:bd:43: b9:90:b5:20:28:b3:42:f8:d7:57:5c:82:fe:ef:19: f4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:31:FD:41:C8:23:1A:EF:55:56:0A:09:BB:A4:EE:D9:D9:00:E7:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7c0c967-c4a9-3274-b772-97c3b4e2b7f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1b:7e:0f:c4:fe:32:5e:da:97:fa:12:fa:85:5a:39:f2:cd: 0f:66:5d:b1:59:ce:bb:e9:da:65:69:7d:78:c0:f9:23:61:68: 7d:24:cd:b0:f0:20:fb:25:63:2c:d8:20:e9:29:e7:c8:d2:b1: 0d:77:50:3f:55:01:b9:6b:94:8a:39:7f:ee:85:64:d0:e7:32: 6c:f0:a1:c1:35:7b:f6:92:fa:93:a2:06:0c:8e:e2:23:e2:30: c7:f2:58:ba:38:29:17:7e:a1:c6:e0:55:bd:c4:68:52:5f:06: f5:be:ce:39:cb:36:cb:88:e0:a0:c2:d2:dc:a5:98:4a:7a:3e: 97:96:cf:34:6c:56:3a:39:c5:3d:ce:d1:f7:1a:41:63:a7:83: 2d:0c:05:db:68:00:f9:26:74:78:30:e5:a1:4b:8c:f8:db:8a: 82:26:ed:3c:54:5c:ee:fd:51:6a:fe:22:66:cb:f3:3c:94:c4: 7b:f2:96:4a:fe:0d:20:f1:e8:af:1f:32:d8:d6:f8:26:09:cb: 3d:0c:8e:03:a8:db:cc:46:04:88:c5:72:e4:bb:31:9e:11:59: 51:94:b8:cf:10:21:2d:10:b5:18:4f:23:23:7f:26:ce:6e:1d: de:6d:9c:8a:d9:fe:6b:ff:0c:bb:e3:8d:c8:64:b1:52:70:db: 0a:d8:17:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/RvmJFtkkup6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YmZhYWJmYWEtZTg2Yi00ODEwLTgxOWMtNjk3Nzk0MzZiZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp839UgDNHXZUybapY8+MZpPJP/8McbvXt7RA eHoiQG3R62vHELLtP68E9KAA+/Pvo0Hzb02bY4Bnp005WUCexXjEpQnpoZK+Xzt0 OqLdxGsaTOJmluOW00Frb/QvR6SBs36Ffiv4X9qmb58wMD6C6hry/7yTXzkC48uM wvlq3E6fiQ4fpraf7R469sTVXgjt0K3isRoHf8AtL78O3MY6rJ1I6P1DmKr6urst v3xuCKlvGeRBudTPAy/aTHZHKxgMAW3TWxa3BMc70EvDhmn+NOE8rBrfnx43bZ1Q B9JAPEUFUiCcHo6Y0aM0oYTZvUO5kLUgKLNC+NdXXIL+7xn0dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUx/UHIIxrvVVYKCbuk7tnZAOdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjdjMGM5NjctYzRhOS0z Mjc0LWI3NzItOTdjM2I0ZTJiN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFymnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEbfg/E/jJe2pf6EvqFWjnyzQ9mXbFZzrvp2mVpfXjA+SNhaH0kzbDw IPslYyzYIOkp58jSsQ13UD9VAblrlIo5f+6FZNDnMmzwocE1e/aS+pOiBgyO4iPi MMfyWLo4KRd+ocbgVb3EaFJfBvW+zjnLNsuI4KDC0tylmEp6PpeWzzRsVjo5xT3O 0fcaQWOngy0MBdtoAPkmdHgw5aFLjPjbioIm7TxUXO79UWr+ImbL8zyUxHvylkr+ DSDx6K8fMtjW+CYJyz0MjgOo28xGBIjFcuS7MZ4RWVGUuM8QIS0QtRhPIyN/Js5u Hd5tnIrZ/mv/DLvjjchksVJw2wrYF6k= -----END CERTIFICATE-----Generated at Thu Sep 24 02:51:13 2026 by rpki-client