$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c21e5e33-f631-3625-97c9-42218a7ac51e.roa File: c21e5e33-f631-3625-97c9-42218a7ac51e.roa (raw, json) Hash identifier: CB5LpVeJs9phFne4xirwjGrXasazAdKF1OohOs22buI= Subject key identifier: 60:CC:9C:05:91:E7:10:49:74:49:B2:CA:F3:FC:D4:27:81:16:2D:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D4BBAE7AC30A3762C82C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c21e5e33-f631-3625-97c9-42218a7ac51e.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.52.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:4b:ba:e7:ac:30:a3:76:2c:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=d1126182-bfb1-40fa-80b8-4d1768ba4974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:76:92:3b:37:5d:a9:0b:a6:8e:99:82:65: 8d:2b:b2:62:88:b4:82:dc:56:a8:05:dd:55:b2:c4: bd:2d:07:88:c6:8c:c9:0d:d7:51:d0:ee:2c:9f:eb: d7:ea:84:5d:c3:a5:7f:b2:0d:d1:80:33:9c:e6:e9: 66:fd:c3:c5:20:56:27:40:49:6b:9e:23:67:47:cb: 2e:2b:cf:28:df:f3:45:25:66:e4:e6:d3:ae:36:6c: 7a:ff:9a:ae:0e:8e:1a:97:49:52:fa:f8:05:b9:f3: 05:1c:6a:d7:3c:bf:de:3f:54:a9:20:6b:d7:9f:87: 71:93:df:45:4e:9d:68:5b:68:10:55:94:54:87:0e: e4:ab:de:d7:a9:e3:d4:10:97:20:50:9d:5f:e1:76: 96:1c:47:4a:86:32:1c:66:a2:7c:91:cb:34:de:b8: 92:cb:1e:7c:4a:3d:f2:66:89:bc:b3:78:f7:47:fd: 78:ca:f5:ea:4e:6a:4a:9a:b5:8e:90:54:fe:8a:cf: 47:7d:b4:2f:59:70:7c:5e:96:db:a5:18:ae:76:39: d1:22:56:a9:74:a0:b5:1b:32:e7:89:b3:56:42:04: c6:45:71:57:77:e9:bf:d6:5b:4d:8d:f9:42:9b:b6: cb:01:15:41:f7:56:3a:01:38:74:0d:3a:ca:52:61: 10:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CC:9C:05:91:E7:10:49:74:49:B2:CA:F3:FC:D4:27:81:16:2D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c21e5e33-f631-3625-97c9-42218a7ac51e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:62:16:83:ae:87:44:90:96:80:84:52:46:0a:53:26:6f:38: 49:c7:e3:55:16:6a:2c:d4:ab:78:c3:77:73:5a:21:52:39:03: 40:8e:58:8a:4a:92:37:b5:d1:6c:b9:17:a4:ed:e9:6b:2e:8b: 1c:fb:ea:0d:f6:6a:cd:e9:ce:a9:8a:19:7a:6a:22:a3:5a:ee: a9:07:0c:08:cf:78:dc:b7:9f:37:41:27:38:a5:73:9c:0a:c9: 32:5d:e7:be:78:9d:b0:01:48:8b:9b:80:58:71:de:0d:f0:61: d4:9f:8f:01:5e:4a:11:20:4a:12:89:54:ec:aa:ec:06:e1:48: 80:5f:21:11:6a:a6:87:6d:3c:a7:f1:2c:ca:4f:04:0d:8b:ef: af:37:96:32:89:6e:27:0d:eb:6b:52:a7:4f:38:81:49:f2:37: 11:40:a5:3e:d5:8f:88:f2:f6:d8:8e:20:98:69:10:07:a1:15: d1:f0:43:a7:f8:18:8f:37:3a:6a:2a:95:5d:ea:56:e0:74:b9: 8f:0d:89:4b:ff:87:48:2c:6a:78:30:e8:90:d8:99:ec:4b:b4: e9:83:0d:ca:88:42:68:77:7b:79:23:10:c2:ea:a8:dd:65:d9: 57:75:32:7a:02:58:d1:b4:9d:44:1c:cc:ec:e3:09:16:14:6a: 01:21:2b:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUu656wwo3YsgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDExMjYxODItYmZiMS00MGZhLTgwYjgtNGQxNzY4YmE0OTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUZ2kjs3XakLpo6ZgmWNK7JiiLSC3FaoBd1V ssS9LQeIxozJDddR0O4sn+vX6oRdw6V/sg3RgDOc5ulm/cPFIFYnQElrniNnR8su K88o3/NFJWbk5tOuNmx6/5quDo4al0lS+vgFufMFHGrXPL/eP1SpIGvXn4dxk99F Tp1oW2gQVZRUhw7kq97XqePUEJcgUJ1f4XaWHEdKhjIcZqJ8kcs03riSyx58Sj3y Zom8s3j3R/14yvXqTmpKmrWOkFT+is9HfbQvWXB8XpbbpRiudjnRIlapdKC1GzLn ibNWQgTGRXFXd+m/1ltNjflCm7bLARVB91Y6ATh0DTrKUmEQiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDMnAWR5xBJdEmyyvP81CeBFi1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzIxZTVlMzMtZjYzMS0z NjI1LTk3YzktNDIyMThhN2FjNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5iFoOuh0SQloCEUkYKUyZvOEnH41UWaizUq3jDd3NaIVI5A0COWIpK kje10Wy5F6Tt6Wsuixz76g32as3pzqmKGXpqIqNa7qkHDAjPeNy3nzdBJzilc5wK yTJd5754nbABSIubgFhx3g3wYdSfjwFeShEgShKJVOyq7AbhSIBfIRFqpodtPKfx LMpPBA2L7683ljKJbicN62tSp084gUnyNxFApT7Vj4jy9tiOIJhpEAehFdHwQ6f4 GI83OmoqlV3qVuB0uY8NiUv/h0gsangw6JDYmexLtOmDDcqIQmh3e3kjEMLqqN1l 2Vd1MnoCWNG0nUQczOzjCRYUagEhK3g= -----END CERTIFICATE-----Generated at Mon Sep 28 19:58:56 2026 by rpki-client