$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f34e919-4daa-3e99-ad31-4233ff3492a9.roa File: 8f34e919-4daa-3e99-ad31-4233ff3492a9.roa (raw, json) Hash identifier: fXtDgMz/K+bvDixiiwav7CSvuEtd0CIqWOMABbJ8iEM= Subject key identifier: CC:B6:C6:2F:68:DD:01:1D:30:CE:FA:99:12:8F:67:4B:FE:4A:53:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985B5655267F959C572D000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f34e919-4daa-3e99-ad31-4233ff3492a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.200.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:b5:65:52:67:f9:59:c5:72:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b6d60ed2-2f02-4260-9c74-6a1ba4963449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:ae:9f:1a:b1:d4:f2:9e:05:e0:72:44:48: 99:8f:e7:5d:32:bc:ed:34:4d:eb:86:bb:64:be:b7: 5b:5f:28:15:14:fd:65:37:bd:e2:69:cd:6e:bf:eb: 36:94:af:27:45:d9:cf:9a:81:a5:c9:db:7a:1a:f9: e0:aa:f2:9b:41:25:72:e2:1f:1a:3f:42:ba:a3:7e: 24:e0:30:87:67:57:5c:57:04:04:68:de:b6:34:0f: 04:5b:92:cf:49:85:cb:fd:e1:17:77:3d:98:60:40: d2:43:cb:b3:b4:96:1a:4e:96:a5:c2:79:75:a8:2d: 36:e2:7b:62:a9:c5:60:84:52:5e:66:30:20:d1:54: 47:09:62:b4:84:65:11:bd:64:c9:8b:84:65:fe:29: 9f:7e:64:c5:2b:7c:45:f8:d9:c2:f2:ba:c3:fd:e0: d3:a5:1f:37:ae:28:88:a4:b3:a0:89:76:a0:5b:af: df:21:68:2e:ea:3b:15:12:9c:a5:a8:ec:e7:7b:a3: 38:33:1a:61:40:d7:9f:20:8f:48:6d:2a:d5:f1:1e: 3e:9f:66:2a:42:91:ab:c3:15:af:8b:0b:e7:28:bd: ad:f4:e4:25:91:e1:10:76:1a:d9:27:33:bd:1d:43: 23:dd:be:f4:97:3c:f6:37:51:9b:6c:39:c1:7d:72: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B6:C6:2F:68:DD:01:1D:30:CE:FA:99:12:8F:67:4B:FE:4A:53:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f34e919-4daa-3e99-ad31-4233ff3492a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:03:fa:f2:cd:ff:a9:ab:12:7c:e6:1a:09:f8:3c:2f:a9:93: 8a:71:42:86:6c:d7:5a:bf:2e:7f:02:7e:b3:93:66:bb:c8:a6: f6:f6:a2:ee:17:66:c5:68:85:df:35:13:7f:c8:6a:b7:74:39: 51:a8:78:60:c2:73:80:eb:c6:3e:99:17:40:f8:61:3d:97:52: bc:3d:90:08:e8:b6:90:97:5b:ca:c9:f7:85:7b:7e:30:94:f3: 88:57:ec:54:6d:fd:ac:cd:1c:0f:56:d5:d6:bc:16:cc:59:9b: c6:bf:39:6d:34:37:29:dd:0f:16:0b:f0:43:f9:57:f1:1d:0b: 05:01:6b:09:3e:87:2d:46:0a:7b:f9:4a:74:0a:ad:04:9b:87: 99:31:6d:45:c9:50:f8:ad:99:07:46:4d:12:de:cd:61:2b:48: ff:8b:b8:99:cd:89:1c:44:ee:9c:dc:c7:5d:0d:b5:c6:7d:5e: c8:55:e7:06:09:cb:b9:8b:c8:26:3e:ea:e1:72:2f:dd:15:30: 18:2a:78:8c:40:90:bf:b3:b8:02:f2:cc:80:0b:b4:cf:e9:34: ea:bd:c0:92:55:15:0a:03:9e:2f:1b:99:92:35:8d:72:65:24: 12:ac:57:04:d4:a2:3c:c7:70:bc:49:34:61:ed:be:8a:94:b4: 7b:3a:0a:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhbVlUmf5WcVy0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjZkNjBlZDItMmYwMi00MjYwLTljNzQtNmExYmE0OTYzNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp76unxqx1PKeBeByREiZj+ddMrztNE3rhrtk vrdbXygVFP1lN73iac1uv+s2lK8nRdnPmoGlydt6GvngqvKbQSVy4h8aP0K6o34k 4DCHZ1dcVwQEaN62NA8EW5LPSYXL/eEXdz2YYEDSQ8uztJYaTpalwnl1qC024nti qcVghFJeZjAg0VRHCWK0hGURvWTJi4Rl/imffmTFK3xF+NnC8rrD/eDTpR83riiI pLOgiXagW6/fIWgu6jsVEpylqOzne6M4MxphQNefII9IbSrV8R4+n2YqQpGrwxWv iwvnKL2t9OQlkeEQdhrZJzO9HUMj3b70lzz2N1GbbDnBfXJHaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy2xi9o3QEdMM76mRKPZ0v+SlO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGYzNGU5MTktNGRhYS0z ZTk5LWFkMzEtNDIzM2ZmMzQ5MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4D+vLN/6mrEnzmGgn4PC+pk4pxQoZs11q/Ln8CfrOTZrvIpvb2ou4X ZsVohd81E3/Iard0OVGoeGDCc4Drxj6ZF0D4YT2XUrw9kAjotpCXW8rJ94V7fjCU 84hX7FRt/azNHA9W1da8FsxZm8a/OW00NyndDxYL8EP5V/EdCwUBawk+hy1GCnv5 SnQKrQSbh5kxbUXJUPitmQdGTRLezWErSP+LuJnNiRxE7pzcx10NtcZ9XshV5wYJ y7mLyCY+6uFyL90VMBgqeIxAkL+zuALyzIALtM/pNOq9wJJVFQoDni8bmZI1jXJl JBKsVwTUojzHcLxJNGHtvoqUtHs6Cs4= -----END CERTIFICATE-----Generated at Fri Sep 25 22:52:52 2026 by rpki-client