$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc492877-0ce1-34b2-8751-238e5cf88357.roa File: bc492877-0ce1-34b2-8751-238e5cf88357.roa (raw, json) Hash identifier: NStcVlm5APFjlRNnkmayHiFjaP3tayvqNxWRX+VqIoc= Subject key identifier: 1E:11:8A:24:91:09:D7:4B:03:4B:B0:BD:68:89:06:23:85:27:89:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985A9875E2212860EC194E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc492877-0ce1-34b2-8751-238e5cf88357.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.196.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:a9:87:5e:22:12:86:0e:c1:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=99b4b30a-0075-46f1-bbe6-cbd30e0698b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:fc:3a:97:33:fa:ae:e6:dc:1b:21:9e:4f: 92:bb:a4:0f:2c:a2:51:88:e6:f4:45:65:c2:98:e4: f6:5e:6f:f8:08:ba:68:d0:66:14:86:74:d6:91:37: 81:0b:3a:52:b3:56:90:50:8c:55:a8:0b:d3:9a:3a: f9:9a:26:f2:43:79:72:b7:06:e0:f2:a5:ac:70:91: a7:88:6c:76:c4:d4:8b:7e:95:d4:2a:92:5f:3b:8e: c8:bf:b5:78:32:fb:d9:27:bb:81:3c:f2:44:13:2a: 67:2d:23:0f:0b:f1:18:89:47:27:85:92:63:32:f3: 2b:c7:71:8f:2e:3e:23:fa:b9:89:3c:cc:13:90:1e: 07:ef:56:4e:ba:57:58:db:9d:7a:76:b4:45:9a:6c: a6:b8:a9:9a:42:91:32:17:ad:3b:a4:0d:d1:b2:f8: 9a:aa:99:0f:6d:ed:ed:bb:7c:f4:f3:0c:11:44:b7: 90:53:ca:ae:35:d7:91:11:29:df:de:3a:37:5d:ac: 77:fe:d9:e0:74:66:d3:32:f1:f1:af:1a:32:fe:3c: ec:cb:31:b7:8b:0e:e5:ee:49:46:54:84:84:c5:59: 27:37:24:90:71:65:12:51:a1:42:11:f8:64:08:d5: 6c:78:47:94:ca:59:b1:c0:8c:39:17:18:bc:1f:91: 08:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:11:8A:24:91:09:D7:4B:03:4B:B0:BD:68:89:06:23:85:27:89:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc492877-0ce1-34b2-8751-238e5cf88357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:60:69:52:32:15:10:ae:b5:ab:eb:a9:6e:4d:38:89:ad:24: 6a:c9:4c:2f:48:2a:e3:a1:c9:23:99:12:1c:52:64:b5:12:63: 92:6c:60:c8:a6:de:be:65:a5:40:66:0f:f1:c5:51:1e:63:cb: 86:c8:f0:20:c9:ad:36:72:5f:18:30:42:5a:4a:23:fd:18:50: 38:50:8c:8c:ec:ed:14:4b:cc:12:38:d4:9e:67:35:e9:5d:bd: 6e:54:80:7d:52:b4:f1:d5:88:35:d6:04:b9:c2:59:c1:f3:d3: 30:37:06:7e:76:2f:c0:a7:6c:a5:66:d1:29:ad:7f:36:cc:77: 72:54:55:3c:06:eb:6c:8a:c9:a8:9a:7e:02:e6:7b:78:f2:ee: d7:18:d1:a6:c3:09:39:96:a9:ef:b3:13:07:0b:9b:d2:54:24: bb:60:5e:f6:5f:fd:fa:8a:e3:eb:dd:79:6a:d6:3a:a5:de:ea: 3f:44:97:77:cd:74:e1:c0:63:3c:32:ff:0a:66:2d:94:8f:b2: 64:ff:9d:39:26:bc:b8:ca:de:5c:cb:98:4b:42:c0:62:6f:03: 40:75:78:aa:f4:b6:5c:41:4e:7b:f3:10:5a:7a:41:f0:63:f8: 05:f8:bd:ce:db:e9:e9:17:87:96:84:b3:e3:4c:d0:c0:0e:c3: 0c:d7:11:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhamHXiIShg7BlOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTliNGIzMGEtMDA3NS00NmYxLWJiZTYtY2JkMzBlMDY5OGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAj8Opcz+q7m3Bshnk+Su6QPLKJRiOb0RWXC mOT2Xm/4CLpo0GYUhnTWkTeBCzpSs1aQUIxVqAvTmjr5mibyQ3lytwbg8qWscJGn iGx2xNSLfpXUKpJfO47Iv7V4MvvZJ7uBPPJEEypnLSMPC/EYiUcnhZJjMvMrx3GP Lj4j+rmJPMwTkB4H71ZOuldY2516drRFmmymuKmaQpEyF607pA3RsviaqpkPbe3t u3z08wwRRLeQU8quNdeRESnf3jo3Xax3/tngdGbTMvHxrxoy/jzsyzG3iw7l7klG VISExVknNySQcWUSUaFCEfhkCNVseEeUylmxwIw5Fxi8H5EInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4RiiSRCddLA0uwvWiJBiOFJ4npMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmM0OTI4NzctMGNlMS0z NGIyLTg3NTEtMjM4ZTVjZjg4MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8SoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdgaVIyFRCutavrqW5NOImtJGrJTC9IKuOhySOZEhxSZLUSY5JsYMim 3r5lpUBmD/HFUR5jy4bI8CDJrTZyXxgwQlpKI/0YUDhQjIzs7RRLzBI41J5nNeld vW5UgH1StPHViDXWBLnCWcHz0zA3Bn52L8CnbKVm0SmtfzbMd3JUVTwG62yKyaia fgLme3jy7tcY0abDCTmWqe+zEwcLm9JUJLtgXvZf/fqK4+vdeWrWOqXe6j9El3fN dOHAYzwy/wpmLZSPsmT/nTkmvLjK3lzLmEtCwGJvA0B1eKr0tlxBTnvzEFp6QfBj +AX4vc7b6ekXh5aEs+NM0MAOwwzXEZQ= -----END CERTIFICATE-----Generated at Fri Sep 25 19:58:48 2026 by rpki-client