$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be2491f-8917-3eb3-bded-f6fce4ecf258.roa File: 8be2491f-8917-3eb3-bded-f6fce4ecf258.roa (raw, json) Hash identifier: lxi3h8g3YNQzDq8ZkylYGMSljTR6/i4zijeJfH62+KU= Subject key identifier: 3A:C9:B3:DF:24:A1:48:63:B8:7C:DA:28:C8:52:F6:7E:21:5C:5C:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985540B4DDAF7BD2EF078C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be2491f-8917-3eb3-bded-f6fce4ecf258.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.54.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:54:0b:4d:da:f7:bd:2e:f0:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=166acc1e-ab75-46a1-b049-119f12b6dbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:00:62:c3:68:a2:06:e8:d3:b7:6b:f8:fd:72: 24:4d:a8:01:d7:28:69:96:35:fb:ad:9c:a5:73:5e: 13:32:ba:31:5e:7c:d4:ac:eb:3c:b6:ca:f9:61:2d: c7:4a:76:2c:85:87:42:07:4c:a9:e2:c8:dd:20:53: 3a:66:2d:3d:1e:5e:aa:54:f5:37:96:45:ea:1f:5a: 2e:4a:37:ef:51:83:d8:58:6d:f2:65:6e:be:27:a3: be:2f:16:00:b5:b7:8c:5d:5c:58:aa:a8:88:59:1e: 9d:b1:a9:a8:b6:64:38:6d:44:33:8e:e2:72:29:b4: 1b:14:b6:86:e5:de:0e:90:ce:d4:e2:a4:8e:41:36: 40:cc:a1:6a:92:a0:2a:6d:5a:26:31:e4:5e:8a:25: 88:79:8e:e0:37:72:1e:68:c0:e0:2f:a4:bd:2c:ef: 23:f2:1c:90:d5:2a:7c:3f:c1:db:0d:11:ea:f2:e3: 0a:5a:01:55:1f:03:b8:e0:06:67:f5:c7:f2:5e:a9: c5:df:2a:c9:31:39:7a:5d:0d:d9:90:7c:ba:53:29: 01:35:16:02:3d:54:41:0b:1a:50:d7:77:5c:80:15: 78:78:cc:95:53:87:ca:bd:d4:b5:0d:e8:fe:7f:41: 0b:a3:66:85:d9:c2:b8:7d:e8:e0:d6:af:60:75:41: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C9:B3:DF:24:A1:48:63:B8:7C:DA:28:C8:52:F6:7E:21:5C:5C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8be2491f-8917-3eb3-bded-f6fce4ecf258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:8c:3c:07:58:5a:04:4b:ed:4d:44:8e:07:fc:f3:63:6b:64: e2:31:78:21:6c:a8:8a:02:06:f8:4b:d2:76:c4:7e:7f:24:21: e1:2b:30:e5:14:f8:c9:99:72:f2:3c:b8:85:f3:22:1e:2a:97: 55:e4:59:61:4a:90:0d:a1:d3:d8:51:17:38:74:0e:d6:bc:d3: d7:f0:7c:a2:db:7f:1d:93:8b:ee:01:89:e1:88:59:92:e3:54: 78:df:d1:d6:cb:a8:d8:48:9d:be:dd:15:ce:04:f6:0e:a3:fe: 27:08:95:30:8c:4a:ec:eb:5d:ad:db:f7:01:4e:f0:34:d0:1f: d2:64:f7:35:a8:bc:8d:04:f4:d9:75:06:33:ca:2f:e0:1f:5b: c6:9f:d0:16:59:3c:65:92:1a:7b:5d:e7:cd:38:00:be:ee:bd: 2c:9b:da:13:1b:56:52:4f:59:34:df:96:04:65:01:b1:3a:ba: 46:75:1e:b9:89:90:ec:47:4c:a3:1b:06:7f:76:19:9c:32:13: fc:43:1c:c8:6c:ba:64:6f:4a:98:22:3b:b2:84:43:d6:7c:23: 43:6e:10:dd:19:0f:fa:1c:9a:c7:9f:dc:29:45:06:1a:23:97: ac:6c:cb:cd:14:e3:73:c6:4d:53:0b:fa:0d:9f:58:27:24:c1: f4:68:e9:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhVQLTdr3vS7weMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTY2YWNjMWUtYWI3NS00NmExLWIwNDktMTE5ZjEyYjZkYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQBiw2iiBujTt2v4/XIkTagB1yhpljX7rZyl c14TMroxXnzUrOs8tsr5YS3HSnYshYdCB0yp4sjdIFM6Zi09Hl6qVPU3lkXqH1ou SjfvUYPYWG3yZW6+J6O+LxYAtbeMXVxYqqiIWR6dsamotmQ4bUQzjuJyKbQbFLaG 5d4OkM7U4qSOQTZAzKFqkqAqbVomMeReiiWIeY7gN3IeaMDgL6S9LO8j8hyQ1Sp8 P8HbDRHq8uMKWgFVHwO44AZn9cfyXqnF3yrJMTl6XQ3ZkHy6UykBNRYCPVRBCxpQ 13dcgBV4eMyVU4fKvdS1Dej+f0ELo2aF2cK4fejg1q9gdUFTEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrJs98koUhjuHzaKMhS9n4hXFx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJlMjQ5MWYtODkxNy0z ZWIzLWJkZWQtZjZmY2U0ZWNmMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzZ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmMPAdYWgRL7U1Ejgf882NrZOIxeCFsqIoCBvhL0nbEfn8kIeErMOUU +MmZcvI8uIXzIh4ql1XkWWFKkA2h09hRFzh0Dta809fwfKLbfx2Ti+4BieGIWZLj VHjf0dbLqNhInb7dFc4E9g6j/icIlTCMSuzrXa3b9wFO8DTQH9Jk9zWovI0E9Nl1 BjPKL+AfW8af0BZZPGWSGntd5804AL7uvSyb2hMbVlJPWTTflgRlAbE6ukZ1HrmJ kOxHTKMbBn92GZwyE/xDHMhsumRvSpgiO7KEQ9Z8I0NuEN0ZD/ocmsef3ClFBhoj l6xsy80U43PGTVML+g2fWCckwfRo6bc= -----END CERTIFICATE-----Generated at Sat Sep 26 04:55:36 2026 by rpki-client