$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f07c35fe-3942-39fd-a6a2-23752f27de1a.roa File: f07c35fe-3942-39fd-a6a2-23752f27de1a.roa (raw, json) Hash identifier: rtJrehEGXX0weYRAZ6g5NHvwoIjL7HHu6EjtWIizOMs= Subject key identifier: 34:D0:A3:F3:2F:B8:88:BB:58:1C:D2:C1:43:81:0D:15:A1:BD:6A:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD725CD86A8E42B5543940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f07c35fe-3942-39fd-a6a2-23752f27de1a.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.45.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:72:5c:d8:6a:8e:42:b5:54:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=4e6e2b46-63cc-4f23-9d54-6b35bbc892a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:c4:d2:39:41:e2:8b:50:29:d5:4e:b0:73: 23:82:d7:05:11:53:86:09:b9:41:ac:d0:35:94:3a: 3a:03:ca:bf:ba:90:d8:d9:7f:ea:01:46:c1:82:2e: e5:33:e6:4b:dc:53:90:de:0f:e0:39:66:8a:13:fa: c8:b2:97:61:cf:49:66:3b:d4:1c:e1:49:00:0e:e5: c2:ad:e1:37:e6:40:8b:06:39:a0:9d:e8:5d:5c:92: 38:8d:d2:31:41:6e:99:e0:f8:8a:02:3b:c3:df:05: 2e:e9:2d:e9:51:ed:1a:85:42:16:66:16:a4:24:7d: ea:a5:12:32:ac:1a:41:97:d0:86:d7:58:80:74:e7: 6f:80:18:f7:e6:27:fa:59:ac:fa:1f:0f:58:3f:a2: be:c9:ce:e8:db:9f:25:99:e5:29:54:69:82:da:f4: 8a:0e:66:62:4d:d0:f7:06:3d:b0:fe:81:a5:e0:11: 50:48:c4:e4:9a:6b:f5:b1:85:da:2c:e8:9d:8e:f5: d2:fb:14:35:a3:0f:6e:7f:00:81:6d:3a:2c:78:e2: bc:a8:c3:fb:a7:18:a2:08:fa:2b:8c:7c:47:9a:d0: 4d:0a:74:bf:0b:45:f2:bc:3e:98:90:8d:d0:20:b7: 02:1b:07:e8:70:dc:f6:f6:3b:3e:8b:c5:0f:7c:8e: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D0:A3:F3:2F:B8:88:BB:58:1C:D2:C1:43:81:0D:15:A1:BD:6A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f07c35fe-3942-39fd-a6a2-23752f27de1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f9:71:77:a8:08:07:14:e4:45:3a:df:e7:ff:81:8e:b7:76: fd:c6:55:ce:e4:8b:73:64:e7:f5:c4:7e:f7:b2:f2:94:92:ff: 79:2b:8a:5c:5b:19:e1:df:96:5f:04:35:cb:7b:22:a0:d7:18: 2c:b3:3b:aa:2b:ae:b5:67:d6:38:ed:2b:00:7d:6a:ce:23:17: 2e:80:ee:60:8f:e6:2b:de:9e:8e:27:bf:82:a4:82:e5:ed:74: 18:f2:ae:bd:64:06:40:56:d8:09:ee:fd:d3:72:d2:57:4e:81: ef:4d:e3:5e:57:c2:5d:0f:2f:8a:34:6f:60:a6:53:c9:11:b2: c5:f1:bd:cd:17:c1:ea:73:58:15:43:15:51:0d:72:14:28:01: f2:bd:8f:2f:af:8c:aa:5c:1e:3d:c6:d6:a9:15:ee:e1:5e:49: d9:77:3a:3c:01:6c:19:cf:5a:86:3f:99:4e:2c:c1:7c:8b:b3: 05:5b:e7:7a:37:50:25:a4:75:e3:95:7f:eb:c0:47:ea:1f:71: bc:5c:56:82:f9:d1:43:a3:66:39:9c:f6:83:4a:33:74:fd:7a: 29:53:91:1f:2c:b0:87:95:b5:94:eb:a0:a3:53:b3:c9:bd:fa: 8b:48:92:8d:b7:16:f1:21:77:2f:f5:eb:d1:13:d2:f3:68:e8: 48:ec:d7:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rXJc2GqOQrVUOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NGU2ZTJiNDYtNjNjYy00ZjIzLTlkNTQtNmIzNWJiYzg5MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroLE0jlB4otQKdVOsHMjgtcFEVOGCblBrNA1 lDo6A8q/upDY2X/qAUbBgi7lM+ZL3FOQ3g/gOWaKE/rIspdhz0lmO9Qc4UkADuXC reE35kCLBjmgnehdXJI4jdIxQW6Z4PiKAjvD3wUu6S3pUe0ahUIWZhakJH3qpRIy rBpBl9CG11iAdOdvgBj35if6Waz6Hw9YP6K+yc7o258lmeUpVGmC2vSKDmZiTdD3 Bj2w/oGl4BFQSMTkmmv1sYXaLOidjvXS+xQ1ow9ufwCBbToseOK8qMP7pxiiCPor jHxHmtBNCnS/C0XyvD6YkI3QILcCGwfocNz29js+i8UPfI68bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTQo/MvuIi7WBzSwUOBDRWhvWo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjA3YzM1ZmUtMzk0Mi0z OWZkLWE2YTItMjM3NTJmMjdkZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy0xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX5cXeoCAcU5EU63+f/gY63dv3GVc7ki3Nk5/XEfvey8pSS/3krilxb GeHfll8ENct7IqDXGCyzO6orrrVn1jjtKwB9as4jFy6A7mCP5iveno4nv4KkguXt dBjyrr1kBkBW2Anu/dNy0ldOge9N415Xwl0PL4o0b2CmU8kRssXxvc0XwepzWBVD FVENchQoAfK9jy+vjKpcHj3G1qkV7uFeSdl3OjwBbBnPWoY/mU4swXyLswVb53o3 UCWkdeOVf+vAR+ofcbxcVoL50UOjZjmc9oNKM3T9eilTkR8ssIeVtZTroKNTs8m9 +otIko23FvEhdy/169ET0vNo6Ejs15M= -----END CERTIFICATE-----Generated at Fri Sep 25 23:51:35 2026 by rpki-client