$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7970adb-f2e6-3d71-a861-10b4ed3e28a3.roa File: d7970adb-f2e6-3d71-a861-10b4ed3e28a3.roa (raw, json) Hash identifier: HZVe24O/dNEVt8GnpCqnEiniqy/ALNpiSXqMEpsBbk4= Subject key identifier: 9C:52:7F:DC:19:4C:20:DB:9C:77:11:EF:AC:DC:41:02:C7:2F:DF:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4278220D0D277ADB2E6B35B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7970adb-f2e6-3d71-a861-10b4ed3e28a3.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.47.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:22:0d:0d:27:7a:db:2e:6b:35:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=123ff86d-4f57-4ec2-a5e7-fbe54a2c2131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:b6:a1:61:88:8e:30:d9:a8:d4:e8:d4:f6: 70:5e:95:8f:97:ce:60:a2:1c:66:02:e5:86:89:65: 10:8d:f5:7c:76:65:98:51:40:31:b8:8e:ba:8b:6c: 8e:c4:0e:39:58:c4:28:88:fc:20:90:48:c5:63:de: f6:f7:f4:dc:3d:9a:40:5b:38:e1:e9:29:8a:13:46: ae:22:6d:50:45:d5:13:5f:1d:03:21:9f:bb:f2:4a: 8d:47:69:bb:52:f6:fb:68:dc:1a:e7:4f:fd:c4:90: e4:5d:37:e3:fb:fc:27:85:d5:fb:5f:77:d5:2b:46: 12:1f:80:f8:3b:95:86:ed:13:9e:40:e9:75:63:94: 68:ee:b8:bc:b3:07:31:39:68:37:e0:cc:00:16:9c: 52:c0:3b:aa:a2:90:8b:20:2f:48:63:f5:cc:57:65: bd:23:0e:9c:5f:3f:3a:10:2a:73:92:9f:d6:03:dd: 08:02:4a:b8:08:cc:55:41:bb:1a:55:7b:e9:13:dd: d2:eb:8e:a3:dc:2b:96:39:f7:f0:46:18:4a:3d:5f: 39:ed:dd:90:42:59:cc:fa:47:2d:a5:9f:1d:c8:88: 36:ce:28:a6:60:98:6d:4d:c4:ba:0a:9c:f3:97:36: 6e:05:3b:d7:35:0e:37:f6:b3:67:71:51:2c:86:0f: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:52:7F:DC:19:4C:20:DB:9C:77:11:EF:AC:DC:41:02:C7:2F:DF:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7970adb-f2e6-3d71-a861-10b4ed3e28a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.47.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:bf:82:6b:4f:60:11:7a:c5:9f:e7:f5:5b:e3:8f:f1:cb:ab: 2f:29:2d:18:79:61:96:e0:50:bd:30:1d:c7:8b:8a:38:d7:db: 14:d0:fb:d6:4e:f6:1f:2e:ac:a4:ab:f0:77:0d:73:96:6d:cb: 05:30:5d:9f:bf:cd:3e:e2:ff:af:69:d4:67:97:43:a6:a5:7c: d3:33:91:2d:52:1f:1a:f4:19:f8:b3:c2:da:fa:e7:10:54:82: 2f:f0:58:7a:28:2b:a6:df:99:ef:8f:1f:b3:ef:21:f4:99:df: 43:87:b0:92:38:98:6b:fb:b0:36:7d:6c:91:56:f2:8b:cd:95: 6d:c5:31:f2:81:09:bc:9c:fd:cc:5c:6e:2d:db:99:aa:34:b1: 3d:64:05:f6:f7:8d:24:3f:de:15:af:b7:b1:bd:21:b3:df:e1: 1c:ab:09:33:59:0f:24:bb:1a:74:1a:2a:2f:86:10:43:95:d2: 97:63:77:96:de:36:60:e5:a3:cc:ff:c2:85:eb:0a:cd:32:7e: 37:48:db:00:0c:5a:be:20:96:a0:d4:a5:c9:7a:54:a1:b4:e2: 29:0b:69:d2:e3:4f:a2:8e:45:1d:30:cc:95:6b:d6:6d:d0:64: a8:d8:d0:04:32:37:98:68:a9:3f:78:5c:13:6a:b4:ed:6f:39: 55:7c:fe:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCINDSd62y5rNbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTIzZmY4NmQtNGY1Ny00ZWMyLWE1ZTctZmJlNTRhMmMyMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nm2oWGIjjDZqNTo1PZwXpWPl85gohxmAuWG iWUQjfV8dmWYUUAxuI66i2yOxA45WMQoiPwgkEjFY9729/TcPZpAWzjh6SmKE0au Im1QRdUTXx0DIZ+78kqNR2m7Uvb7aNwa50/9xJDkXTfj+/wnhdX7X3fVK0YSH4D4 O5WG7ROeQOl1Y5Ro7ri8swcxOWg34MwAFpxSwDuqopCLIC9IY/XMV2W9Iw6cXz86 ECpzkp/WA90IAkq4CMxVQbsaVXvpE93S646j3CuWOffwRhhKPV857d2QQlnM+kct pZ8dyIg2ziimYJhtTcS6CpzzlzZuBTvXNQ439rNncVEshg99vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxSf9wZTCDbnHcR76zcQQLHL9+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDc5NzBhZGItZjJlNi0z ZDcxLWE4NjEtMTBiNGVkM2UyOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm/gmtPYBF6xZ/n9Vvjj/HLqy8pLRh5YZbgUL0wHceLijjX2xTQ+9ZO 9h8urKSr8HcNc5ZtywUwXZ+/zT7i/69p1GeXQ6alfNMzkS1SHxr0Gfizwtr65xBU gi/wWHooK6bfme+PH7PvIfSZ30OHsJI4mGv7sDZ9bJFW8ovNlW3FMfKBCbyc/cxc bi3bmao0sT1kBfb3jSQ/3hWvt7G9IbPf4RyrCTNZDyS7GnQaKi+GEEOV0pdjd5be NmDlo8z/woXrCs0yfjdI2wAMWr4glqDUpcl6VKG04ikLadLjT6KORR0wzJVr1m3Q ZKjY0AQyN5hoqT94XBNqtO1vOVV8/mI= -----END CERTIFICATE-----Generated at Sat Sep 26 07:29:47 2026 by rpki-client