$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2812d8-2207-3975-bce2-e928190a6c96.roa File: cf2812d8-2207-3975-bce2-e928190a6c96.roa (raw, json) Hash identifier: 7I4Qpwz2OnzdLK14LynKqQbjCMAsmcMXn/wNvooXYOE= Subject key identifier: 7B:D8:74:B9:F6:0B:EA:84:64:77:9B:8E:9B:9E:95:79:CF:BF:C7:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985BE71BAE84983463E0A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2812d8-2207-3975-bce2-e928190a6c96.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.202.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:be:71:ba:e8:49:83:46:3e:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a479fd71-418d-4de2-9ec3-6b9f25a6fd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:95:ee:1b:16:c8:35:2e:5d:03:7a:59:63: 93:c7:50:c1:50:3c:e6:b5:a4:a0:6b:b8:d6:6f:0a: 26:37:56:22:f7:cf:49:7e:ba:bd:fc:e9:c6:69:e1: 63:02:82:94:e4:bb:f2:34:f2:59:eb:5e:e3:d3:f6: 01:b8:e4:c1:6d:c7:bf:58:2c:e0:8e:b8:92:1d:12: 40:b0:d3:ec:e9:9d:2c:4e:9e:66:a6:2d:ef:d7:77: 5f:39:2a:7d:0f:a3:b6:a4:e7:07:f8:1d:bb:bc:18: 78:59:49:b5:b4:34:04:bf:d1:a1:55:8d:92:3d:a5: 8d:8a:13:c0:17:4a:5f:f7:2a:0f:7b:fd:dd:1c:c4: 00:ec:c6:91:d6:91:d9:3a:0e:21:a0:03:b7:39:d5: 1e:0d:d4:87:55:11:4c:45:35:7f:9c:bb:9c:85:d4: 92:ad:c8:76:46:49:f0:9b:d4:bd:b8:41:05:4d:2b: fe:b7:ac:d6:99:92:89:bb:95:b1:cd:61:d0:a5:5f: 0d:6e:f2:cc:32:48:11:ce:09:54:32:79:8d:55:b1: 9e:cc:c2:f7:64:85:b1:a6:d8:f8:9b:89:79:4e:66: 3b:9a:52:26:16:d7:57:cc:a8:95:b3:da:e5:2c:21: 5a:97:a2:36:91:9b:d3:dd:70:a5:42:aa:5b:1c:7e: 51:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D8:74:B9:F6:0B:EA:84:64:77:9B:8E:9B:9E:95:79:CF:BF:C7:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2812d8-2207-3975-bce2-e928190a6c96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:41:50:b0:cd:95:43:af:af:da:ff:3a:96:52:a9:00:50:e2: 3f:8f:dd:02:2f:54:6a:0f:1f:6f:91:52:c4:5b:b1:61:4c:c3: 54:f4:25:38:e3:6a:15:a9:19:12:16:97:2f:e8:61:be:d2:b0: cf:28:e1:94:19:ba:41:e2:b6:61:1d:37:17:a7:b6:df:2a:79: ad:35:e6:ba:a2:85:60:ba:f3:92:a4:3d:bf:21:5c:18:99:d8: 2f:24:4b:35:5d:9f:ff:f0:03:0b:5c:4f:81:36:9f:2f:f1:8b: 6a:68:30:7e:5e:c5:00:25:77:5d:aa:8e:55:75:97:62:9f:bc: e1:2d:71:00:96:c7:18:7a:e9:cd:93:41:d8:62:9c:49:b4:7f: 89:5d:5f:2c:c2:8e:8b:9a:2d:ca:fa:97:40:68:75:f1:95:82: 4e:d5:c5:dc:d2:fe:bd:dc:93:05:84:8c:b9:a5:13:24:56:a3: aa:d4:f9:5c:31:24:09:c0:6a:13:ce:21:e6:b3:fc:5f:6b:a1: 8c:5c:cc:2e:7d:99:75:47:cd:bb:48:00:d8:37:a2:d6:05:b9: 70:d4:24:b0:dd:1b:f7:4f:1a:f4:8e:c0:ab:90:a9:07:32:60: 59:98:42:d0:7f:37:d5:dc:8c:ff:98:f6:f5:41:de:f5:39:ad: 71:6d:c7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhb5xuuhJg0Y+CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQ3OWZkNzEtNDE4ZC00ZGUyLTllYzMtNmI5ZjI1YTZmZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGGV7hsWyDUuXQN6WWOTx1DBUDzmtaSga7jW bwomN1Yi989Jfrq9/OnGaeFjAoKU5LvyNPJZ617j0/YBuOTBbce/WCzgjriSHRJA sNPs6Z0sTp5mpi3v13dfOSp9D6O2pOcH+B27vBh4WUm1tDQEv9GhVY2SPaWNihPA F0pf9yoPe/3dHMQA7MaR1pHZOg4hoAO3OdUeDdSHVRFMRTV/nLuchdSSrch2Rknw m9S9uEEFTSv+t6zWmZKJu5WxzWHQpV8NbvLMMkgRzglUMnmNVbGezML3ZIWxptj4 m4l5TmY7mlImFtdXzKiVs9rlLCFal6I2kZvT3XClQqpbHH5RbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvYdLn2C+qEZHebjpuelXnPv8cNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2YyODEyZDgtMjIwNy0z OTc1LWJjZTItZTkyODE5MGE2Yzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8qgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1BULDNlUOvr9r/OpZSqQBQ4j+P3QIvVGoPH2+RUsRbsWFMw1T0JTjj ahWpGRIWly/oYb7SsM8o4ZQZukHitmEdNxentt8qea015rqihWC685KkPb8hXBiZ 2C8kSzVdn//wAwtcT4E2ny/xi2poMH5exQAld12qjlV1l2KfvOEtcQCWxxh66c2T QdhinEm0f4ldXyzCjouaLcr6l0BodfGVgk7VxdzS/r3ckwWEjLmlEyRWo6rU+Vwx JAnAahPOIeaz/F9roYxczC59mXVHzbtIANg3otYFuXDUJLDdG/dPGvSOwKuQqQcy YFmYQtB/N9XcjP+Y9vVB3vU5rXFtx3U= -----END CERTIFICATE-----Generated at Sat Sep 26 05:39:54 2026 by rpki-client