$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebacc7a-62ea-350b-8ae6-332e9b3ec673.roa File: bebacc7a-62ea-350b-8ae6-332e9b3ec673.roa (raw, json) Hash identifier: wtvFX88kyoQ5qNSGD3aA21aYwlm/nXl4vr6Q/8inC1A= Subject key identifier: 33:02:28:BA:C6:84:11:C7:9B:E7:39:36:08:C7:03:0F:60:0D:48:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47FB7CC74AB6AA89A04380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebacc7a-62ea-350b-8ae6-332e9b3ec673.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 1299 IP address blocks: 23.40.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fb:7c:c7:4a:b6:aa:89:a0:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=053dbbf2-8157-4b4a-a859-8b626be05ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:57:b6:c1:dc:24:b7:39:5e:4b:c6:09:65: 0b:97:dc:bb:17:cd:ca:ed:08:94:1b:78:bb:2a:db: de:7a:4d:3c:2c:c7:4e:7e:43:3d:94:43:42:6f:b4: 95:8f:a4:37:f0:a2:b3:e2:63:fb:15:b8:4f:f1:b5: 32:a6:b1:83:5a:3c:d8:68:c4:fe:0a:fd:3b:05:ed: ef:40:64:63:ab:43:df:83:cd:c4:19:90:9f:95:f7: a2:9a:6b:c3:c4:4c:5d:4e:85:98:bb:78:dc:4d:79: 2c:ad:05:09:07:de:4d:33:0a:cc:b4:26:4a:a7:69: 12:dc:5f:13:91:3b:9b:74:ae:7a:86:06:bf:18:9c: de:46:79:fb:16:24:ee:53:d6:6f:38:a2:50:b0:e6: 08:55:e7:1f:55:fb:d6:71:16:04:75:48:f8:4c:41: ad:04:98:18:bb:e0:f2:e3:7f:b5:7f:d2:cc:af:db: 4c:2a:e9:ad:0d:09:62:13:eb:5d:f2:a4:18:74:d8: 42:c6:5e:c8:51:fa:ae:5c:f3:52:49:4a:bb:dc:ba: ce:61:a7:27:c6:73:57:18:25:24:1b:aa:34:ca:8d: 1e:c7:60:01:5f:51:5e:7a:a8:14:e6:be:54:21:9a: f6:89:e7:a9:2d:1a:b4:5f:a5:dd:f9:c5:e6:5f:6b: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:02:28:BA:C6:84:11:C7:9B:E7:39:36:08:C7:03:0F:60:0D:48:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebacc7a-62ea-350b-8ae6-332e9b3ec673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:4e:08:da:45:73:34:2e:ea:9d:66:dc:81:d0:7c:2c:cd:14: cf:1f:51:62:2d:3c:32:67:d6:9d:7d:57:a0:43:c3:0f:d4:7e: aa:a0:8a:42:17:bb:3a:6a:a0:71:33:ac:df:00:1f:89:40:53: b5:91:3f:cc:40:93:11:ea:53:4c:18:2b:e4:cd:be:95:60:cc: 20:52:80:36:16:4b:62:84:98:29:02:3f:a4:c6:5b:3f:51:3c: c7:74:a8:24:94:82:2c:f7:69:ac:c7:f2:58:3b:0e:29:0c:e3: bf:fa:d3:70:95:fe:2a:cd:e9:90:dc:0c:c7:cb:b2:8e:f5:b0: ec:31:32:7c:88:e5:3e:c8:a9:4e:ec:d1:91:fa:0b:d4:ff:29: d4:41:59:4f:4c:88:c7:d8:8c:4b:a4:5e:15:6c:49:b5:87:ea: 0c:11:df:f4:27:ce:23:f5:66:42:f3:63:89:17:a5:81:1f:c2: 9d:9c:60:fb:07:62:04:1c:71:5d:00:20:c7:32:96:d6:df:f5: 2c:e7:d6:d2:f7:92:1d:9c:1f:99:47:4d:0c:5f:3d:f9:a9:e7: b3:54:7f:bb:2a:ab:93:66:24:10:72:6b:62:1e:9e:6d:83:36: 4e:aa:3d:e1:07:3a:ff:85:40:dc:0c:d4:99:32:7d:c6:a3:69: b3:e4:53:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/t8x0q2qomgQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MDUzZGJiZjItODE1Ny00YjRhLWE4NTktOGI2MjZiZTA1YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypNXtsHcJLc5XkvGCWULl9y7F83K7QiUG3i7 Ktveek08LMdOfkM9lENCb7SVj6Q38KKz4mP7FbhP8bUyprGDWjzYaMT+Cv07Be3v QGRjq0Pfg83EGZCflfeimmvDxExdToWYu3jcTXksrQUJB95NMwrMtCZKp2kS3F8T kTubdK56hga/GJzeRnn7FiTuU9ZvOKJQsOYIVecfVfvWcRYEdUj4TEGtBJgYu+Dy 43+1f9LMr9tMKumtDQliE+td8qQYdNhCxl7IUfquXPNSSUq73LrOYacnxnNXGCUk G6o0yo0ex2ABX1FeeqgU5r5UIZr2ieepLRq0X6Xd+cXmX2sm4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMCKLrGhBHHm+c5NgjHAw9gDUjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmViYWNjN2EtNjJlYS0z NTBiLThhZTYtMzMyZTliM2VjNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlOCNpFczQu6p1m3IHQfCzNFM8fUWItPDJn1p19V6BDww/UfqqgikIX uzpqoHEzrN8AH4lAU7WRP8xAkxHqU0wYK+TNvpVgzCBSgDYWS2KEmCkCP6TGWz9R PMd0qCSUgiz3aazH8lg7DikM47/603CV/irN6ZDcDMfLso71sOwxMnyI5T7IqU7s 0ZH6C9T/KdRBWU9MiMfYjEukXhVsSbWH6gwR3/QnziP1ZkLzY4kXpYEfwp2cYPsH YgQccV0AIMcyltbf9Szn1tL3kh2cH5lHTQxfPfmp57NUf7sqq5NmJBBya2Ienm2D Nk6qPeEHOv+FQNwM1JkyfcajabPkU+U= -----END CERTIFICATE-----Generated at Fri Sep 25 22:53:17 2026 by rpki-client