$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acb41e33-9d7e-3278-862c-5d0eb0821efb.roa File: acb41e33-9d7e-3278-862c-5d0eb0821efb.roa (raw, json) Hash identifier: YssLt+rxtAZk9aXZQ9fk1fFbrQEfaiWcy6dNNYOuE/Y= Subject key identifier: 2D:DA:D1:81:42:C1:19:E9:CC:86:B7:83:69:15:F4:7D:4F:ED:47:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F95EAD15B576186FA520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acb41e33-9d7e-3278-862c-5d0eb0821efb.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.38.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f9:5e:ad:15:b5:76:18:6f:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=685bcbf6-5548-4da1-a9c5-ef1f591c1469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:a7:f7:7d:ac:a1:9c:ee:5d:35:52:0a:b3: e6:a4:43:62:00:86:1a:ab:04:48:d5:03:f5:32:1c: 85:0b:69:1a:72:e4:25:5b:76:99:6b:fe:3c:0f:81: e4:cd:96:36:6d:39:e6:b3:f4:ff:a1:64:58:b4:17: 14:f7:e6:2c:fc:96:c0:b8:b1:f1:6f:a9:70:85:d7: f7:c4:c6:0c:6c:54:1f:3a:0e:c4:14:24:b0:4a:94: 86:35:fb:5a:a2:50:95:30:e9:5f:0d:36:bc:27:43: 7f:0c:36:72:b6:75:bd:de:3c:f4:37:f9:e7:56:25: 11:bf:0a:80:44:07:0d:17:8e:c0:b6:a9:5d:f4:4d: 0c:f9:64:f8:51:f7:34:a2:46:d0:38:cb:44:2d:a3: e1:24:9c:80:84:d4:4e:e5:6c:65:e9:ff:e3:86:dd: 28:16:ad:37:be:44:54:f6:87:23:84:66:bf:48:b8: 8c:46:cd:c6:a6:f9:00:f1:a1:3a:8a:36:92:b2:5f: 69:fd:01:69:24:a0:2a:c7:dc:24:3a:1f:bf:a1:b9: a2:1e:ba:9e:23:1f:49:cf:07:77:8b:12:22:f6:f0: d9:7e:72:cc:64:50:96:40:dc:d3:26:fd:5a:2e:b9: 78:fb:d9:6e:82:3a:a6:36:a3:dd:79:71:7f:6f:21: 33:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DA:D1:81:42:C1:19:E9:CC:86:B7:83:69:15:F4:7D:4F:ED:47:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/acb41e33-9d7e-3278-862c-5d0eb0821efb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6e:92:3f:cd:c3:8a:b5:df:67:66:bc:c5:39:ee:86:f1:7c: 6c:41:fe:d8:42:fa:16:5d:51:89:a0:c2:e3:05:22:e0:17:1d: 24:81:dd:e1:3b:f5:68:8e:bc:81:8e:a9:ff:20:5c:ed:9b:84: 73:97:d7:47:2c:46:b3:c7:df:bd:9b:83:7e:8a:15:20:82:24: 06:33:bf:f8:75:81:70:44:a3:4d:c4:bf:97:74:a7:4f:72:e8: 5e:55:92:ef:9b:cc:24:f4:59:87:eb:34:69:e7:5c:fb:26:71: c4:0e:52:f4:18:a6:55:bf:07:04:cf:dc:e9:79:67:5f:46:1c: b8:e1:18:ca:72:ec:b6:a2:fd:9f:c9:66:77:2d:de:bd:51:6d: dd:7b:29:5d:74:3b:c4:6a:37:fa:8c:2d:6b:8a:b5:eb:79:8f: 53:2b:dd:88:6b:8e:91:f5:68:02:6a:7b:03:82:d8:9b:0a:00: 20:56:cb:25:12:a3:f0:e0:f4:84:5c:17:00:ec:8f:2f:d3:e5: dd:de:97:b4:d1:be:2e:ad:0c:0b:2f:e7:ff:bf:6e:4b:ca:aa: ed:f1:33:ff:d9:0f:dc:29:c6:f8:b9:6b:0d:4c:c0:78:5a:d4: 25:71:7e:8c:24:b4:49:e6:8e:68:6e:da:80:f1:48:61:17:2b: 2f:21:f4:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/lerRW1dhhvpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Njg1YmNiZjYtNTU0OC00ZGExLWE5YzUtZWYxZjU5MWMxNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs42n932soZzuXTVSCrPmpENiAIYaqwRI1QP1 MhyFC2kacuQlW3aZa/48D4HkzZY2bTnms/T/oWRYtBcU9+Ys/JbAuLHxb6lwhdf3 xMYMbFQfOg7EFCSwSpSGNftaolCVMOlfDTa8J0N/DDZytnW93jz0N/nnViURvwqA RAcNF47Atqld9E0M+WT4Ufc0okbQOMtELaPhJJyAhNRO5Wxl6f/jht0oFq03vkRU 9ocjhGa/SLiMRs3GpvkA8aE6ijaSsl9p/QFpJKAqx9wkOh+/obmiHrqeIx9Jzwd3 ixIi9vDZfnLMZFCWQNzTJv1aLrl4+9lugjqmNqPdeXF/byEz8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3a0YFCwRnpzIa3g2kV9H1P7UdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWNiNDFlMzMtOWQ3ZS0z Mjc4LTg2MmMtNWQwZWIwODIxZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBukj/Nw4q132dmvMU57obxfGxB/thC+hZdUYmgwuMFIuAXHSSB3eE7 9WiOvIGOqf8gXO2bhHOX10csRrPH372bg36KFSCCJAYzv/h1gXBEo03Ev5d0p09y 6F5Vku+bzCT0WYfrNGnnXPsmccQOUvQYplW/BwTP3Ol5Z19GHLjhGMpy7Lai/Z/J Znct3r1Rbd17KV10O8RqN/qMLWuKtet5j1Mr3YhrjpH1aAJqewOC2JsKACBWyyUS o/Dg9IRcFwDsjy/T5d3el7TRvi6tDAsv5/+/bkvKqu3xM//ZD9wpxvi5aw1MwHha 1CVxfowktEnmjmhu2oDxSGEXKy8h9A8= -----END CERTIFICATE-----Generated at Sat Sep 26 16:54:33 2026 by rpki-client