$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f838491-09cd-3027-b512-68057a2aab36.roa File: 0f838491-09cd-3027-b512-68057a2aab36.roa (raw, json) Hash identifier: NYvVH4KIxuNZB++Agpslc70PmcwTBSyupR1JxZ4bF4c= Subject key identifier: 2D:52:65:6F:FB:04:03:52:9E:CF:15:B4:5F:CF:33:CE:B1:D4:25:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D49E3D44316C35CED8F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f838491-09cd-3027-b512-68057a2aab36.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.52.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:49:e3:d4:43:16:c3:5c:ed:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=1e4cd49b-4a81-4e70-a952-1559f8678757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:6c:7a:a0:a5:11:56:7e:d0:9e:e5:f2:1c: ef:9d:58:9b:aa:02:0b:fb:4c:32:2c:c6:9f:ab:9f: e8:84:18:29:02:05:5b:f4:85:c4:66:4f:d7:d9:63: 96:19:d3:c2:3a:8c:30:ae:3b:59:98:4d:1e:0d:52: 5a:f3:60:04:6d:ea:69:93:56:dd:2f:0b:c0:a6:44: 1c:dd:ee:2c:91:7f:81:b6:58:ca:81:a9:ba:ad:2f: 9b:92:0a:db:5e:c6:39:3c:d8:47:f0:fa:46:c0:22: 22:4a:14:45:fa:df:2e:8a:75:57:a7:41:a2:3b:e7: 87:8b:ad:77:22:ef:96:99:3b:c1:4b:d9:ad:12:f6: 41:8c:d4:c8:e9:ca:11:26:1c:06:24:a3:7d:50:b3: 19:df:78:63:3e:9a:f4:20:a7:d7:7a:f6:f9:39:3a: 6e:f3:90:2c:1f:ba:f4:a5:1e:26:4d:3b:26:17:5f: 6e:af:9f:a8:b5:3a:a8:d1:c7:0c:8a:c9:49:44:9a: 6d:b9:84:7b:93:51:cf:39:37:1e:1a:d0:8a:24:02: 3d:ba:c9:27:1e:04:48:3a:46:84:7c:29:2c:e8:c9: 36:86:9a:d0:be:f7:aa:18:2d:5d:ac:96:57:3e:99: c0:d2:0e:cd:07:c4:30:60:79:c9:9b:57:58:49:1a: f9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:52:65:6F:FB:04:03:52:9E:CF:15:B4:5F:CF:33:CE:B1:D4:25:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f838491-09cd-3027-b512-68057a2aab36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3e:51:c4:7c:3a:2a:11:50:7c:5b:bf:34:c2:90:81:9e:7d: 3c:8d:af:c3:46:1c:de:f5:57:d3:b8:3d:36:3d:e5:d4:e7:64: 86:c5:bf:12:5b:63:1e:cd:a1:5a:b7:f6:1f:59:f3:9e:eb:a8: 98:ed:77:e4:34:6a:51:13:d9:1b:06:49:54:a2:b5:ca:b2:e0: 8f:1b:68:e9:52:2b:11:3d:8c:61:ef:86:7c:b2:bc:65:d3:46: ee:c5:f0:2d:03:24:0d:95:07:05:55:98:76:f5:c2:67:ea:73: 8e:8c:6d:8f:43:f9:b7:36:27:29:9a:45:ef:c4:7c:a2:91:e0: 63:92:3f:6a:45:b9:61:72:74:69:84:42:62:1c:e0:ca:b8:49: d8:95:65:98:bd:7d:30:6e:c0:21:ce:84:91:15:d4:b3:7e:b1: 3d:d6:64:0e:22:37:18:15:e6:b1:b0:8b:8d:55:cd:06:70:dc: 53:4a:59:46:dd:77:e6:dd:09:be:ec:15:e2:dd:2b:a4:8d:c3: 5b:93:5f:13:be:1b:20:ca:7a:fe:1a:31:a9:2d:54:e5:96:88: da:96:e3:39:6b:13:92:2e:4c:3c:80:a1:6a:b7:da:49:37:95: 72:4a:10:0a:31:5a:7f:49:b5:ed:0e:2b:d3:d8:b8:28:4f:e4: 5a:62:55:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUnj1EMWw1ztj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MWU0Y2Q0OWItNGE4MS00ZTcwLWE5NTItMTU1OWY4Njc4NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDdseqClEVZ+0J7l8hzvnVibqgIL+0wyLMaf q5/ohBgpAgVb9IXEZk/X2WOWGdPCOowwrjtZmE0eDVJa82AEbeppk1bdLwvApkQc 3e4skX+BtljKgam6rS+bkgrbXsY5PNhH8PpGwCIiShRF+t8uinVXp0GiO+eHi613 Iu+WmTvBS9mtEvZBjNTI6coRJhwGJKN9ULMZ33hjPpr0IKfXevb5OTpu85AsH7r0 pR4mTTsmF19ur5+otTqo0ccMislJRJptuYR7k1HPOTceGtCKJAI9usknHgRIOkaE fCks6Mk2hprQvveqGC1drJZXPpnA0g7NB8QwYHnJm1dYSRr5oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1SZW/7BANSns8VtF/PM86x1CXWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY4Mzg0OTEtMDljZC0z MDI3LWI1MTItNjgwNTdhMmFhYjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg+UcR8OioRUHxbvzTCkIGefTyNr8NGHN71V9O4PTY95dTnZIbFvxJb Yx7NoVq39h9Z857rqJjtd+Q0alET2RsGSVSitcqy4I8baOlSKxE9jGHvhnyyvGXT Ru7F8C0DJA2VBwVVmHb1wmfqc46MbY9D+bc2JymaRe/EfKKR4GOSP2pFuWFydGmE QmIc4Mq4SdiVZZi9fTBuwCHOhJEV1LN+sT3WZA4iNxgV5rGwi41VzQZw3FNKWUbd d+bdCb7sFeLdK6SNw1uTXxO+GyDKev4aMaktVOWWiNqW4zlrE5IuTDyAoWq32kk3 lXJKEAoxWn9Jte0OK9PYuChP5FpiVZU= -----END CERTIFICATE-----Generated at Mon Sep 28 21:22:52 2026 by rpki-client