$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd7f4f6f-0938-352a-bb58-445c68159690.roa File: bd7f4f6f-0938-352a-bb58-445c68159690.roa (raw, json) Hash identifier: RfLIC7Uu10Eqa5Xp5xEPm+3GdDbmHVZEa0Qx3H49mDM= Subject key identifier: AE:14:C3:E0:80:CF:06:1C:3D:85:6F:83:8E:AE:B8:5D:15:C4:76:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D86CA944DF5B075BDF800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd7f4f6f-0938-352a-bb58-445c68159690.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.200.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:86:ca:94:4d:f5:b0:75:bd:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=98465824-b7ac-49d9-bea0-723c4243d395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:50:5e:00:b8:5b:d1:b7:2c:e4:3e:91:bc: f0:c6:2e:d7:61:91:b0:3c:e6:a2:5c:32:44:a9:89: 09:ee:5c:89:9e:81:75:66:b1:15:6b:8e:27:c3:9b: 42:4b:d4:2a:f5:be:1a:cd:1c:e7:c3:4d:09:6f:63: 92:1e:e3:53:73:0b:79:d1:73:a6:7a:08:31:4f:5b: 6a:d1:18:e0:e8:98:87:a1:0b:a7:1d:f3:0b:04:d2: 0b:50:3e:db:ec:29:ca:1a:50:28:25:e7:7c:fd:86: 83:78:49:49:4b:74:5b:c8:d4:66:62:c7:58:74:0b: bb:63:b8:86:f4:3d:ea:0a:46:5d:85:57:b2:13:10: 2e:84:5f:7e:8c:9b:30:e9:58:1f:06:59:54:16:33: 7b:bb:18:10:ae:7a:f9:43:4c:9f:13:33:01:40:f2: be:45:9d:c2:7d:05:98:1f:12:90:3d:23:3e:bc:5b: 25:ab:f6:cb:b9:7d:c4:7a:66:ce:93:da:2d:2b:a1: 03:2e:ec:9f:e7:86:48:26:25:bc:55:af:ba:5e:1d: 06:e9:33:b7:4e:4b:2e:87:c2:d2:de:5c:49:05:83: d7:24:24:89:18:96:3e:12:a5:0c:f7:1c:c0:6f:03: aa:90:85:a0:2c:a8:9f:27:b9:6c:21:7a:f6:fe:84: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:14:C3:E0:80:CF:06:1C:3D:85:6F:83:8E:AE:B8:5D:15:C4:76:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd7f4f6f-0938-352a-bb58-445c68159690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:24:36:24:b0:48:93:30:3f:5a:a7:fa:af:88:73:2f:5b:42: 16:ed:5d:4c:1f:9f:d4:30:c4:30:56:3d:2f:27:a0:fc:3a:7e: c8:e3:c1:66:77:d4:1a:e6:02:47:32:f4:5d:da:c5:68:b2:0a: 8e:27:d2:b3:1e:79:05:6d:ae:82:3e:46:50:b5:4c:be:1e:e9: a6:e4:07:17:f7:10:8a:f6:e9:83:45:90:ea:20:97:2f:84:e3: 25:f4:9a:f6:ae:a6:31:42:95:aa:92:7a:d2:35:d3:0c:fc:fd: a5:f9:06:52:37:85:b8:93:ca:57:60:33:6a:24:d0:e5:70:5e: 77:18:65:2f:d5:d9:0e:87:5c:dc:08:2b:48:ea:78:ad:e6:6f: 41:b3:5d:8e:0a:c3:51:9d:68:39:a2:02:4a:d8:70:21:58:3a: 36:9e:67:a8:58:e9:56:2f:be:e5:1a:7c:3b:db:47:1e:03:ef: 6b:6d:f9:8f:7b:3a:97:9b:6c:29:1f:d8:f5:9c:bc:76:a6:d8: 2c:91:7a:d1:bc:ad:18:67:ca:63:9a:f9:d9:29:c1:b8:6a:ed: fb:aa:de:a2:da:0c:69:24:95:7c:f8:b1:8b:74:7e:48:7f:d0: a8:53:a7:8a:29:d0:7d:30:53:d8:65:fd:e1:a4:4f:df:b8:4e: 47:82:68:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfYbKlE31sHW9+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTg0NjU4MjQtYjdhYy00OWQ5LWJlYTAtNzIzYzQyNDNkMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbZQXgC4W9G3LOQ+kbzwxi7XYZGwPOaiXDJE qYkJ7lyJnoF1ZrEVa44nw5tCS9Qq9b4azRznw00Jb2OSHuNTcwt50XOmeggxT1tq 0Rjg6JiHoQunHfMLBNILUD7b7CnKGlAoJed8/YaDeElJS3RbyNRmYsdYdAu7Y7iG 9D3qCkZdhVeyExAuhF9+jJsw6VgfBllUFjN7uxgQrnr5Q0yfEzMBQPK+RZ3CfQWY HxKQPSM+vFslq/bLuX3EembOk9otK6EDLuyf54ZIJiW8Va+6Xh0G6TO3Tksuh8LS 3lxJBYPXJCSJGJY+EqUM9xzAbwOqkIWgLKifJ7lsIXr2/oTPWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4Uw+CAzwYcPYVvg46uuF0VxHYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQ3ZjRmNmYtMDkzOC0z NTJhLWJiNTgtNDQ1YzY4MTU5NjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8kNiSwSJMwP1qn+q+Icy9bQhbtXUwfn9QwxDBWPS8noPw6fsjjwWZ3 1BrmAkcy9F3axWiyCo4n0rMeeQVtroI+RlC1TL4e6abkBxf3EIr26YNFkOogly+E 4yX0mvaupjFClaqSetI10wz8/aX5BlI3hbiTyldgM2ok0OVwXncYZS/V2Q6HXNwI K0jqeK3mb0GzXY4Kw1GdaDmiAkrYcCFYOjaeZ6hY6VYvvuUafDvbRx4D72tt+Y97 OpebbCkf2PWcvHam2CyRetG8rRhnymOa+dkpwbhq7fuq3qLaDGkklXz4sYt0fkh/ 0KhTp4op0H0wU9hl/eGkT9+4TkeCaAI= -----END CERTIFICATE-----Generated at Mon Sep 28 18:31:08 2026 by rpki-client