$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cf31a53-595a-3a44-bc3a-3bd7748df5eb.roa File: 9cf31a53-595a-3a44-bc3a-3bd7748df5eb.roa (raw, json) Hash identifier: yHwsGO2QN8YMPQAjVcPdHfbOx1WKVpeW7Miv3vRnNBg= Subject key identifier: 9D:F3:A6:84:D4:D7:4D:15:2D:E1:EA:62:55:D6:3E:D8:5F:E2:B0:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3052887352B1DAC1C7233C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cf31a53-595a-3a44-bc3a-3bd7748df5eb.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.32.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:88:73:52:b1:da:c1:c7:23:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=24d93f3d-0e92-4af9-9573-71fa2a3256a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:1b:86:51:e9:68:38:4f:5b:cd:2a:a8:45: 9e:0f:79:83:34:8f:67:19:7f:cb:2d:d8:85:7a:27: 0f:5d:57:bb:d1:6f:3f:ed:7e:9f:85:62:1c:79:7b: a7:b0:2f:e9:84:f4:3a:95:69:92:44:b5:3e:0e:a5: 71:7b:6b:02:ac:f7:c7:4c:b6:fe:d9:6c:b3:2e:d8: 48:ec:97:92:15:54:38:48:ba:a2:3b:53:91:45:c3: dc:b5:d3:70:38:78:e4:11:75:78:f5:77:ff:24:63: bf:35:eb:9f:90:3c:7b:a5:3f:93:8f:1b:9b:23:65: 6e:d2:30:d4:a0:9b:d6:fa:22:a0:82:4b:2c:8a:86: 3e:8e:32:a4:e5:6d:6a:7e:e7:f5:31:3a:58:92:4b: 3a:e2:40:56:bf:e3:fe:43:0c:e4:cd:46:06:34:d7: e1:a0:a1:78:86:d3:3c:17:75:73:7c:45:06:b9:99: 79:73:f6:fb:30:e6:00:80:54:32:83:79:0e:93:ba: cc:64:00:26:8c:6c:ab:bd:4f:25:7f:10:67:1f:a9: a0:45:a6:64:df:31:e0:23:a5:41:5c:10:d4:b3:84: 82:0d:62:2e:22:3a:0d:c2:e1:4e:ae:b8:34:7b:a0: 3a:11:8d:76:79:c7:f1:78:55:e8:ee:8f:e2:f6:16: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F3:A6:84:D4:D7:4D:15:2D:E1:EA:62:55:D6:3E:D8:5F:E2:B0:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9cf31a53-595a-3a44-bc3a-3bd7748df5eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:23:54:34:8e:91:7f:be:4e:6a:a7:6a:b1:d0:67:7b:b8:c6: d7:25:a7:00:3f:25:8c:fc:04:88:aa:07:f7:01:a2:d3:76:c6: cc:72:cb:43:a5:f7:ed:f1:f7:3a:47:b9:bf:ec:f6:7f:00:0b: fd:20:48:39:fa:cd:56:7d:84:5a:6a:81:0c:5e:58:47:71:9f: d1:b8:59:bf:3e:e3:e3:d1:90:86:92:e1:6e:bd:31:c1:f1:b7: 07:f6:3b:df:11:5f:08:67:b0:59:a5:8b:9c:0b:dd:1e:0d:e0: 36:b7:31:3c:61:a7:0b:99:5d:34:56:c3:b0:39:81:2e:63:22: fa:92:b1:09:89:75:fe:6c:93:02:26:df:2f:f1:9b:16:9c:a5: 65:d8:0d:41:24:a6:e8:d6:5d:29:92:8c:a0:6c:12:37:b0:eb: f5:f4:cd:2d:19:60:47:e4:fd:2d:a9:08:b9:65:69:3d:fd:ba: 56:8f:5d:31:a0:9c:b4:06:56:3c:aa:35:bb:fc:7d:c3:30:21: 0c:9f:1f:78:9c:05:72:60:3c:ed:8a:32:a5:3f:19:e7:12:75: d5:2a:73:7d:f1:96:c9:22:d9:00:44:3d:68:51:ee:37:76:70: 99:61:9a:78:db:da:a6:8a:75:78:92:fd:4a:47:4c:e1:c2:d5: 0f:14:92:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUohzUrHawccjPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MjRkOTNmM2QtMGU5Mi00YWY5LTk1NzMtNzFmYTJhMzI1NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHsbhlHpaDhPW80qqEWeD3mDNI9nGX/LLdiF eicPXVe70W8/7X6fhWIceXunsC/phPQ6lWmSRLU+DqVxe2sCrPfHTLb+2WyzLthI 7JeSFVQ4SLqiO1ORRcPctdNwOHjkEXV49Xf/JGO/NeufkDx7pT+TjxubI2Vu0jDU oJvW+iKggkssioY+jjKk5W1qfuf1MTpYkks64kBWv+P+QwzkzUYGNNfhoKF4htM8 F3VzfEUGuZl5c/b7MOYAgFQyg3kOk7rMZAAmjGyrvU8lfxBnH6mgRaZk3zHgI6VB XBDUs4SCDWIuIjoNwuFOrrg0e6A6EY12ecfxeFXo7o/i9hbF6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3zpoTU100VLeHqYlXWPthf4rB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWNmMzFhNTMtNTk1YS0z YTQ0LWJjM2EtM2JkNzc0OGRmNWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4jVDSOkX++TmqnarHQZ3u4xtclpwA/JYz8BIiqB/cBotN2xsxyy0Ol 9+3x9zpHub/s9n8AC/0gSDn6zVZ9hFpqgQxeWEdxn9G4Wb8+4+PRkIaS4W69McHx twf2O98RXwhnsFmli5wL3R4N4Da3MTxhpwuZXTRWw7A5gS5jIvqSsQmJdf5skwIm 3y/xmxacpWXYDUEkpujWXSmSjKBsEjew6/X0zS0ZYEfk/S2pCLllaT39ulaPXTGg nLQGVjyqNbv8fcMwIQyfH3icBXJgPO2KMqU/GecSddUqc33xlski2QBEPWhR7jd2 cJlhmnjb2qaKdXiS/UpHTOHC1Q8UksA= -----END CERTIFICATE-----Generated at Wed Sep 23 08:05:27 2026 by rpki-client