$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7aeae9d-e341-3923-a412-635f824286e5.roa File: b7aeae9d-e341-3923-a412-635f824286e5.roa (raw, json) Hash identifier: oJezH/VmFkaLSzoRaPXBFJrDIe4TlApgWHsgpenSzgM= Subject key identifier: 27:EC:8B:C6:70:A7:B9:C6:62:F6:56:BE:FC:F0:D2:CF:41:D7:AD:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F23C27B53BC0FD11B2368FC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7aeae9d-e341-3923-a412-635f824286e5.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.58.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:7b:53:bc:0f:d1:1b:23:68:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=93cbaf9a-f7cd-4314-aa84-806c53ab55df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:1d:cc:0c:8f:9f:aa:19:46:ef:de:46:23: 6c:a8:a2:b1:f2:40:62:9a:ff:08:48:ff:4e:5c:46: 44:6f:40:af:10:00:88:82:76:d4:f9:f0:a1:a1:78: 39:be:67:9b:0c:e8:6b:e2:b9:0d:17:1a:b7:bb:46: b8:34:31:ca:ae:0a:6c:48:85:93:33:33:a2:da:79: a2:62:d1:73:4f:55:e7:22:d5:d5:36:cb:b0:ce:eb: eb:bc:ed:3a:0d:28:17:c0:8d:4e:0a:99:56:bd:1a: 19:fb:d9:a7:34:3a:e8:05:28:a7:0a:73:27:e7:37: 42:14:98:50:f4:a9:a3:8b:30:f0:df:fc:60:22:0c: e0:bf:5c:7f:d5:f8:ac:5e:af:b4:96:75:20:e2:9d: 6c:38:60:13:e2:99:dd:e7:ca:4b:77:a1:06:ec:02: 7e:d2:f6:5e:93:6a:7a:9d:cb:99:5a:19:08:08:b3: 63:4f:b2:58:49:10:11:ab:83:87:9b:d9:c2:aa:a5: 85:17:94:22:fe:51:41:41:e7:5e:15:27:87:69:18: 3d:5b:7a:1c:8a:f4:7c:eb:d0:94:9d:1d:77:50:37: a9:ef:3e:1b:6d:4b:3c:d1:e9:39:a3:37:dc:53:9b: b7:11:28:e3:da:e8:1c:02:08:bc:a1:5f:aa:79:b8: 3b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:EC:8B:C6:70:A7:B9:C6:62:F6:56:BE:FC:F0:D2:CF:41:D7:AD:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7aeae9d-e341-3923-a412-635f824286e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:cc:a6:83:80:0b:79:c0:f6:4c:bb:30:03:63:16:5d:ad:af: e5:ee:83:2b:af:82:10:94:ad:0a:9f:fd:4c:53:4e:c5:e6:9e: 55:3e:03:d9:36:24:0d:37:8e:2b:cc:4d:99:04:a0:21:ca:9a: a9:f3:4f:28:00:5c:78:00:f1:5e:8f:c1:39:15:c0:ca:e8:cf: 8e:8f:1e:51:53:ac:ed:53:89:17:21:b6:34:15:15:d1:58:6c: 1c:a9:33:7e:ad:25:3b:31:92:ad:12:fd:26:86:de:43:82:2e: 6a:20:e1:f8:e9:1b:e0:e9:c2:96:16:e7:00:b1:4c:db:b3:39: ca:60:62:39:2b:e0:8f:f6:9c:0a:c6:0a:05:5b:c5:27:d0:d4: 16:3b:95:5c:5f:68:88:63:af:58:85:a1:c6:59:ae:35:13:2b: 1f:c8:df:b6:6e:7a:a2:a3:2b:d6:8b:05:02:1c:ee:1d:e8:68: 85:28:83:fc:11:8f:d4:50:22:3e:67:23:7e:14:e8:36:b9:cb: 83:c8:25:7d:98:4d:6c:70:2f:8f:23:2a:cf:26:ad:80:0e:88: 5c:1c:db:25:76:69:75:d4:ca:59:62:fa:01:b6:91:39:79:96: b6:d0:9f:1e:44:84:92:dd:1d:4c:63:9b:a2:18:bb:a4:15:46: b0:c5:4b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwntTvA/RGyNo/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk OTNjYmFmOWEtZjdjZC00MzE0LWFhODQtODA2YzUzYWI1NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRkdzAyPn6oZRu/eRiNsqKKx8kBimv8ISP9O XEZEb0CvEACIgnbU+fChoXg5vmebDOhr4rkNFxq3u0a4NDHKrgpsSIWTMzOi2nmi YtFzT1XnItXVNsuwzuvrvO06DSgXwI1OCplWvRoZ+9mnNDroBSinCnMn5zdCFJhQ 9KmjizDw3/xgIgzgv1x/1fisXq+0lnUg4p1sOGAT4pnd58pLd6EG7AJ+0vZek2p6 ncuZWhkICLNjT7JYSRARq4OHm9nCqqWFF5Qi/lFBQedeFSeHaRg9W3ocivR869CU nR13UDep7z4bbUs80ek5ozfcU5u3ESjj2ugcAgi8oV+qebg7mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfsi8Zwp7nGYvZWvvzw0s9B1611MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjdhZWFlOWQtZTM0MS0z OTIzLWE0MTItNjM1ZjgyNDI4NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3MpoOAC3nA9ky7MANjFl2tr+XugyuvghCUrQqf/UxTTsXmnlU+A9k2 JA03jivMTZkEoCHKmqnzTygAXHgA8V6PwTkVwMroz46PHlFTrO1TiRchtjQVFdFY bBypM36tJTsxkq0S/SaG3kOCLmog4fjpG+DpwpYW5wCxTNuzOcpgYjkr4I/2nArG CgVbxSfQ1BY7lVxfaIhjr1iFocZZrjUTKx/I37ZueqKjK9aLBQIc7h3oaIUog/wR j9RQIj5nI34U6Da5y4PIJX2YTWxwL48jKs8mrYAOiFwc2yV2aXXUylli+gG2kTl5 lrbQnx5EhJLdHUxjm6IYu6QVRrDFS/Q= -----END CERTIFICATE-----Generated at Sun Sep 20 23:21:17 2026 by rpki-client