$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1e4a25d-e72c-3c81-b8db-725e25b64588.roa File: a1e4a25d-e72c-3c81-b8db-725e25b64588.roa (raw, json) Hash identifier: QBeR5MsTAd/5qT7SjUgz5YGUvzxeWFhBCzPrWcjOqgE= Subject key identifier: 6E:6A:0F:4D:C4:91:14:38:BF:43:8D:40:D7:A3:14:5E:A7:F3:FB:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F57C79917B0991298F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1e4a25d-e72c-3c81-b8db-725e25b64588.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.42.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f5:7c:79:91:7b:09:91:29:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=fee39b79-54e9-40dd-b9e6-44b37f97338a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:ba:63:7b:a1:d2:ca:90:03:bd:d8:6d:bb: c7:24:ce:21:04:27:d7:f4:a8:2a:da:b3:11:2f:5a: 66:b3:24:90:4c:26:0c:8b:b7:ae:1d:04:45:b1:99: e7:49:cb:93:7b:c8:d0:98:01:8d:c6:51:a9:eb:91: eb:84:47:ae:bf:8b:fc:ef:ae:fa:1b:de:7d:a7:38: 15:c3:7f:5b:23:1d:f0:6f:a1:39:ef:8e:b5:0f:50: 1f:51:7c:77:51:57:86:86:49:ee:f0:8e:34:17:64: 16:7a:82:46:1e:33:f4:72:d6:a0:ce:f9:f9:38:2d: 89:8f:d3:a9:75:29:96:a5:5d:4c:8d:d0:f0:f5:40: 10:33:25:15:e7:a3:7a:66:52:ca:a4:88:57:06:69: be:f2:23:6b:18:6c:f6:26:e4:32:da:27:7c:9d:d5: 0b:ab:d0:da:7f:33:90:bc:ed:1a:61:62:31:21:20: 82:da:68:9e:c0:bc:70:2b:68:6e:c3:e1:89:f2:d5: 24:e3:94:03:35:19:45:62:01:0d:f1:7b:af:3e:7e: 4d:76:51:dc:67:2c:00:2b:58:3e:f7:28:c2:f2:91: 6d:c7:b6:47:c2:d4:11:e1:fa:1f:88:42:1f:60:04: 51:cc:b1:9a:f5:ea:4f:d4:d8:35:c5:aa:88:aa:eb: 42:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6A:0F:4D:C4:91:14:38:BF:43:8D:40:D7:A3:14:5E:A7:F3:FB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1e4a25d-e72c-3c81-b8db-725e25b64588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:63:81:aa:65:33:67:6a:94:d7:53:ed:fd:c6:ce:65:5d:7b: 35:3c:e7:50:2a:8b:37:17:02:ba:b3:a9:a5:0e:0b:24:08:c9: 73:70:1e:ea:ec:90:46:d6:f8:e5:15:b4:b0:0d:a9:de:c7:24: 1c:87:0d:41:52:a8:f0:35:f2:74:42:e9:f7:49:62:8e:fd:5a: ca:7c:9d:90:5f:9a:e6:9c:f3:14:1e:4c:df:63:df:f0:f4:31: 99:54:b7:96:9f:65:28:5a:da:bb:e3:49:b0:95:e6:d1:de:72: 60:1d:8b:63:99:e5:d5:11:88:13:ff:31:21:b8:d2:5b:dd:0b: f0:65:51:66:5f:cf:8f:17:da:8d:5f:a9:ff:45:d6:22:01:e1: 51:4f:51:2a:1b:bc:35:09:6b:a9:df:54:49:6f:f4:25:bb:95: 35:92:3b:87:d3:fa:7d:59:90:a0:df:bf:fc:66:17:e5:9c:4f: e1:29:bb:a4:2d:9d:c6:c0:2b:3f:e8:7a:39:77:f1:2e:26:7f: b8:0d:bd:6a:73:ad:85:d9:ca:8f:aa:cc:65:fc:80:dd:90:bc: 4f:bc:be:c6:65:03:71:5f:67:6b:f0:36:fb:7d:1f:a2:77:96: 4b:17:d6:48:9a:98:b9:01:ed:21:d9:f7:cf:dc:44:00:b9:8c: ac:f1:94:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/V8eZF7CZEpjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZmVlMzliNzktNTRlOS00MGRkLWI5ZTYtNDRiMzdmOTczMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLC6Y3uh0sqQA73YbbvHJM4hBCfX9Kgq2rMR L1pmsySQTCYMi7euHQRFsZnnScuTe8jQmAGNxlGp65HrhEeuv4v87676G959pzgV w39bIx3wb6E57461D1AfUXx3UVeGhknu8I40F2QWeoJGHjP0ctagzvn5OC2Jj9Op dSmWpV1MjdDw9UAQMyUV56N6ZlLKpIhXBmm+8iNrGGz2JuQy2id8ndULq9DafzOQ vO0aYWIxISCC2miewLxwK2huw+GJ8tUk45QDNRlFYgEN8XuvPn5NdlHcZywAK1g+ 9yjC8pFtx7ZHwtQR4fofiEIfYARRzLGa9epP1Ng1xaqIqutC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5qD03EkRQ4v0ONQNejFF6n8/siMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFlNGEyNWQtZTcyYy0z YzgxLWI4ZGItNzI1ZTI1YjY0NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxjgaplM2dqlNdT7f3GzmVdezU851AqizcXArqzqaUOCyQIyXNwHurs kEbW+OUVtLANqd7HJByHDUFSqPA18nRC6fdJYo79Wsp8nZBfmuac8xQeTN9j3/D0 MZlUt5afZSha2rvjSbCV5tHecmAdi2OZ5dURiBP/MSG40lvdC/BlUWZfz48X2o1f qf9F1iIB4VFPUSobvDUJa6nfVElv9CW7lTWSO4fT+n1ZkKDfv/xmF+WcT+Epu6Qt ncbAKz/oejl38S4mf7gNvWpzrYXZyo+qzGX8gN2QvE+8vsZlA3FfZ2vwNvt9H6J3 lksX1kiamLkB7SHZ98/cRAC5jKzxlAw= -----END CERTIFICATE-----Generated at Mon Sep 21 08:11:50 2026 by rpki-client