$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b74aea1-878f-35d2-8908-6073fa6f3139.roa File: 5b74aea1-878f-35d2-8908-6073fa6f3139.roa (raw, json) Hash identifier: uOaCNJE6pV3NjFYU53TSl6QfxW3egz+Wc8uq2uUKFS8= Subject key identifier: C1:8D:02:13:FB:99:99:EA:9B:4A:88:4E:6C:4C:61:79:D8:0B:8C:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F08CD771DF3FFF41E240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b74aea1-878f-35d2-8908-6073fa6f3139.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 35994 IP address blocks: 23.38.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f0:8c:d7:71:df:3f:ff:41:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=557fd227-216c-4e95-a29b-8079c48da4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:70:ca:93:d5:0f:8b:f2:58:a8:38:45:1b:77: 99:b9:a0:09:54:8d:3d:3c:ed:f5:a0:83:e1:1d:3d: 66:d0:41:04:2c:50:9b:5a:76:43:a1:78:ac:f1:14: 9d:19:6b:54:35:b5:28:d2:1d:e2:79:17:9c:96:a6: e2:6d:9f:6a:47:6c:62:cf:3d:21:10:96:a1:34:42: 5f:af:31:5f:5b:bc:f5:55:33:d8:c1:2a:52:a3:ea: 2b:7d:16:ed:5e:94:5f:39:87:84:5f:ea:60:ce:a1: 0d:90:16:c8:f5:03:cb:cc:0b:f2:71:b4:3e:cb:ce: d7:77:ec:08:a7:63:21:92:43:39:75:01:c1:de:6c: 33:ec:6b:f5:49:cc:fa:2b:9d:56:29:e0:08:98:97: 54:5e:29:b2:66:e8:4e:93:9b:87:df:f6:82:fe:b3: 2c:ab:5b:f1:64:4a:00:46:24:90:64:26:a2:7d:e8: f9:60:4b:17:51:67:c5:ce:45:08:07:72:44:e3:34: c2:15:d1:1a:41:92:4b:80:4b:ae:9d:c1:7c:40:d8: 90:51:0b:25:03:0f:b7:c6:21:c4:46:fd:7d:36:c4: 3f:ee:34:04:81:6f:ca:f6:16:23:b1:d1:c6:65:b2: cd:71:ea:5b:b7:a0:21:67:18:aa:97:28:3e:6d:ba: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8D:02:13:FB:99:99:EA:9B:4A:88:4E:6C:4C:61:79:D8:0B:8C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b74aea1-878f-35d2-8908-6073fa6f3139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a8:63:59:e9:63:7e:d0:60:cd:9c:b4:1e:b1:b3:84:cd:79: 83:74:f2:a8:13:69:83:23:7c:c1:63:cd:06:54:38:f8:92:55: bc:17:60:b1:97:5b:be:4d:f3:ce:9b:c8:0c:ba:eb:f1:65:3b: 45:42:49:19:96:6b:78:59:25:53:9e:26:a8:ff:3e:69:d3:e5: c1:df:21:49:4c:32:d0:4a:8f:53:9a:19:10:7a:b7:84:c7:fe: e5:38:4b:5f:8b:7a:61:37:19:7d:c1:e1:c3:7a:c1:0e:d2:ff: 95:ef:30:30:91:81:d9:4a:83:65:68:8a:89:65:48:80:fa:8d: 09:a9:58:28:bd:7a:a4:50:f7:7a:46:ab:7f:37:9e:ce:81:0a: ee:33:5f:43:02:73:34:b1:7a:ee:a0:23:6f:ae:dc:fe:5d:18: e6:d2:ed:ab:1c:a5:50:f0:5d:9c:93:ce:87:b9:80:61:e2:65: ec:07:86:27:a4:84:5f:5e:81:e4:5f:a3:9c:2c:21:cc:1d:ff: 86:95:e0:b4:5a:97:51:a2:4e:7f:f5:2b:5d:d7:16:39:33:2b: 0e:b2:be:65:ad:ac:3e:4d:02:f3:25:10:50:73:8c:5c:7c:39: 8d:31:cc:4c:1a:37:60:60:b1:9b:32:67:90:c0:bd:81:ef:bf: 56:3d:41:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/CM13HfP/9B4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NTU3ZmQyMjctMjE2Yy00ZTk1LWEyOWItODA3OWM0OGRhNGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3DKk9UPi/JYqDhFG3eZuaAJVI09PO31oIPh HT1m0EEELFCbWnZDoXis8RSdGWtUNbUo0h3ieReclqbibZ9qR2xizz0hEJahNEJf rzFfW7z1VTPYwSpSo+orfRbtXpRfOYeEX+pgzqENkBbI9QPLzAvycbQ+y87Xd+wI p2MhkkM5dQHB3mwz7Gv1Scz6K51WKeAImJdUXimyZuhOk5uH3/aC/rMsq1vxZEoA RiSQZCaifej5YEsXUWfFzkUIB3JE4zTCFdEaQZJLgEuuncF8QNiQUQslAw+3xiHE Rv19NsQ/7jQEgW/K9hYjsdHGZbLNcepbt6AhZxiqlyg+bbrxkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGNAhP7mZnqm0qITmxMYXnYC4y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI3NGFlYTEtODc4Zi0z NWQyLTg5MDgtNjA3M2ZhNmYzMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+oY1npY37QYM2ctB6xs4TNeYN08qgTaYMjfMFjzQZUOPiSVbwXYLGX W75N886byAy66/FlO0VCSRmWa3hZJVOeJqj/PmnT5cHfIUlMMtBKj1OaGRB6t4TH /uU4S1+LemE3GX3B4cN6wQ7S/5XvMDCRgdlKg2VoiollSID6jQmpWCi9eqRQ93pG q383ns6BCu4zX0MCczSxeu6gI2+u3P5dGObS7ascpVDwXZyTzoe5gGHiZewHhiek hF9egeRfo5wsIcwd/4aV4LRal1GiTn/1K13XFjkzKw6yvmWtrD5NAvMlEFBzjFx8 OY0xzEwaN2BgsZsyZ5DAvYHvv1Y9QTU= -----END CERTIFICATE-----Generated at Tue Sep 22 12:40:58 2026 by rpki-client