$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3a6e52a-5a6b-3e78-8e28-f49a5e8a880a.roa File: f3a6e52a-5a6b-3e78-8e28-f49a5e8a880a.roa (raw, json) Hash identifier: gQT0uiux2JcK0jzpZfFOwG6xVh1pFyRrFhbLXuuJ0gI= Subject key identifier: 13:1F:B9:34:C5:7D:98:68:40:D2:29:9C:6E:A9:2E:E9:B9:FA:C5:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F498563AF3E32ADAA47D54C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3a6e52a-5a6b-3e78-8e28-f49a5e8a880a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.59.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:63:af:3e:32:ad:aa:47:d5:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6a5ea84b-b84a-43d0-94f3-2b7ba7520707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:7b:2c:38:56:ba:62:76:58:d5:d4:7a:7c: 02:86:1d:c2:f4:a6:78:c4:39:71:69:f9:4f:c6:cf: 3c:47:80:d5:6c:31:41:0d:9e:7e:2b:7c:02:35:5d: 0b:1b:fe:56:46:82:90:23:ef:ae:64:76:16:eb:46: 38:cc:03:a6:5a:60:e3:52:45:fd:42:9d:9c:e4:ba: 9e:94:16:a0:3c:32:bf:d8:8e:9d:f6:3d:3c:8e:a3: 0c:4f:cd:20:50:6e:ba:c0:cb:44:77:fb:5c:a6:6a: 4c:ce:b9:52:35:47:80:c1:ae:bf:04:b4:49:88:0d: 09:94:6a:db:25:d6:20:28:40:4e:fd:76:0b:7b:17: 58:d0:a1:a7:1f:0c:32:57:b3:28:71:51:95:ac:36: c8:91:c7:49:43:e3:72:38:8d:ca:eb:5a:63:99:aa: cd:dd:73:92:ea:1e:37:de:5c:b8:93:c4:c8:45:93: c3:34:fb:fd:00:fe:e4:1a:38:34:70:18:71:42:10: f1:c3:42:7c:30:84:d7:ae:10:7c:10:ac:84:0e:39: b0:15:21:1d:51:40:36:94:1c:93:5c:38:7e:83:7a: 9b:9d:9f:30:9b:85:33:57:4a:4a:65:78:4e:f0:46: 98:ce:80:88:fe:be:f8:94:ec:73:7b:37:9f:0d:49: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1F:B9:34:C5:7D:98:68:40:D2:29:9C:6E:A9:2E:E9:B9:FA:C5:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3a6e52a-5a6b-3e78-8e28-f49a5e8a880a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8d:fa:2a:ab:da:0f:9d:89:8e:0f:4f:85:1c:6a:75:26:cf: d8:49:b0:1c:06:88:a5:4d:ef:99:95:5f:18:62:be:dd:55:90: b4:d7:6d:35:93:68:93:1e:2e:97:5a:75:09:ec:08:39:dc:e4: 0a:53:65:d5:63:d2:87:fb:6f:e8:1b:82:60:11:a1:97:da:e4: 6c:03:29:c2:1e:07:11:10:fd:b2:82:34:1f:4f:7e:02:99:85: 17:13:f1:d3:2c:a7:f4:bb:6d:41:da:28:3a:00:14:2d:b4:f4: 91:3c:39:f8:e3:d8:aa:1f:14:4c:77:c2:c2:46:6c:72:61:d2: c5:fa:e7:4c:78:a2:1d:54:2e:2d:fa:26:76:79:c2:de:58:40: d0:b3:d6:9a:0d:1d:30:34:c4:47:b5:5c:a1:29:3b:f9:86:42: 8e:dc:c2:71:f4:d4:59:ce:8c:47:4f:a4:32:23:0c:71:80:0e: 49:c2:37:41:56:86:f9:a1:f8:db:a9:19:70:ff:5f:d9:30:4a: f9:14:05:90:98:46:02:32:e7:e5:33:a7:89:73:1a:e3:98:dd: c4:72:b2:1f:a8:e9:8a:cf:2e:73:13:55:3e:84:a3:f3:df:1b: 88:c8:48:8c:9a:0c:ae:c8:45:02:97:8f:7a:d6:ca:ff:06:c2: 4e:9c:39:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhWOvPjKtqkfVTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmE1ZWE4NGItYjg0YS00M2QwLTk0ZjMtMmI3YmE3NTIwNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsF7LDhWumJ2WNXUenwChh3C9KZ4xDlxaflP xs88R4DVbDFBDZ5+K3wCNV0LG/5WRoKQI++uZHYW60Y4zAOmWmDjUkX9Qp2c5Lqe lBagPDK/2I6d9j08jqMMT80gUG66wMtEd/tcpmpMzrlSNUeAwa6/BLRJiA0JlGrb JdYgKEBO/XYLexdY0KGnHwwyV7MocVGVrDbIkcdJQ+NyOI3K61pjmarN3XOS6h43 3ly4k8TIRZPDNPv9AP7kGjg0cBhxQhDxw0J8MITXrhB8EKyEDjmwFSEdUUA2lByT XDh+g3qbnZ8wm4UzV0pKZXhO8EaYzoCI/r74lOxzezefDUkZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMfuTTFfZhoQNIpnG6pLum5+sUMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjNhNmU1MmEtNWE2Yi0z ZTc4LThlMjgtZjQ5YTVlOGE4ODBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzv+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2N+iqr2g+diY4PT4UcanUmz9hJsBwGiKVN75mVXxhivt1VkLTXbTWT aJMeLpdadQnsCDnc5ApTZdVj0of7b+gbgmARoZfa5GwDKcIeBxEQ/bKCNB9PfgKZ hRcT8dMsp/S7bUHaKDoAFC209JE8Ofjj2KofFEx3wsJGbHJh0sX650x4oh1ULi36 JnZ5wt5YQNCz1poNHTA0xEe1XKEpO/mGQo7cwnH01FnOjEdPpDIjDHGADknCN0FW hvmh+NupGXD/X9kwSvkUBZCYRgIy5+Uzp4lzGuOY3cRysh+o6YrPLnMTVT6Eo/Pf G4jISIyaDK7IRQKXj3rWyv8Gwk6cOY8= -----END CERTIFICATE-----Generated at Wed Sep 30 02:37:04 2026 by rpki-client