$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b61035a-0f3d-3009-b533-818da905305b.roa File: 5b61035a-0f3d-3009-b533-818da905305b.roa (raw, json) Hash identifier: v80Fr3npkDcU0keCRJ80OYVfoU4Twhz9B2WZixn1xb8= Subject key identifier: 7E:73:22:20:85:ED:3E:D4:D9:87:E4:E4:37:C8:90:16:D0:0F:71:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47FAE7B2BE218C2091D060 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b61035a-0f3d-3009-b533-818da905305b.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.40.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fa:e7:b2:be:21:8c:20:91:d0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=25f22e94-45f9-4752-8711-05bd92e52cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6a:09:79:09:71:e7:a1:33:c2:52:c7:24:df: 47:67:e3:28:d7:d9:46:8f:92:4b:19:b5:2a:33:ea: 88:2a:4b:20:e5:e4:9a:fd:19:a5:4e:db:ef:e1:93: 63:14:cf:3d:e3:98:c5:e5:7a:3a:6e:32:3c:34:97: a8:66:eb:ae:14:ef:50:d4:70:ff:49:4c:2b:1e:f2: d3:63:fb:cb:44:f0:2c:7f:af:de:2c:11:5f:11:7c: 97:94:88:1a:6a:9e:1e:c4:bb:8d:9a:5a:06:15:a9: 75:9b:b4:f3:8e:46:4f:d1:db:d1:9c:d8:8d:7e:d4: d1:17:8f:04:5f:62:95:6c:8d:a5:ce:44:01:0d:0c: e9:a5:60:79:30:78:05:9a:6a:0e:fe:b6:ef:3a:a7: a2:e6:f5:27:b9:9e:54:09:02:ba:62:17:b6:e5:7f: 05:2d:e5:96:d0:f7:7b:25:2d:6c:b6:5f:e4:20:60: 28:e3:b8:d8:fa:25:67:0e:41:11:af:7d:21:a2:25: 80:0c:59:cd:52:9e:85:1a:4a:81:5d:dd:3a:00:9f: c7:e2:b5:96:9e:96:46:ae:ce:5e:87:dd:4f:c5:fb: 91:19:79:ff:a4:36:da:30:a6:6e:a0:96:c5:8f:4c: ec:dc:01:66:16:df:90:67:cc:68:0e:46:9e:00:3e: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:73:22:20:85:ED:3E:D4:D9:87:E4:E4:37:C8:90:16:D0:0F:71:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b61035a-0f3d-3009-b533-818da905305b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:80:2c:66:79:b7:90:83:89:99:cc:a9:b4:46:bf:8c:5e:7d: e0:83:f0:45:7c:cc:d3:71:68:f4:7d:d1:6d:89:bf:c8:6a:94: 42:3a:f7:2a:5b:44:0f:3a:20:b4:5e:36:b2:8d:69:06:a1:6d: 14:10:d3:aa:04:0d:6f:d9:79:fa:0a:3f:e8:d7:f4:40:7e:09: 0b:e5:24:6e:86:c4:7e:a9:ca:27:45:0f:81:4e:87:da:26:9c: 94:47:5f:20:4d:4f:be:dc:e8:f5:35:5b:b1:e1:f7:4b:2a:22: 70:14:0a:3a:b2:fb:38:3d:ec:74:f9:99:c7:9b:d9:26:74:ab: 73:96:12:74:a6:50:43:a5:bb:9b:e0:78:09:6a:9d:a1:34:8f: 2a:a2:7b:29:7d:77:32:e5:3f:f4:38:56:58:e3:23:01:02:dc: 9b:4e:8f:48:70:d8:90:6e:63:57:16:7b:ba:69:e9:87:8b:40: b3:39:03:03:ca:80:a7:0e:26:10:2b:61:82:10:96:3f:6f:5e: 06:c7:38:02:42:cb:ed:7d:c7:7e:f4:33:7a:a9:ec:24:a2:07: 0e:bd:33:57:23:6e:52:0b:34:d8:94:80:64:2a:69:d6:fe:07: 03:83:6a:2e:9a:f8:82:08:f7:b9:25:52:d1:14:85:14:52:51: ab:dd:ad:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/rnsr4hjCCR0GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MjVmMjJlOTQtNDVmOS00NzUyLTg3MTEtMDViZDkyZTUyY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWoJeQlx56EzwlLHJN9HZ+Mo19lGj5JLGbUq M+qIKksg5eSa/RmlTtvv4ZNjFM8945jF5Xo6bjI8NJeoZuuuFO9Q1HD/SUwrHvLT Y/vLRPAsf6/eLBFfEXyXlIgaap4exLuNmloGFal1m7TzjkZP0dvRnNiNftTRF48E X2KVbI2lzkQBDQzppWB5MHgFmmoO/rbvOqei5vUnuZ5UCQK6Yhe25X8FLeWW0Pd7 JS1stl/kIGAo47jY+iVnDkERr30hoiWADFnNUp6FGkqBXd06AJ/H4rWWnpZGrs5e h91PxfuRGXn/pDbaMKZuoJbFj0zs3AFmFt+QZ8xoDkaeAD7KdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5zIiCF7T7U2Yfk5DfIkBbQD3H1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI2MTAzNWEtMGYzZC0z MDA5LWI1MzMtODE4ZGE5MDUzMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFygSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOALGZ5t5CDiZnMqbRGv4xefeCD8EV8zNNxaPR90W2Jv8hqlEI69ypb RA86ILReNrKNaQahbRQQ06oEDW/ZefoKP+jX9EB+CQvlJG6GxH6pyidFD4FOh9om nJRHXyBNT77c6PU1W7Hh90sqInAUCjqy+zg97HT5mceb2SZ0q3OWEnSmUEOlu5vg eAlqnaE0jyqieyl9dzLlP/Q4VljjIwEC3JtOj0hw2JBuY1cWe7pp6YeLQLM5AwPK gKcOJhArYYIQlj9vXgbHOAJCy+19x370M3qp7CSiBw69M1cjblILNNiUgGQqadb+ BwODai6a+III97klUtEUhRRSUavdrUA= -----END CERTIFICATE-----Generated at Mon Sep 28 10:13:37 2026 by rpki-client