$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9df76e3a-48d9-35f2-a4db-04a2c0708191.roa File: 9df76e3a-48d9-35f2-a4db-04a2c0708191.roa (raw, json) Hash identifier: bzYPPKU3MUI09W3s5hvXx31Y00R5G97K76ngMAR7T+w= Subject key identifier: B1:64:E3:A5:8A:DB:35:50:F3:E2:73:1A:86:CF:25:2C:0E:C9:ED:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F8D24F80C07C0173F680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9df76e3a-48d9-35f2-a4db-04a2c0708191.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.37.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f8:d2:4f:80:c0:7c:01:73:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=5aa91c43-8d7a-49d7-9ab5-13fddf352eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:8c:2b:4d:dd:98:df:96:6f:47:c9:d6:29: 03:99:65:60:c9:45:64:0d:c4:69:01:43:61:58:0f: c5:c3:e2:59:db:09:87:26:1a:23:f8:83:3d:17:50: 22:96:a4:2f:af:f0:79:29:9d:26:3c:52:ca:8a:50: 4d:8a:dd:a6:ce:f5:55:02:ad:80:2e:56:6f:24:c7: ee:03:93:30:25:fb:ed:82:ee:ff:41:54:f3:b6:7c: 69:b8:40:c9:99:c8:36:3e:c7:13:bd:69:19:30:6d: 1d:ab:bd:d4:dc:c3:f8:d9:a3:56:85:12:a9:d7:05: 60:c1:4c:e0:77:ac:b0:6b:4f:61:a8:1e:75:7b:2b: 59:a2:f1:ab:7a:5d:87:a5:8f:3e:41:99:c1:60:05: 83:b0:c8:17:a8:00:d3:66:74:c1:ad:fc:86:da:92: 41:27:95:d7:9a:87:4e:53:68:ca:54:b6:c2:7b:86: f5:61:90:86:3d:15:60:16:2e:b7:c8:ec:5f:7c:22: 27:d1:73:4a:8f:9e:4c:ef:99:65:14:75:54:51:6f: f7:d4:e4:ae:b6:70:46:09:60:3e:d6:f4:52:71:d4: 3e:a8:74:f5:9e:bf:c9:29:47:9b:40:aa:e4:1c:30: 58:62:5e:22:86:27:ac:7a:e0:a1:2a:9d:25:16:fd: 65:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:64:E3:A5:8A:DB:35:50:F3:E2:73:1A:86:CF:25:2C:0E:C9:ED:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9df76e3a-48d9-35f2-a4db-04a2c0708191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2e:bf:55:45:ee:25:74:fe:d4:9e:f2:7d:16:11:c2:7b:a7: 31:63:9d:5d:9c:a8:24:3b:c1:e5:d6:f7:28:e9:69:63:17:44: 59:76:b9:c2:4b:e0:46:9c:a9:3b:57:00:97:97:dc:6e:40:c2: fd:d8:8d:26:9d:67:b7:94:0a:8a:0e:22:8e:cf:94:a0:33:60: 5d:7b:e0:bc:a9:b7:68:d7:a4:7b:cc:bd:33:4f:ab:f9:1b:ed: 11:9a:b8:ae:5f:0b:56:c7:ae:e1:50:c9:84:0f:b5:7f:39:0a: 40:2f:fc:11:b5:ed:b3:65:85:8b:43:ea:e3:49:06:f6:2b:9b: 95:b2:8d:f0:8c:9f:f7:8b:95:68:fe:45:c2:6e:1f:c0:1f:7b: 9c:26:3e:a0:26:3a:a8:6f:59:eb:38:28:d3:83:3f:db:d4:22: e5:26:ec:94:34:b7:61:b3:32:69:f5:8e:ea:c3:6c:13:f7:12: c8:76:f0:7e:b5:ad:09:95:69:3e:1f:e2:19:b8:1e:16:91:8f: 1b:e9:51:f6:6b:00:a2:d4:bb:cf:ae:03:b9:c7:17:38:c8:fe: de:2a:88:cd:dc:3b:9c:a3:a9:13:52:bb:87:14:97:3e:38:1f: 62:cb:fc:98:4b:e5:0e:fb:51:af:06:e7:38:89:b9:13:dd:de: 94:07:de:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/jST4DAfAFz9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NWFhOTFjNDMtOGQ3YS00OWQ3LTlhYjUtMTNmZGRmMzUyZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqeMK03dmN+Wb0fJ1ikDmWVgyUVkDcRpAUNh WA/Fw+JZ2wmHJhoj+IM9F1AilqQvr/B5KZ0mPFLKilBNit2mzvVVAq2ALlZvJMfu A5MwJfvtgu7/QVTztnxpuEDJmcg2PscTvWkZMG0dq73U3MP42aNWhRKp1wVgwUzg d6ywa09hqB51eytZovGrel2HpY8+QZnBYAWDsMgXqADTZnTBrfyG2pJBJ5XXmodO U2jKVLbCe4b1YZCGPRVgFi63yOxffCIn0XNKj55M75llFHVUUW/31OSutnBGCWA+ 1vRScdQ+qHT1nr/JKUebQKrkHDBYYl4ihieseuChKp0lFv1lUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFk46WK2zVQ8+JzGobPJSwOye29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWRmNzZlM2EtNDhkOS0z NWYyLWE0ZGItMDRhMmMwNzA4MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEouv1VF7iV0/tSe8n0WEcJ7pzFjnV2cqCQ7weXW9yjpaWMXRFl2ucJL 4EacqTtXAJeX3G5Awv3YjSadZ7eUCooOIo7PlKAzYF174Lypt2jXpHvMvTNPq/kb 7RGauK5fC1bHruFQyYQPtX85CkAv/BG17bNlhYtD6uNJBvYrm5WyjfCMn/eLlWj+ RcJuH8Afe5wmPqAmOqhvWes4KNODP9vUIuUm7JQ0t2GzMmn1jurDbBP3Esh28H61 rQmVaT4f4hm4HhaRjxvpUfZrAKLUu8+uA7nHFzjI/t4qiM3cO5yjqRNSu4cUlz44 H2LL/JhL5Q77Ua8G5ziJuRPd3pQH3tw= -----END CERTIFICATE-----Generated at Tue Sep 22 19:35:40 2026 by rpki-client