$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/9a009c87-99e6-33c8-9802-40d7527ac86f.roa File: 9a009c87-99e6-33c8-9802-40d7527ac86f.roa (raw, json) Hash identifier: AxnCf/ot+U7MJ1p7fVm6uRkhiUFhGu10nCzP5U6yraI= Subject key identifier: B2:2E:D2:2E:E9:79:FC:EA:75:37:44:E9:C6:9D:6A:FA:B3:BC:E0:47 Certificate issuer: /CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0 Certificate serial: 010D0C9F4328584F3E480578C795777209C3E1D8 Authority key identifier: 4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/9a009c87-99e6-33c8-9802-40d7527ac86f.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 21859 IP address blocks: 23.149.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:05:78:c7:95:77:72:09:c3:e1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=556e98ac-3b96-4a05-bede-0e6e89374293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:b9:22:19:ef:11:13:9a:fa:69:f7:d0:ae: f1:ac:64:c7:d6:9d:58:7c:7c:a9:4a:e4:52:df:de: b3:19:56:eb:55:34:30:c3:0d:aa:1b:20:4c:6b:a7: a4:17:2a:3d:de:50:28:56:72:5e:9d:7d:13:5b:77: 99:6b:31:7c:dc:66:10:30:70:67:8d:0e:8c:36:ce: 98:c1:a8:93:16:dc:da:0f:6a:a5:cd:17:55:5c:05: 32:9d:84:e9:0a:6d:bd:aa:24:bf:0b:09:6b:c1:2f: ef:53:10:9f:61:32:29:1d:59:04:e6:76:67:61:d8: 24:84:83:89:cb:2e:22:7d:39:4b:f6:3e:19:e5:2b: 9b:6f:23:ae:a9:6c:41:20:59:ce:a1:f6:b1:56:f0: c7:ac:7f:5e:42:02:a8:21:e9:79:d3:56:25:ec:11: 8e:68:77:02:5b:4b:8c:5f:2c:48:56:49:e1:66:3e: 4a:86:e2:f6:78:60:29:e5:77:60:63:66:4a:c0:86: a0:81:50:70:1b:d4:2b:56:8a:2e:60:58:0f:a2:91: 05:19:84:23:b6:dd:71:72:7e:59:93:76:b7:37:9a: 88:f9:03:a3:79:33:b1:02:01:2f:64:d7:26:cc:c8: b4:d6:b1:a3:13:1c:c2:fb:82:b1:f3:2f:bd:a0:36: 84:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2E:D2:2E:E9:79:FC:EA:75:37:44:E9:C6:9D:6A:FA:B3:BC:E0:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/9a009c87-99e6-33c8-9802-40d7527ac86f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl X509v3 Authority Key Identifier: keyid:4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer sbgp-ipAddrBlock: critical IPv4: 23.149.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e7:54:25:f1:08:14:45:be:a3:14:6d:85:24:40:d5:d2:80: 6b:ff:3e:36:48:65:b7:ba:40:e4:46:ea:08:2d:a8:e6:f2:db: 8c:fb:b2:ab:a2:44:6a:0f:32:c9:4b:aa:8d:61:0f:04:bd:ec: a9:a6:2f:93:52:69:47:ed:81:87:88:2a:c1:5d:59:a5:34:91: a6:28:fd:21:20:64:5f:57:a0:96:55:d6:33:92:95:46:f3:aa: 1a:9b:3d:2f:42:79:87:18:f3:9a:53:83:75:fc:88:83:9c:62: 89:39:bb:e6:a5:2d:c9:e1:b7:0a:de:df:3d:15:03:4a:8e:76: f2:66:d2:8e:9a:1c:16:d8:d5:e3:26:7c:79:b1:2e:a0:4c:91: bb:fc:80:52:9d:01:ba:06:42:e9:36:4d:dd:1e:f4:e5:96:f5: 55:55:75:03:37:c9:10:a8:1d:32:c6:94:2e:80:61:ad:eb:d8: 31:c7:94:cd:25:79:c6:13:9e:64:b8:87:47:47:3d:d8:35:b3: 1c:1d:9d:97:eb:f8:2d:a7:5d:5f:e9:2a:0e:06:fa:00:a0:d7: d2:11:50:ec:44:fb:9a:c5:69:46:ec:ee:d2:70:dc:52:ff:ff: 2a:0b:c1:4d:b0:70:e1:13:54:d8:84:c1:31:c5:8e:a1:65:4e: 08:f1:ce:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+SAV4x5V3cgnD4dgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY5ZjVjYjUtYTdiYi00M2UwLTkwZDEtOTQ3N2Q3ZGUx YWIwMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NTU2ZTk4YWMtM2I5Ni00YTA1LWJlZGUtMGU2ZTg5Mzc0MjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyC5IhnvEROa+mn30K7xrGTH1p1YfHypSuRS 396zGVbrVTQwww2qGyBMa6ekFyo93lAoVnJenX0TW3eZazF83GYQMHBnjQ6MNs6Y waiTFtzaD2qlzRdVXAUynYTpCm29qiS/CwlrwS/vUxCfYTIpHVkE5nZnYdgkhIOJ yy4ifTlL9j4Z5SubbyOuqWxBIFnOofaxVvDHrH9eQgKoIel501Yl7BGOaHcCW0uM XyxIVknhZj5KhuL2eGAp5XdgY2ZKwIaggVBwG9QrVoouYFgPopEFGYQjtt1xcn5Z k3a3N5qI+QOjeTOxAgEvZNcmzMi01rGjExzC+4Kx8y+9oDaEUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIu0i7pefzqdTdE6cadavqzvOBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjlm NWNiNS1hN2JiLTQzZTAtOTBkMS05NDc3ZDdkZTFhYjAvOWEwMDljODctOTllNi0z M2M4LTk4MDItNDBkNzUyN2FjODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWY5ZjVjYjUtYTdiYi00M2UwLTkw ZDEtOTQ3N2Q3ZGUxYWIwLzFmOWY1Y2I1LWE3YmItNDNlMC05MGQxLTk0NzdkN2Rl MWFiMC5jcmwwHwYDVR0jBBgwFoAUTJt9xaVBRqXYw9/Nq2gQcD8+4JwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xZjlmNWNiNS1hN2JiLTQzZTAtOTBkMS05NDc3 ZDdkZTFhYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5U8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3nVCXxCBRFvqMUbYUkQNXSgGv/PjZIZbe6QORG6ggtqOby24z7squi RGoPMslLqo1hDwS97KmmL5NSaUftgYeIKsFdWaU0kaYo/SEgZF9XoJZV1jOSlUbz qhqbPS9CeYcY85pTg3X8iIOcYok5u+alLcnhtwre3z0VA0qOdvJm0o6aHBbY1eMm fHmxLqBMkbv8gFKdAboGQuk2Td0e9OWW9VVVdQM3yRCoHTLGlC6AYa3r2DHHlM0l ecYTnmS4h0dHPdg1sxwdnZfr+C2nXV/pKg4G+gCg19IRUOxE+5rFaUbs7tJw3FL/ /yoLwU2wcOETVNiEwTHFjqFlTgjxzu4= -----END CERTIFICATE-----Generated at Mon Sep 21 04:14:33 2026 by rpki-client