$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e512cae0-b503-30a7-808c-3234117fd113.roa File: e512cae0-b503-30a7-808c-3234117fd113.roa (raw, json) Hash identifier: 5/maFZx0sD/AawdLnj+cj78Y3B8k2ABgeA8zG0EpcZ0= Subject key identifier: 17:B2:78:66:87:4B:0F:BE:59:D2:64:90:F9:E7:7D:E8:C7:58:B3:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D4B74F99B958129114E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e512cae0-b503-30a7-808c-3234117fd113.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 24319 IP address blocks: 23.52.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:4b:74:f9:9b:95:81:29:11:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=d8e8d059-2bf1-4763-b51d-2b86ad997ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:bb:35:d2:72:ce:6e:03:d6:d1:da:47:00: eb:8f:f4:4a:04:fc:7a:0c:b4:50:c9:25:86:49:db: 39:b6:35:f3:10:2f:09:db:27:3f:3e:a5:d8:14:aa: 91:92:ab:a1:97:30:93:da:5a:e2:76:4e:4e:15:71: ef:db:1b:36:d5:3f:f8:c6:f1:4d:0c:01:bd:68:e7: ed:47:31:cd:91:b2:a0:b5:bf:1c:c2:2a:42:1b:58: 28:24:fd:b5:f5:4d:68:62:47:7f:bf:2c:e9:06:27: a5:46:23:a0:99:1f:5d:03:51:b5:78:e4:2f:9a:9b: 09:f5:15:ab:d4:58:e1:d0:01:f5:f0:b1:6a:d7:0e: ed:a0:33:8f:48:de:b1:58:b6:a6:ed:50:8a:17:cb: ad:38:9f:c4:72:69:2b:d6:fd:7d:36:ab:24:16:9b: 05:b8:ae:df:35:61:78:2e:76:21:5c:d0:71:30:5a: 3a:e8:d5:b0:94:16:77:e1:a7:76:03:65:da:80:1d: eb:31:64:95:4f:cd:92:46:76:59:26:22:ad:a2:bd: 72:3d:07:48:b5:02:e9:65:a0:7e:f8:ae:98:a4:4c: 5f:0e:db:50:b4:a1:13:c4:b5:9e:3c:5b:d8:8c:af: 01:33:b7:63:dc:a3:da:ed:7a:a7:0e:13:7b:a2:31: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:78:66:87:4B:0F:BE:59:D2:64:90:F9:E7:7D:E8:C7:58:B3:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e512cae0-b503-30a7-808c-3234117fd113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3e:1e:9c:15:af:12:7e:11:47:87:fe:46:00:79:57:5d:c6: 9c:b8:69:a7:c3:37:10:3d:b8:f8:c6:18:4b:11:cb:37:25:a9: 5a:ff:17:14:d3:e1:58:30:97:1b:c9:ba:f6:43:fb:c3:2a:b4: 41:71:40:a5:c5:ec:d2:4e:8c:cc:89:25:35:a1:be:b3:bf:9e: 0e:4a:ce:25:28:2a:e9:c3:a1:43:1f:b9:ed:50:22:27:ef:0c: 20:d0:f1:04:d8:67:63:02:8e:af:6d:2c:54:11:bc:22:6c:70: 0f:98:2d:72:05:d9:82:aa:ec:36:13:81:d6:43:83:99:10:9c: a4:d7:c1:27:ec:ed:ea:ca:d1:4a:30:2c:86:51:81:29:9f:6d: f9:dc:e5:3e:cf:7b:8b:99:26:41:ba:ce:da:fe:bf:76:02:2e: 01:a7:9c:24:d6:85:f5:df:0c:19:d3:5c:3a:0d:11:56:7c:2f: 32:5d:5a:0b:be:d6:f9:e3:c5:27:12:0a:e8:9a:7e:b9:9e:52: 82:d7:ce:b0:2e:8b:a0:d7:3e:f4:e8:d8:ab:f7:fe:cb:e2:2b: 46:b6:c3:4e:ab:64:49:51:c5:95:99:b1:34:36:5c:30:f1:fa: c5:c8:a1:98:9f:b7:e6:a7:6a:8a:d1:94:f1:2d:64:28:1b:64: 49:14:2a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUt0+ZuVgSkRToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZDhlOGQwNTktMmJmMS00NzYzLWI1MWQtMmI4NmFkOTk3ZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslW7NdJyzm4D1tHaRwDrj/RKBPx6DLRQySWG Sds5tjXzEC8J2yc/PqXYFKqRkquhlzCT2lridk5OFXHv2xs21T/4xvFNDAG9aOft RzHNkbKgtb8cwipCG1goJP219U1oYkd/vyzpBielRiOgmR9dA1G1eOQvmpsJ9RWr 1Fjh0AH18LFq1w7toDOPSN6xWLam7VCKF8utOJ/Ecmkr1v19NqskFpsFuK7fNWF4 LnYhXNBxMFo66NWwlBZ34ad2A2XagB3rMWSVT82SRnZZJiKtor1yPQdItQLpZaB+ +K6YpExfDttQtKETxLWePFvYjK8BM7dj3KPa7XqnDhN7ojEstwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeyeGaHSw++WdJkkPnnfejHWLPgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTUxMmNhZTAtYjUwMy0z MGE3LTgwOGMtMzIzNDExN2ZkMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg+HpwVrxJ+EUeH/kYAeVddxpy4aafDNxA9uPjGGEsRyzclqVr/FxTT 4VgwlxvJuvZD+8MqtEFxQKXF7NJOjMyJJTWhvrO/ng5KziUoKunDoUMfue1QIifv DCDQ8QTYZ2MCjq9tLFQRvCJscA+YLXIF2YKq7DYTgdZDg5kQnKTXwSfs7erK0Uow LIZRgSmfbfnc5T7Pe4uZJkG6ztr+v3YCLgGnnCTWhfXfDBnTXDoNEVZ8LzJdWgu+ 1vnjxScSCuiafrmeUoLXzrAui6DXPvTo2Kv3/sviK0a2w06rZElRxZWZsTQ2XDDx +sXIoZift+anaorRlPEtZCgbZEkUKjE= -----END CERTIFICATE-----Generated at Mon Oct 5 06:54:03 2026 by rpki-client