$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa File: d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa (raw, json) Hash identifier: YNlBGO8CFvfMAHv+6DshQn3C2dfzuVbev4veWuFJZyo= Subject key identifier: 2C:D9:9A:99:AD:3D:40:AA:BB:F9:45:DB:12:AF:A4:3C:18:9B:D3:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D85D84595B22A46095D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.200.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:85:d8:45:95:b2:2a:46:09:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8c790421-2cb1-4e35-8342-e495e2126ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:13:be:be:36:bc:d9:78:33:43:8b:65:99: f7:f1:65:75:b7:27:d2:3a:ae:35:e6:32:4b:f0:7b: a0:fc:21:ba:75:5c:50:4d:9f:2b:57:9a:f1:73:55: 37:f9:91:90:df:0f:40:c1:5e:7d:81:2d:d6:99:d9: b4:37:41:10:6f:a0:3e:c5:2f:02:42:d4:97:32:ea: e8:05:d6:5d:78:b0:15:bf:2b:0f:aa:c8:05:15:5f: 3d:58:81:95:84:40:31:d0:9f:35:24:11:99:94:c6: bc:55:90:03:35:ee:2e:2c:75:a7:42:a6:f8:1c:a8: 85:9a:9a:47:51:16:56:a8:37:28:9c:51:4f:e5:b1: 57:b2:55:7a:35:d2:71:11:35:ad:d6:f6:03:7d:e0: 67:d2:e3:f6:50:d3:cf:0a:d8:96:1f:f9:0a:cb:80: c1:bf:13:dc:e2:3e:d2:6b:ab:ae:92:d7:9c:14:da: 0c:31:31:19:49:1c:d9:c7:65:f4:4e:d9:ef:c6:38: b8:70:3d:ad:91:40:4d:d8:f6:9e:0c:54:3f:c1:ed: c0:28:08:6d:92:ba:f6:42:61:c5:0a:7a:f2:b2:ae: c0:56:79:d7:9c:5d:76:15:49:71:82:f0:dc:45:98: 27:55:9f:8b:40:96:98:11:df:10:50:32:41:a1:bd: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D9:9A:99:AD:3D:40:AA:BB:F9:45:DB:12:AF:A4:3C:18:9B:D3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c0:5d:9c:a9:5d:4a:a6:81:81:be:1d:29:cf:30:3d:4c:90: 50:2e:bc:00:56:a2:6e:cb:6f:13:85:b5:9e:df:16:40:91:3b: 8d:4e:9e:cf:11:a3:66:b8:e8:84:c7:fe:23:a9:fa:08:7c:2e: 22:a3:0e:d5:64:bb:2e:bf:4e:50:5a:de:38:36:27:b6:c6:c3: b6:55:8c:9c:37:dd:67:9e:38:43:b3:04:23:4d:21:5d:89:21: ba:ac:83:15:0a:47:4d:d1:27:f9:81:54:0c:b7:1e:5a:67:1e: 9d:95:0b:bd:43:d4:0c:d5:54:16:5d:e3:26:63:94:89:81:db: 84:cb:46:13:7c:f1:9e:b9:ac:4b:cc:b7:ee:c1:0e:f2:e5:91: 4c:a0:d1:71:70:d7:c5:3c:14:ac:4e:c3:3d:2a:16:6d:bc:3f: af:28:13:68:fc:8e:c6:7b:7e:5e:a8:12:3c:45:03:6f:7d:9c: 23:67:25:07:3f:ab:b9:29:05:c4:06:52:ca:00:09:1d:a0:48: ab:cc:dc:73:7e:b9:93:f2:da:4f:63:08:2f:af:e5:9c:74:f5: cf:2d:6e:6e:03:69:99:6f:af:b8:60:e4:e8:c3:26:27:2c:17: c2:c7:a5:14:3a:81:5a:a1:22:4c:4d:d0:08:fe:fe:55:5e:f7: 8a:89:86:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfYXYRZWyKkYJXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGM3OTA0MjEtMmNiMS00ZTM1LTgzNDItZTQ5NWUyMTI2Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorQTvr42vNl4M0OLZZn38WV1tyfSOq415jJL 8Hug/CG6dVxQTZ8rV5rxc1U3+ZGQ3w9AwV59gS3Wmdm0N0EQb6A+xS8CQtSXMuro BdZdeLAVvysPqsgFFV89WIGVhEAx0J81JBGZlMa8VZADNe4uLHWnQqb4HKiFmppH URZWqDconFFP5bFXslV6NdJxETWt1vYDfeBn0uP2UNPPCtiWH/kKy4DBvxPc4j7S a6uuktecFNoMMTEZSRzZx2X0Ttnvxji4cD2tkUBN2PaeDFQ/we3AKAhtkrr2QmHF Cnrysq7AVnnXnF12FUlxgvDcRZgnVZ+LQJaYEd8QUDJBob3+ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzZmpmtPUCqu/lF2xKvpDwYm9MBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVkY2QyOGUtMzVjMy0z YWY2LWI5YWEtZTQ2NjkyYWMzNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzAXZypXUqmgYG+HSnPMD1MkFAuvABWom7LbxOFtZ7fFkCRO41Ons8R o2a46ITH/iOp+gh8LiKjDtVkuy6/TlBa3jg2J7bGw7ZVjJw33WeeOEOzBCNNIV2J IbqsgxUKR03RJ/mBVAy3HlpnHp2VC71D1AzVVBZd4yZjlImB24TLRhN88Z65rEvM t+7BDvLlkUyg0XFw18U8FKxOwz0qFm28P68oE2j8jsZ7fl6oEjxFA299nCNnJQc/ q7kpBcQGUsoACR2gSKvM3HN+uZPy2k9jCC+v5Zx09c8tbm4DaZlvr7hg5OjDJics F8LHpRQ6gVqhIkxN0Aj+/lVe94qJhlc= -----END CERTIFICATE-----Generated at Fri Sep 25 09:25:23 2026 by rpki-client