$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/013f3f76-7e58-3a2a-b23c-ef169c52636b.roa File: 013f3f76-7e58-3a2a-b23c-ef169c52636b.roa (raw, json) Hash identifier: gKgjrbkmvbZQ2mQRgcqpPvThWmtk5w5WYoNjN0Dq5qM= Subject key identifier: 95:87:64:7C:09:C9:99:6B:00:B3:90:D7:68:D2:3D:1A:6B:AF:C7:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E26A6D908DD4FCFCAAF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/013f3f76-7e58-3a2a-b23c-ef169c52636b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.202.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:26:a6:d9:08:dd:4f:cf:ca:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9ac9226a-fff2-4531-8cf7-30dcfdeaa177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:81:49:8f:b5:1f:f0:d7:8f:eb:7f:38:88: fd:85:39:8d:73:7f:ef:1a:49:42:27:44:d4:74:86: 3d:c0:d6:00:b9:2b:2e:8e:1f:32:5e:a2:7b:72:03: 20:f6:d7:3a:76:a8:ca:4e:58:c3:14:49:af:89:43: c2:3c:42:0c:3f:6b:11:90:fc:59:15:8e:5e:d7:b8: d7:2f:5e:a0:ce:af:0b:49:80:56:6b:8c:2d:a3:ae: 13:f0:d9:6a:d4:f3:21:d2:2e:25:af:2f:c9:9a:03: 38:70:fd:87:e2:18:db:3a:93:6b:dc:45:ba:90:18: ab:d7:8e:50:87:fd:97:26:eb:25:f7:3a:81:1d:8d: b3:4a:87:0a:0b:44:da:07:8c:a3:13:13:20:99:60: 46:67:26:20:42:b2:91:75:1c:c2:01:b3:d9:ce:30: 62:6a:21:ad:cf:af:8a:04:76:48:1b:7c:c4:d0:4f: 8d:9b:1d:96:5f:d0:35:7d:bf:ae:08:27:ed:64:d9: b2:7c:0f:f8:39:59:42:06:89:8d:88:f6:4f:23:e3: 11:49:c3:b6:b9:35:ea:41:c8:af:9c:7b:ea:c1:e5: fb:39:9e:bb:20:85:bc:ee:69:f1:4b:2c:26:ca:68: b1:50:3f:be:14:83:a0:80:d5:fe:6d:58:ed:30:4d: 0d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:87:64:7C:09:C9:99:6B:00:B3:90:D7:68:D2:3D:1A:6B:AF:C7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/013f3f76-7e58-3a2a-b23c-ef169c52636b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:6d:c4:23:16:d9:39:b1:6f:ef:bb:d1:62:b4:cb:d3:b5:2d: be:03:2d:64:5c:5f:b2:0b:05:db:b6:a8:24:e3:5b:72:a8:54: 6d:5c:71:0f:35:ad:3d:9d:7c:13:45:3b:d3:88:1b:fe:35:e0: e0:25:d3:93:a0:2a:8c:b9:6d:b0:51:46:65:f1:00:2c:23:ba: 78:23:e1:46:9f:0e:8d:6d:17:38:91:c7:54:2e:6c:7a:88:e4: 6c:73:76:8e:e4:d4:d5:5c:36:4a:9b:e0:2d:55:4c:eb:35:6f: d3:9c:33:cf:1b:6b:ee:3c:2a:2b:c2:ad:43:79:0c:2d:00:21: 08:d4:c9:90:b1:f7:58:4a:31:bf:b5:aa:32:08:87:ff:32:df: 90:4e:02:6b:1d:84:81:16:f7:14:85:97:e7:d3:d6:42:5c:af: 9b:40:f2:9a:dc:05:7d:3c:00:42:7e:57:32:df:24:6b:00:33: 9e:0a:38:36:17:e8:e4:d8:e5:45:a1:81:ff:4f:a4:41:e0:d1: 03:e5:fa:0c:a2:37:22:ff:e3:cf:79:f2:57:c5:05:7f:a7:24: be:90:83:ba:0a:8f:0c:f9:e0:08:d8:cd:37:13:88:9d:a5:d2: 88:7e:13:79:68:fb:1d:9d:25:a7:36:5b:0c:8f:52:e8:f4:f5: 20:0f:28:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfiam2QjdT8/Kr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWFjOTIyNmEtZmZmMi00NTMxLThjZjctMzBkY2ZkZWFhMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaOBSY+1H/DXj+t/OIj9hTmNc3/vGklCJ0TU dIY9wNYAuSsujh8yXqJ7cgMg9tc6dqjKTljDFEmviUPCPEIMP2sRkPxZFY5e17jX L16gzq8LSYBWa4wto64T8Nlq1PMh0i4lry/JmgM4cP2H4hjbOpNr3EW6kBir145Q h/2XJusl9zqBHY2zSocKC0TaB4yjExMgmWBGZyYgQrKRdRzCAbPZzjBiaiGtz6+K BHZIG3zE0E+Nmx2WX9A1fb+uCCftZNmyfA/4OVlCBomNiPZPI+MRScO2uTXqQciv nHvqweX7OZ67IIW87mnxSywmymixUD++FIOggNX+bVjtME0NxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWHZHwJyZlrALOQ12jSPRprr8dsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDEzZjNmNzYtN2U1OC0z YTJhLWIyM2MtZWYxNjljNTI2MzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8qcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRtxCMW2Tmxb++70WK0y9O1Lb4DLWRcX7ILBdu2qCTjW3KoVG1ccQ81 rT2dfBNFO9OIG/414OAl05OgKoy5bbBRRmXxACwjungj4UafDo1tFziRx1QubHqI 5Gxzdo7k1NVcNkqb4C1VTOs1b9OcM88ba+48KivCrUN5DC0AIQjUyZCx91hKMb+1 qjIIh/8y35BOAmsdhIEW9xSFl+fT1kJcr5tA8prcBX08AEJ+VzLfJGsAM54KODYX 6OTY5UWhgf9PpEHg0QPl+gyiNyL/48958lfFBX+nJL6Qg7oKjwz54AjYzTcTiJ2l 0oh+E3lo+x2dJac2WwyPUuj09SAPKEs= -----END CERTIFICATE-----Generated at Fri Sep 25 15:28:19 2026 by rpki-client