$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e96f98c-dc46-364a-9363-dfddfd870b1d.roa File: 9e96f98c-dc46-364a-9363-dfddfd870b1d.roa (raw, json) Hash identifier: AEXkP4m+Zq0xDU5exHEzwhcIJ43A4dB2Lq0AHgw4FKU= Subject key identifier: 82:37:89:3F:EE:B9:5D:37:FF:67:28:90:7E:54:FD:DE:96:60:AD:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4986A928BDCA8AF3CA355B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e96f98c-dc46-364a-9363-dfddfd870b1d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.38.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:a9:28:bd:ca:8a:f3:ca:35:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c9a61602-28ef-4fa9-88a6-4da18d9a2e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:93:67:33:f9:2b:6e:c7:fc:a2:9e:16:18: d3:fb:d9:fd:c6:62:53:f2:ba:d0:29:82:f1:26:33: 96:f1:74:79:b2:f4:5b:17:cb:6b:9f:ad:5d:0b:ae: 20:66:8e:8e:a8:4d:8e:cb:e4:6a:8a:37:d0:34:2e: 09:07:5e:8c:fc:92:62:b0:0c:99:7b:49:4b:af:5d: 40:53:48:c4:f4:05:01:96:4b:f6:36:e1:09:e6:8f: f5:0b:cf:13:c1:30:f6:d9:2d:b8:5e:38:28:12:fa: 49:fe:c5:67:55:50:55:06:ea:03:9c:55:cc:37:04: da:8c:5d:4e:44:9c:10:27:e8:03:bd:49:df:91:db: 9f:e4:88:94:48:23:d4:f9:ce:62:a6:19:5a:97:52: 4d:d9:f7:c5:5d:cd:95:55:2e:0e:5b:00:8a:11:d3: 79:df:9f:28:62:92:12:58:7d:a1:3c:8d:c9:5b:8c: 3d:9f:b6:3c:60:58:de:4b:33:1a:84:0e:ce:04:57: d6:6e:48:d2:1f:d3:f3:41:91:d7:bf:02:30:63:d2: 85:ba:dd:9b:0c:86:10:60:99:29:af:a2:d8:b4:bf: e1:8f:2a:51:30:08:79:6b:ab:42:a9:65:96:ce:7c: a4:59:7a:6a:10:de:6b:0a:95:af:24:38:9b:f0:82: 42:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:37:89:3F:EE:B9:5D:37:FF:67:28:90:7E:54:FD:DE:96:60:AD:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e96f98c-dc46-364a-9363-dfddfd870b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b3:ab:a4:39:b2:de:56:52:d9:81:33:fe:3e:22:13:ee:28: a2:65:97:77:05:82:44:43:9f:bb:f6:00:b2:e8:c5:66:2a:c8: 3c:a1:50:fc:92:69:b2:e7:df:1e:c5:26:4e:bc:e1:55:e4:7a: 29:fb:e7:5f:d1:c5:7e:07:ac:3f:f3:f9:8a:89:63:9b:4f:c9: b4:84:4f:70:6a:e9:aa:56:7e:25:9a:40:49:35:f1:66:8e:01: c2:e6:a8:96:db:94:79:4d:53:da:e7:5f:78:91:80:fe:02:a8: 2f:07:09:72:2f:fb:65:e9:fd:eb:3c:17:c0:cb:ef:bf:e2:7d: 64:40:ff:04:91:a2:4c:c1:aa:fe:78:9c:7e:b2:b8:f8:b6:c2: f8:4e:41:81:2d:6b:6a:8a:90:5a:e7:0f:43:47:fb:60:5b:b8: 08:5f:11:6e:ce:80:93:99:34:26:54:a5:b4:9e:55:74:ce:bc: 0e:54:4e:cf:d0:95:63:84:10:f1:a2:ab:ba:96:96:4c:de:e4: d9:e1:6c:7f:32:1b:fd:e2:9f:47:3d:ab:b1:89:4a:a8:38:36: 75:56:b2:dd:66:80:c2:27:d1:18:5c:7c:ef:6d:92:7b:5c:7f: 28:d8:79:42:05:cb:e3:14:19:b1:4e:b1:a5:0a:d6:61:60:51: fc:b3:bd:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhqkovcqK88o1WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzlhNjE2MDItMjhlZi00ZmE5LTg4YTYtNGRhMThkOWEyZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0iTZzP5K27H/KKeFhjT+9n9xmJT8rrQKYLx JjOW8XR5svRbF8trn61dC64gZo6OqE2Oy+RqijfQNC4JB16M/JJisAyZe0lLr11A U0jE9AUBlkv2NuEJ5o/1C88TwTD22S24XjgoEvpJ/sVnVVBVBuoDnFXMNwTajF1O RJwQJ+gDvUnfkduf5IiUSCPU+c5iphlal1JN2ffFXc2VVS4OWwCKEdN5358oYpIS WH2hPI3JW4w9n7Y8YFjeSzMahA7OBFfWbkjSH9PzQZHXvwIwY9KFut2bDIYQYJkp r6LYtL/hjypRMAh5a6tCqWWWznykWXpqEN5rCpWvJDib8IJCeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFII3iT/uuV03/2cokH5U/d6WYK3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWU5NmY5OGMtZGM0Ni0z NjRhLTkzNjMtZGZkZGZkODcwYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAazq6Q5st5WUtmBM/4+IhPuKKJll3cFgkRDn7v2ALLoxWYqyDyhUPyS abLn3x7FJk684VXkein751/RxX4HrD/z+YqJY5tPybSET3Bq6apWfiWaQEk18WaO AcLmqJbblHlNU9rnX3iRgP4CqC8HCXIv+2Xp/es8F8DL77/ifWRA/wSRokzBqv54 nH6yuPi2wvhOQYEta2qKkFrnD0NH+2BbuAhfEW7OgJOZNCZUpbSeVXTOvA5UTs/Q lWOEEPGiq7qWlkze5NnhbH8yG/3in0c9q7GJSqg4NnVWst1mgMIn0RhcfO9tkntc fyjYeUIFy+MUGbFOsaUK1mFgUfyzvUM= -----END CERTIFICATE-----Generated at Sat Sep 26 14:52:39 2026 by rpki-client