$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4008f5a9-e939-352f-aff8-f83d2bf80d64.roa File: 4008f5a9-e939-352f-aff8-f83d2bf80d64.roa (raw, json) Hash identifier: 1UDJc8tVo+IEBBVBMA+nHRypqmomunYShh+cZMSrb0Q= Subject key identifier: 78:B0:03:E5:11:76:9D:D7:18:84:62:37:77:3A:39:BA:DE:A3:12:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F498553479981F4F26A2885C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4008f5a9-e939-352f-aff8-f83d2bf80d64.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.54.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:53:47:99:81:f4:f2:6a:28:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4633d1cf-4c10-4278-9b3e-42cf2a3ae22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:a2:7a:b1:c6:3f:f6:55:ed:7c:7d:58:c6: 96:aa:42:06:2f:bd:02:6e:20:e2:6a:f5:8d:9d:0e: 24:39:39:a3:21:97:46:c9:b6:8e:85:9c:3b:7f:ea: bf:df:e4:df:c0:e5:ae:dd:75:e7:58:21:d4:c3:5f: c8:02:dd:2b:86:e3:c7:75:4a:74:06:26:62:8b:2b: dd:0f:2f:83:56:ad:a0:9b:48:29:9e:d3:be:42:84: 55:5e:af:d4:06:c0:18:a3:ba:65:92:0b:84:7d:be: bc:fa:b1:24:77:15:75:ca:43:a6:d5:cc:b6:42:82: 54:66:7b:10:38:18:fd:ce:d7:e0:e5:19:40:15:03: c5:2c:08:f9:a0:07:f7:4d:3d:5e:19:52:c6:f2:0b: c6:73:57:42:5a:f1:c9:ef:83:2c:87:40:ec:a5:4c: f0:b7:a3:eb:af:07:94:d5:2c:ff:8a:b7:76:a2:33: 22:81:47:dd:06:ca:bf:9d:94:a2:5d:d4:ac:b9:42: 69:6a:64:c6:7c:97:4d:7f:57:c9:27:13:09:de:bd: a2:12:97:21:5f:44:d9:f3:5d:71:f3:40:2c:7b:d5: b0:91:f6:0a:8c:2c:af:51:05:e6:a6:43:bf:5e:ed: d5:ea:8a:b3:f9:41:49:38:ca:35:23:1b:c4:1d:a8: 62:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B0:03:E5:11:76:9D:D7:18:84:62:37:77:3A:39:BA:DE:A3:12:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4008f5a9-e939-352f-aff8-f83d2bf80d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:eb:09:7a:51:46:8b:53:26:d7:d4:93:ec:13:31:04:b8:11: b6:9b:c4:47:b0:19:8f:61:6f:10:3a:da:7b:6c:4b:ca:0e:32: b2:6b:32:6d:22:b7:79:07:39:0a:3e:99:b9:e1:3b:0c:19:1d: 6b:13:26:4f:0a:9f:c1:65:00:26:4f:bf:e8:32:e3:0a:ec:8b: 2b:87:41:ef:01:4a:d0:2a:05:4d:08:cc:b0:4c:1c:b3:3b:6f: 82:39:7a:99:53:c2:35:9e:9c:a0:77:1d:e4:97:ab:00:2f:0e: fe:d9:09:93:a8:30:76:cf:38:e2:e1:f7:83:fc:e5:90:6b:52: 37:d4:92:dd:78:12:24:ac:81:21:ef:55:31:e1:67:ec:cb:89: f8:4f:ba:a7:bb:8e:b7:2d:31:07:69:3c:ea:76:51:26:28:20: c1:1e:5d:dd:f0:30:be:96:36:1e:e8:81:c7:85:b5:ee:5e:21: c0:b5:d9:00:c7:2b:80:64:c0:13:62:a0:6b:42:da:8e:78:03: 81:77:d3:5e:a0:0b:25:ce:27:dc:c6:cf:3b:b8:86:3b:36:54: e3:ce:e3:6d:75:95:f1:97:5c:a9:f8:07:0d:10:2c:e2:8c:03: ce:b5:4e:4a:9a:ca:f5:a8:82:7b:c5:7d:ec:1d:e2:99:07:e2: c5:c9:a9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhVNHmYH08moohcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDYzM2QxY2YtNGMxMC00Mjc4LTliM2UtNDJjZjJhM2FlMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG6ierHGP/ZV7Xx9WMaWqkIGL70CbiDiavWN nQ4kOTmjIZdGybaOhZw7f+q/3+TfwOWu3XXnWCHUw1/IAt0rhuPHdUp0BiZiiyvd Dy+DVq2gm0gpntO+QoRVXq/UBsAYo7plkguEfb68+rEkdxV1ykOm1cy2QoJUZnsQ OBj9ztfg5RlAFQPFLAj5oAf3TT1eGVLG8gvGc1dCWvHJ74Msh0DspUzwt6PrrweU 1Sz/ird2ojMigUfdBsq/nZSiXdSsuUJpamTGfJdNf1fJJxMJ3r2iEpchX0TZ811x 80Ase9WwkfYKjCyvUQXmpkO/Xu3V6oqz+UFJOMo1IxvEHahirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHiwA+URdp3XGIRiN3c6ObreoxL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDAwOGY1YTktZTkzOS0z NTJmLWFmZjgtZjgzZDJiZjgwZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrrCXpRRotTJtfUk+wTMQS4EbabxEewGY9hbxA62ntsS8oOMrJrMm0i t3kHOQo+mbnhOwwZHWsTJk8Kn8FlACZPv+gy4wrsiyuHQe8BStAqBU0IzLBMHLM7 b4I5eplTwjWenKB3HeSXqwAvDv7ZCZOoMHbPOOLh94P85ZBrUjfUkt14EiSsgSHv VTHhZ+zLifhPuqe7jrctMQdpPOp2USYoIMEeXd3wML6WNh7ogceFte5eIcC12QDH K4BkwBNioGtC2o54A4F3016gCyXOJ9zGzzu4hjs2VOPO4211lfGXXKn4Bw0QLOKM A861TkqayvWognvFfewd4pkH4sXJqWE= -----END CERTIFICATE-----Generated at Sat Sep 26 07:16:20 2026 by rpki-client