$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c54688d-a1ab-3225-bf06-034a8afc9f56.roa File: 9c54688d-a1ab-3225-bf06-034a8afc9f56.roa (raw, json) Hash identifier: dfWkd6fL9//jUEETEiZtlZ0RA2SnCCwFY5dcHOQk2zs= Subject key identifier: 9B:DF:B7:3E:AB:38:A5:BE:FF:71:B1:EF:FC:3C:53:FC:D0:03:4A:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3CE2A69B9C039EE52763EAF0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c54688d-a1ab-3225-bf06-034a8afc9f56.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.58.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a6:9b:9c:03:9e:e5:27:63:ea:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=72ef7af6-c21f-4b8a-b9bb-f36e21536cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fa:39:6c:38:e7:3c:f9:b8:ff:cb:c9:38:5e: cb:b6:b0:c3:54:63:77:d5:c1:03:43:a2:58:70:b0: eb:d4:4d:7a:6e:be:ab:39:28:af:eb:5c:35:d0:7a: 1f:3a:33:36:6a:b8:54:de:b7:f4:82:48:d3:1f:78: c8:92:d8:62:c2:5c:c9:d1:7f:82:67:b5:30:8e:00: b2:3c:61:6e:af:a0:ec:23:04:d2:61:b4:ca:77:ef: 5c:2e:72:3c:d0:4f:7c:7a:cf:84:14:7c:22:24:12: ef:65:8a:cb:70:42:e4:38:f7:30:49:79:e5:43:20: 01:08:82:2a:cc:a5:be:72:e2:d5:fb:98:36:77:81: 97:b8:04:3e:2f:cd:50:ae:48:e7:58:9b:2f:0f:17: 5b:0c:ec:cd:ea:3a:12:d1:f7:d7:4e:19:a9:48:e7: 64:c0:b5:5e:75:5a:ac:91:8d:26:b3:31:47:07:47: 8e:bb:d4:90:18:d0:46:6a:0c:ec:ed:84:ad:4a:9c: 2a:65:95:f7:31:1e:3f:80:0b:8c:03:1f:f0:75:71: 2b:ad:de:b8:c0:e8:33:0c:20:d8:91:8a:ca:bd:74: 35:c8:4a:20:0f:d0:ef:be:8e:63:a1:83:26:f5:4a: a7:e9:ed:0d:58:a3:7f:c6:36:a1:58:04:da:6a:1e: 50:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DF:B7:3E:AB:38:A5:BE:FF:71:B1:EF:FC:3C:53:FC:D0:03:4A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c54688d-a1ab-3225-bf06-034a8afc9f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:bb:9b:f2:0f:2c:ef:dd:c3:fe:14:48:d1:db:61:ff:c3:f9: ef:8b:ab:d5:f5:85:a5:e4:1a:be:16:32:51:21:b7:64:d8:9f: 02:50:57:37:47:33:f1:b4:5e:c1:0d:38:3c:01:b2:ad:c7:26: 3b:02:38:56:10:62:b5:0d:15:42:57:3d:fa:60:28:a3:c6:d5: 7f:c4:06:bb:a6:69:52:18:b4:cb:d3:00:a9:17:b0:95:80:ed: e6:18:74:a3:59:e3:18:e4:63:3f:39:66:30:89:b3:b2:9c:ef: 82:c9:d6:e3:ec:46:d2:f4:5a:ce:f5:a6:40:f0:4c:8e:8f:8f: fa:a7:79:46:81:3b:c0:38:f6:72:ff:f4:01:3c:a6:22:f0:d5: ca:69:08:57:44:ef:0e:42:c0:5b:74:19:73:78:a7:0e:a3:82: 1f:5b:08:71:5b:03:49:12:b3:a4:78:28:09:70:85:85:02:23: c0:8f:8e:a1:16:72:d9:0f:54:55:ae:33:4b:5e:2f:8a:0c:1c: 4b:d4:f4:5f:d6:d2:60:9b:43:39:59:6e:7b:c3:69:12:1a:45: a8:a9:de:30:b2:78:d7:a4:ab:ed:de:6a:fe:0f:f5:4f:6a:ad: dd:c6:01:a4:e8:7d:2c:57:49:32:03:e5:ec:af:c9:ac:77:b7: 06:35:be:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qabnAOe5Sdj6vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NzJlZjdhZjYtYzIxZi00YjhhLWI5YmItZjM2ZTIxNTM2Y2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/o5bDjnPPm4/8vJOF7LtrDDVGN31cEDQ6JY cLDr1E16br6rOSiv61w10HofOjM2arhU3rf0gkjTH3jIkthiwlzJ0X+CZ7UwjgCy PGFur6DsIwTSYbTKd+9cLnI80E98es+EFHwiJBLvZYrLcELkOPcwSXnlQyABCIIq zKW+cuLV+5g2d4GXuAQ+L81QrkjnWJsvDxdbDOzN6joS0ffXThmpSOdkwLVedVqs kY0mszFHB0eOu9SQGNBGagzs7YStSpwqZZX3MR4/gAuMAx/wdXErrd64wOgzDCDY kYrKvXQ1yEogD9Dvvo5joYMm9Uqn6e0NWKN/xjahWATaah5QiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvftz6rOKW+/3Gx7/w8U/zQA0plMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWM1NDY4OGQtYTFhYi0z MjI1LWJmMDYtMDM0YThhZmM5ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzpVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC7m/IPLO/dw/4USNHbYf/D+e+Lq9X1haXkGr4WMlEht2TYnwJQVzdH M/G0XsENODwBsq3HJjsCOFYQYrUNFUJXPfpgKKPG1X/EBrumaVIYtMvTAKkXsJWA 7eYYdKNZ4xjkYz85ZjCJs7Kc74LJ1uPsRtL0Ws71pkDwTI6Pj/qneUaBO8A49nL/ 9AE8piLw1cppCFdE7w5CwFt0GXN4pw6jgh9bCHFbA0kSs6R4KAlwhYUCI8CPjqEW ctkPVFWuM0teL4oMHEvU9F/W0mCbQzlZbnvDaRIaRaip3jCyeNekq+3eav4P9U9q rd3GAaTofSxXSTID5eyvyax3twY1vhg= -----END CERTIFICATE-----Generated at Sat Sep 26 08:54:39 2026 by rpki-client