$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa File: a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa (raw, json) Hash identifier: aPpKmEdy3G+xE/7HezI18rrIxsWxe4M1QkeGjfjlMyk= Subject key identifier: A6:87:EE:0A:DD:52:9F:35:BD:8C:17:66:FF:1D:4E:EF:BD:76:6C:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD4D68A5C2F5FDD7E0BF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.45.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:4d:68:a5:c2:f5:fd:d7:e0:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=6e8c46eb-298f-4d96-8996-513f917fe6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:58:64:32:fe:4e:09:1c:fd:e1:a9:10:50:d5: f2:0f:ea:3d:61:c4:cb:b7:a9:46:07:ba:fa:ad:3c: c2:da:b6:c1:d1:09:e9:93:79:e2:55:43:a2:9c:77: 42:02:0e:0b:29:57:bf:3b:07:9e:01:19:b4:57:00: 9f:d0:5b:f7:f5:ad:28:c6:54:df:ff:da:27:f6:0e: a6:86:d2:87:27:85:11:91:75:a3:df:ef:a1:5a:e0: 95:15:8c:8a:30:65:fb:85:11:39:44:f1:7c:e7:bd: a1:10:fb:67:cc:92:8d:d8:a7:ea:92:d0:9e:1e:de: bd:d2:1b:ae:fb:51:6a:e4:9d:9d:f8:c8:16:ca:82: df:e9:c8:a2:fe:cc:d7:83:3a:7d:1e:ce:ce:46:be: 87:fe:99:e8:fd:04:17:d9:bf:3e:44:0f:68:12:b6: 11:12:a8:3f:a0:be:c8:38:40:7f:d7:f8:57:83:09: 76:a3:72:bf:95:9f:a8:6e:10:14:05:33:88:fd:40: 20:89:55:33:47:f0:d4:69:86:76:fb:12:57:13:96: b2:49:fb:ef:94:53:17:96:bf:25:c8:a0:4b:cf:33: 78:49:71:ad:99:f1:3e:b2:2f:78:6f:97:9c:84:b7: 32:22:ce:3d:d9:62:25:d2:6b:6d:1c:16:f8:e0:76: ac:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:87:EE:0A:DD:52:9F:35:BD:8C:17:66:FF:1D:4E:EF:BD:76:6C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1ef919d-03e9-306b-9427-3ae21cfbf33e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d5:d8:8d:c7:8e:02:6e:8d:9d:8b:a7:f2:45:c9:4e:fe:00: ef:a3:ac:fe:d0:af:7d:83:f7:f5:81:b5:d4:17:79:58:f8:cf: 16:77:35:8f:e5:7e:44:15:9d:e5:e3:ed:a6:64:75:87:63:36: aa:6e:d3:e4:1b:c7:c9:2a:b2:78:9b:97:03:df:1c:a8:f7:18: d6:9f:87:84:a1:b3:fb:4f:e5:4f:8e:ce:e9:f2:1f:55:ae:0f: e4:0d:68:de:13:8f:f4:39:38:5f:78:ad:e3:ce:87:c4:2f:24: 97:a5:7a:d7:70:f3:7e:81:e6:72:a8:33:c1:f9:a3:da:5e:6d: 99:af:79:4a:4f:a2:06:78:72:96:8b:9f:18:0e:71:bf:6a:45: cf:da:92:40:98:d7:ca:72:4f:93:d0:59:41:97:ea:4c:32:32: 68:af:ad:a9:29:1a:f1:ac:18:ef:26:e8:91:1f:1e:75:21:df: 86:0e:3a:b3:bf:d3:55:3f:07:a9:ab:0d:19:1b:17:11:53:65: d1:8e:8b:22:e2:1c:11:a2:8d:dd:ca:f9:ab:36:cc:33:42:67: 1b:e3:8b:a9:a6:ee:af:8a:04:ea:d5:c8:95:00:3a:da:13:42: 0c:fa:5a:b5:bd:84:5d:10:ab:dc:7c:cf:c7:cf:f4:1c:0f:cc: 39:9b:b8:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rU1opcL1/dfgvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NmU4YzQ2ZWItMjk4Zi00ZDk2LTg5OTYtNTEzZjkxN2ZlNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFhkMv5OCRz94akQUNXyD+o9YcTLt6lGB7r6 rTzC2rbB0Qnpk3niVUOinHdCAg4LKVe/OweeARm0VwCf0Fv39a0oxlTf/9on9g6m htKHJ4URkXWj3++hWuCVFYyKMGX7hRE5RPF8572hEPtnzJKN2KfqktCeHt690huu +1Fq5J2d+MgWyoLf6cii/szXgzp9Hs7ORr6H/pno/QQX2b8+RA9oErYREqg/oL7I OEB/1/hXgwl2o3K/lZ+obhAUBTOI/UAgiVUzR/DUaYZ2+xJXE5aySfvvlFMXlr8l yKBLzzN4SXGtmfE+si94b5echLcyIs492WIl0mttHBb44HasNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaH7grdUp81vYwXZv8dTu+9dmzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFlZjkxOWQtMDNlOS0z MDZiLTk0MjctM2FlMjFjZmJmMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXV2I3HjgJujZ2Lp/JFyU7+AO+jrP7Qr32D9/WBtdQXeVj4zxZ3NY/l fkQVneXj7aZkdYdjNqpu0+Qbx8kqsniblwPfHKj3GNafh4Shs/tP5U+OzunyH1Wu D+QNaN4Tj/Q5OF94rePOh8QvJJeletdw836B5nKoM8H5o9pebZmveUpPogZ4cpaL nxgOcb9qRc/akkCY18pyT5PQWUGX6kwyMmivrakpGvGsGO8m6JEfHnUh34YOOrO/ 01U/B6mrDRkbFxFTZdGOiyLiHBGijd3K+as2zDNCZxvji6mm7q+KBOrVyJUAOtoT Qgz6WrW9hF0Qq9x8z8fP9BwPzDmbuHg= -----END CERTIFICATE-----Generated at Mon Sep 21 19:25:01 2026 by rpki-client