$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99c53c4f-f154-343f-9caa-11ff255de334.roa File: 99c53c4f-f154-343f-9caa-11ff255de334.roa (raw, json) Hash identifier: vRR6iNkxLjm/Kd6hCOUadMkO/9QTu20bnfUPG8q3rLo= Subject key identifier: 2D:42:E2:22:E0:65:02:20:C7:5D:DF:35:C2:9A:67:E5:15:6B:AA:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D7FC1B94F4ADB5AB0DC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99c53c4f-f154-343f-9caa-11ff255de334.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.198.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:7f:c1:b9:4f:4a:db:5a:b0:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c062297e-f914-4259-b4e0-48d4f6b9bf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:29:8b:b8:2c:0a:a8:e2:c6:91:75:ab:1a: d4:bf:d9:55:d8:b1:73:4e:b6:44:79:3d:d3:c4:51: 0a:ba:47:91:bb:3b:71:fe:ed:bf:b6:39:be:62:4b: 35:d5:ab:78:ea:46:f1:b9:a8:db:2e:8a:05:27:54: b4:33:d7:25:41:ed:0f:f9:33:ae:70:80:67:71:52: 6c:0e:70:a0:32:b1:dc:af:b3:78:fd:c2:d5:51:1b: 0d:3a:06:ff:a8:fe:ed:41:36:c8:32:6b:33:0e:61: 88:53:e8:ad:97:1c:c6:53:f1:c9:e1:08:4f:b7:cb: 5b:8a:cc:41:78:45:d8:2b:78:fa:cf:b8:3b:7f:45: 49:db:80:60:cd:20:61:66:d0:3f:c2:71:67:03:8d: 21:ed:26:df:28:12:a8:6e:43:6c:0f:bb:ff:b3:90: 40:72:c4:9e:c5:97:61:7b:7a:a8:81:a7:c2:c1:f3: 0c:42:fd:63:7c:da:c0:30:d4:92:83:e1:dd:45:b4: 3c:f8:6a:64:ea:ca:82:f6:7d:d1:43:54:af:30:83: ec:c7:84:a4:59:9e:f9:f5:1c:46:e5:4a:bf:c7:41: 70:8a:a0:24:8b:b0:b0:e0:9d:e8:c9:3c:63:be:d2: dd:d1:d0:11:d1:ec:53:cc:34:4e:30:3b:12:48:08: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:42:E2:22:E0:65:02:20:C7:5D:DF:35:C2:9A:67:E5:15:6B:AA:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99c53c4f-f154-343f-9caa-11ff255de334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.198.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:0a:fe:f8:25:db:d7:b1:3a:22:49:46:fd:7d:2e:19:74:09: a8:35:84:94:db:a0:30:9a:e0:48:0e:ad:00:c3:0e:73:e7:53: 59:2f:8f:1f:0e:4e:75:b6:38:2c:bb:88:47:cf:73:51:4d:28: 83:b2:a5:c9:7d:60:31:5b:c4:ad:76:eb:bf:78:10:49:c2:87: 44:d5:5a:f5:e9:48:d7:42:f1:97:a9:1f:e8:6d:51:ce:ab:0c: d4:12:24:ba:58:bd:58:e3:47:7c:5d:d0:d6:e2:a6:3a:c5:6d: 6a:fd:fd:9f:c1:27:f8:2e:ea:ad:79:52:3e:ef:f7:0e:d6:e9: ba:ce:87:0c:d1:df:80:1a:e3:42:f3:70:5b:a6:8c:35:84:54: c3:61:32:ac:8b:16:62:8b:09:96:5b:43:18:08:13:95:c1:e3: 57:bf:07:33:bd:0d:19:d8:3a:a6:c4:80:f0:4c:44:5f:4e:ef: 18:4f:31:4d:8f:a3:bc:bf:61:6e:0d:3b:22:2b:cd:cf:66:af: e5:f8:8a:bf:e6:52:24:4c:7e:d7:f2:c4:7d:f2:5d:ef:34:9d: 6d:b1:24:7e:6f:fb:c3:96:14:a3:ce:85:80:75:b1:a5:55:3f: ac:dd:4d:0d:3c:3c:b8:0c:97:56:89:10:f2:a9:80:46:2b:c2: 8e:5f:02:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfX/BuU9K21qw3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzA2MjI5N2UtZjkxNC00MjU5LWI0ZTAtNDhkNGY2YjliZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4cpi7gsCqjixpF1qxrUv9lV2LFzTrZEeT3T xFEKukeRuztx/u2/tjm+Yks11at46kbxuajbLooFJ1S0M9clQe0P+TOucIBncVJs DnCgMrHcr7N4/cLVURsNOgb/qP7tQTbIMmszDmGIU+itlxzGU/HJ4QhPt8tbisxB eEXYK3j6z7g7f0VJ24BgzSBhZtA/wnFnA40h7SbfKBKobkNsD7v/s5BAcsSexZdh e3qogafCwfMMQv1jfNrAMNSSg+HdRbQ8+Gpk6sqC9n3RQ1SvMIPsx4SkWZ759RxG 5Uq/x0FwiqAki7Cw4J3oyTxjvtLd0dAR0exTzDROMDsSSAhRwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1C4iLgZQIgx13fNcKaZ+UVa6rCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTljNTNjNGYtZjE1NC0z NDNmLTljYWEtMTFmZjI1NWRlMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8bWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcK/vgl29exOiJJRv19Lhl0Cag1hJTboDCa4EgOrQDDDnPnU1kvjx8O TnW2OCy7iEfPc1FNKIOypcl9YDFbxK126794EEnCh0TVWvXpSNdC8ZepH+htUc6r DNQSJLpYvVjjR3xd0NbipjrFbWr9/Z/BJ/gu6q15Uj7v9w7W6brOhwzR34Aa40Lz cFumjDWEVMNhMqyLFmKLCZZbQxgIE5XB41e/BzO9DRnYOqbEgPBMRF9O7xhPMU2P o7y/YW4NOyIrzc9mr+X4ir/mUiRMftfyxH3yXe80nW2xJH5v+8OWFKPOhYB1saVV P6zdTQ08PLgMl1aJEPKpgEYrwo5fAr0= -----END CERTIFICATE-----Generated at Thu Oct 8 15:22:54 2026 by rpki-client