$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dba02a91-f3d7-35ff-bdef-d63769965f7f.roa File: dba02a91-f3d7-35ff-bdef-d63769965f7f.roa (raw, json) Hash identifier: zyCkBOPaHwPtERJ+/jyl6PzWPnItul7DrGFm2MlY0DA= Subject key identifier: 2A:49:AE:E7:E0:1A:30:0A:64:E2:AA:AF:7A:C9:AA:BE:0D:B8:59:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985A303599893C0B20D5480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dba02a91-f3d7-35ff-bdef-d63769965f7f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.195.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:a3:03:59:98:93:c0:b2:0d:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4039166c-6bd3-4fd3-aa88-a98b809a44b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:4b:3b:86:e8:66:c0:22:f1:6a:bf:d6:74: 68:5c:ce:11:9f:80:28:c9:52:64:a6:31:18:bd:05: c3:ba:1b:e4:d4:06:7b:81:5d:55:4f:8f:99:7b:91: c5:0f:1e:81:7d:25:ee:6c:15:37:d8:1f:57:ea:60: 39:d5:57:a4:7f:bb:9f:6c:54:47:42:9b:9d:e3:29: b1:e7:fd:07:82:7a:23:08:13:75:67:0a:57:6b:94: bc:2d:7c:39:fa:33:f2:1a:c1:45:df:2e:16:69:db: c2:df:21:61:eb:fc:01:69:17:bb:47:4a:70:b5:e0: be:bd:5f:42:7e:2b:fd:6a:21:6f:a9:1c:70:49:71: 28:84:ff:c1:fa:dd:16:97:b0:09:e8:44:2c:61:01: 30:1d:02:97:2c:44:39:d6:91:1b:19:99:60:31:f6: d3:02:80:72:1f:d0:a5:b7:c1:1a:c5:f1:34:0f:d0: db:54:ed:31:59:59:de:bb:43:f0:61:64:1c:7b:0d: 17:f0:3f:0c:4f:c4:81:ee:6a:d4:ca:71:3e:40:c6: 56:c9:8b:18:b0:ee:b8:e7:7c:0a:c5:df:78:15:6e: 75:62:46:bb:6c:91:6d:92:2a:9e:81:76:04:ac:d3: 0f:39:d2:1f:6a:1e:ca:fb:44:6b:da:4d:c0:8d:1a: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:49:AE:E7:E0:1A:30:0A:64:E2:AA:AF:7A:C9:AA:BE:0D:B8:59:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dba02a91-f3d7-35ff-bdef-d63769965f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:73:c6:03:cc:89:fd:84:ec:00:02:50:cb:78:9e:47:cf:e6: f4:ba:8e:73:55:37:8d:eb:96:ef:a3:45:95:61:bc:98:9c:05: 59:ef:f3:a9:43:e6:67:d3:87:11:ae:1e:10:cd:fa:b9:1c:5f: 80:98:b2:99:71:80:2b:d4:71:74:2d:6d:65:94:ed:a5:bb:4e: 71:81:49:29:52:5d:f5:a7:5b:86:f4:d7:88:ec:20:05:a8:91: 1b:27:48:62:1d:e5:4d:49:f7:d9:e5:85:d3:cc:9d:54:c5:6f: fc:5d:cf:25:37:91:79:1e:33:3b:3f:a4:e4:0c:79:0c:70:ac: 15:c6:33:56:cf:4e:0c:ac:b4:fa:a5:38:bd:8d:cf:47:03:f8: 63:cb:4b:38:16:69:40:ec:a6:05:a0:46:e4:11:3a:ac:29:61: b7:ce:e6:1d:c7:08:6e:78:5d:08:91:ec:66:4b:c2:8c:dd:5e: f2:24:11:07:6f:a6:07:d9:ad:2a:ed:9e:d1:79:b9:97:db:78: a0:c3:0f:9b:bf:f7:83:b3:a0:10:6d:76:54:11:56:2c:b2:a5: 6f:da:2a:6d:bc:9c:54:0b:16:9c:f9:b8:ec:e5:1b:74:79:5b: 27:d7:2c:41:43:28:3b:ed:66:8b:c5:b0:ae:29:11:cf:80:5a: 8d:e0:6d:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhaMDWZiTwLINVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDAzOTE2NmMtNmJkMy00ZmQzLWFhODgtYTk4YjgwOWE0NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrxLO4boZsAi8Wq/1nRoXM4Rn4AoyVJkpjEY vQXDuhvk1AZ7gV1VT4+Ze5HFDx6BfSXubBU32B9X6mA51Vekf7ufbFRHQpud4ymx 5/0HgnojCBN1ZwpXa5S8LXw5+jPyGsFF3y4WadvC3yFh6/wBaRe7R0pwteC+vV9C fiv9aiFvqRxwSXEohP/B+t0Wl7AJ6EQsYQEwHQKXLEQ51pEbGZlgMfbTAoByH9Cl t8EaxfE0D9DbVO0xWVneu0PwYWQcew0X8D8MT8SB7mrUynE+QMZWyYsYsO6453wK xd94FW51Yka7bJFtkiqegXYErNMPOdIfah7K+0Rr2k3AjRqeYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpJrufgGjAKZOKqr3rJqr4NuFkaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJhMDJhOTEtZjNkNy0z NWZmLWJkZWYtZDYzNzY5OTY1ZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8MXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZzxgPMif2E7AACUMt4nkfP5vS6jnNVN43rlu+jRZVhvJicBVnv86lD 5mfThxGuHhDN+rkcX4CYsplxgCvUcXQtbWWU7aW7TnGBSSlSXfWnW4b014jsIAWo kRsnSGId5U1J99nlhdPMnVTFb/xdzyU3kXkeMzs/pOQMeQxwrBXGM1bPTgystPql OL2Nz0cD+GPLSzgWaUDspgWgRuQROqwpYbfO5h3HCG54XQiR7GZLwozdXvIkEQdv pgfZrSrtntF5uZfbeKDDD5u/94OzoBBtdlQRViyypW/aKm28nFQLFpz5uOzlG3R5 WyfXLEFDKDvtZovFsK4pEc+AWo3gbYM= -----END CERTIFICATE-----Generated at Sun Sep 27 23:50:04 2026 by rpki-client