$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd4915b8-19ab-30e3-96a5-33b8a6f990a0.roa File: bd4915b8-19ab-30e3-96a5-33b8a6f990a0.roa (raw, json) Hash identifier: EiMhbRpQ4Rho2D6Ywt2q/PDngROA6970HV2O2WqG8A8= Subject key identifier: 33:CE:5D:3A:7D:48:94:E6:BB:65:2C:05:D6:4E:02:3D:B4:C0:AE:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D534F8BC020AE0F619940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd4915b8-19ab-30e3-96a5-33b8a6f990a0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.62.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:53:4f:8b:c0:20:ae:0f:61:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=89564f6c-0d1a-4587-8b1a-1e8ad1f2ac34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:48:16:93:1a:46:d8:8e:19:ed:29:61:a7: 16:5a:4b:46:7e:f6:13:7a:fe:12:62:d8:5c:bb:78: 9f:14:89:e9:86:76:be:e7:ba:29:d4:2a:23:86:9c: 33:6e:e8:0f:ff:9b:ae:52:13:7f:d3:64:94:1a:71: e7:d0:bc:b9:e0:1d:ac:91:75:78:12:96:d9:84:98: af:b0:0e:de:28:b6:b4:09:72:75:33:4b:d1:2c:d5: fe:11:7c:53:f1:69:1b:95:b3:e3:c3:e4:a8:b5:81: 08:7d:11:42:cd:fe:0a:5d:6a:22:95:69:f2:07:ee: 9a:ff:06:26:a8:45:55:e9:bb:b5:28:b2:b6:af:c9: 43:2b:2e:b6:2a:34:db:fd:b2:94:d4:c7:3e:a9:9a: bc:4e:21:16:2d:cf:c5:fd:f9:50:fc:4c:87:62:46: 48:76:a4:5a:d0:dc:d5:b8:69:55:08:8a:fc:27:59: d5:47:32:ec:f7:82:a2:5e:79:72:e9:ad:66:ec:1f: 70:10:04:b2:c5:19:e4:ef:82:e2:87:a0:f2:15:f1: e5:65:37:49:ee:f5:a7:1f:a6:c7:09:d7:3c:e9:ff: 99:3c:75:d8:c9:ec:aa:cb:c1:c8:86:93:3a:3e:58: 3a:0e:96:a0:3a:20:3a:40:e5:e7:10:d8:62:52:58: 6a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CE:5D:3A:7D:48:94:E6:BB:65:2C:05:D6:4E:02:3D:B4:C0:AE:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd4915b8-19ab-30e3-96a5-33b8a6f990a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:eb:38:a4:fa:7d:68:6a:e0:90:a0:90:26:1c:cd:bf:e7:3c: d1:b8:d4:da:46:95:61:11:0b:9f:dd:f2:75:c9:3f:ba:55:26: 60:7d:6f:cc:ab:bd:fd:7b:06:76:b8:eb:72:51:09:15:42:83: f2:47:d4:e5:97:81:e2:b4:a6:39:1a:96:4b:c3:37:d7:b2:ba: e7:fc:1d:e6:e2:53:86:64:3e:29:ba:75:60:fb:cf:5c:50:39: 54:df:47:15:0f:ba:19:ec:75:e2:54:2f:5b:33:fa:da:a8:0c: 5c:57:3d:8a:97:17:96:13:f4:88:50:6c:28:e6:52:d2:1e:53: ae:02:a5:20:2d:44:bc:76:e1:d8:36:0c:4f:2d:a3:4c:fd:08: a9:ab:3a:08:fd:22:5f:bc:24:9f:26:be:59:e6:bf:8f:81:d5: e7:24:7d:03:be:1f:44:a1:ca:90:b4:a2:96:bf:72:3f:2b:a7: e3:5c:e5:01:e0:5e:6b:68:b3:84:6a:fc:fd:98:b2:ce:7e:ab: 78:ec:9e:cb:b8:f7:4b:e4:23:7c:1c:e9:0c:c1:5b:f2:11:a5: 1d:b5:f1:08:c5:50:89:c0:22:7c:50:40:5b:d0:5b:be:03:a4: 57:b9:f2:1b:a1:f6:64:af:f9:15:30:3f:20:2b:30:f6:41:c9: c0:4a:0d:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfVNPi8Agrg9hmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODk1NjRmNmMtMGQxYS00NTg3LThiMWEtMWU4YWQxZjJhYzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP9IFpMaRtiOGe0pYacWWktGfvYTev4SYthc u3ifFInphna+57op1CojhpwzbugP/5uuUhN/02SUGnHn0Ly54B2skXV4EpbZhJiv sA7eKLa0CXJ1M0vRLNX+EXxT8WkblbPjw+SotYEIfRFCzf4KXWoilWnyB+6a/wYm qEVV6bu1KLK2r8lDKy62KjTb/bKU1Mc+qZq8TiEWLc/F/flQ/EyHYkZIdqRa0NzV uGlVCIr8J1nVRzLs94KiXnly6a1m7B9wEASyxRnk74Lih6DyFfHlZTdJ7vWnH6bH Cdc86f+ZPHXYyeyqy8HIhpM6Plg6DpagOiA6QOXnENhiUlhqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPOXTp9SJTmu2UsBdZOAj20wK5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQ0OTE1YjgtMTlhYi0z MGUzLTk2YTUtMzNiOGE2Zjk5MGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3rOKT6fWhq4JCgkCYczb/nPNG41NpGlWERC5/d8nXJP7pVJmB9b8yr vf17Bna463JRCRVCg/JH1OWXgeK0pjkalkvDN9eyuuf8HebiU4ZkPim6dWD7z1xQ OVTfRxUPuhnsdeJUL1sz+tqoDFxXPYqXF5YT9IhQbCjmUtIeU64CpSAtRLx24dg2 DE8to0z9CKmrOgj9Il+8JJ8mvlnmv4+B1eckfQO+H0ShypC0opa/cj8rp+Nc5QHg Xmtos4Rq/P2Yss5+q3jsnsu490vkI3wc6QzBW/IRpR218QjFUInAInxQQFvQW74D pFe58huh9mSv+RUwPyArMPZBycBKDaA= -----END CERTIFICATE-----Generated at Sun Sep 27 12:02:13 2026 by rpki-client