$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0e58316-9aa6-3d45-9f5f-9f570c571c38.roa File: c0e58316-9aa6-3d45-9f5f-9f570c571c38.roa (raw, json) Hash identifier: 1JbAeQyfWJno7vej5MiiOcPI62EEROUpoq0GrUwfgKQ= Subject key identifier: 9E:7A:C3:71:97:74:1F:9A:32:3D:98:67:31:FE:CD:5C:4E:1B:AC:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD4D42B0F909EAB691A240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0e58316-9aa6-3d45-9f5f-9f570c571c38.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.45.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:4d:42:b0:f9:09:ea:b6:91:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=640c1a61-81f4-40e8-aa46-4cef00a1ed52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dc:9c:fb:7e:cb:0c:d1:a2:51:5d:96:80:7c: 83:6d:e8:5a:33:c3:25:39:c0:88:4c:27:76:62:33: 54:ad:e5:73:82:35:61:8a:f4:5b:f6:97:35:29:bf: 77:a1:e6:4a:19:b2:93:ce:73:ce:bf:26:dd:f0:a9: f2:9b:cc:48:80:0e:eb:42:50:ff:5c:ed:1c:7c:dc: bd:4b:17:50:c0:de:a8:f8:ba:12:e7:a5:ee:5a:93: db:0c:41:da:db:ad:bb:a9:c6:5f:83:e4:9b:43:f8: 64:c9:de:e0:b4:1b:c5:10:de:0b:3f:56:4a:aa:76: da:6f:f4:b7:3e:51:0f:6f:f8:87:6f:a5:eb:a4:e4: d8:9d:06:68:ba:e8:b0:1d:85:b2:c1:ee:6b:7d:01: 87:3a:5d:3d:4d:54:b4:99:f4:10:2d:9a:b3:5c:54: ef:6b:f8:b7:40:a1:f9:c6:1f:18:b5:07:08:e8:76: 03:18:92:36:30:04:42:96:57:44:99:1a:f0:9b:bd: e2:8c:3f:b6:06:61:1f:ba:d4:51:c1:8f:49:62:b7: 7d:a7:93:88:dc:94:b3:21:6e:14:00:a2:17:70:d5: 54:01:52:0a:f7:fb:9c:9a:a6:42:a9:a6:b4:b8:31: 46:cb:0f:da:e9:7b:4c:99:2a:44:1f:05:5c:e4:5d: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7A:C3:71:97:74:1F:9A:32:3D:98:67:31:FE:CD:5C:4E:1B:AC:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0e58316-9aa6-3d45-9f5f-9f570c571c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ff:3c:e9:51:81:a6:fc:c5:a2:59:fd:68:93:e5:3b:10:27: 25:86:07:0e:55:c2:dc:fa:fe:e5:4f:4a:0a:d0:4f:d4:44:ee: 59:16:4e:e3:f9:7b:bb:ff:14:e3:08:15:df:a0:23:cf:dd:5d: 92:08:c1:4b:99:d9:78:f3:6b:5b:e2:e2:ce:3a:3e:88:70:bb: 3f:83:da:ba:21:c5:1e:5b:e9:5e:73:0c:a6:f9:fa:07:49:b4: 94:42:e6:51:c1:46:24:ec:e7:0c:ee:1c:d2:34:25:69:3e:e9: 52:6c:ef:19:96:af:99:31:8a:bd:56:b3:63:6a:42:1f:5c:6c: a8:36:b4:29:d4:c4:82:d0:d4:b4:63:6d:26:32:be:4c:3f:f6: 69:7f:f4:f2:21:09:ef:32:ed:04:c4:af:9f:8d:aa:12:b8:01: 91:d7:52:91:dc:5d:2b:17:2a:88:db:53:61:6b:a4:f8:1c:09: 00:23:ad:da:4a:01:ed:b2:bb:ba:22:21:dd:d5:e7:6a:b2:f7: 44:11:e3:8e:5f:52:4f:65:24:69:79:b6:54:6f:40:c8:01:48: b1:a8:f4:79:2d:3c:b6:92:d5:01:66:d7:3a:9a:cd:18:2f:33: 19:95:0d:c6:ed:fa:4f:23:1c:f9:e8:01:38:d1:88:73:aa:9a: 06:f2:17:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rU1CsPkJ6raRokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NjQwYzFhNjEtODFmNC00MGU4LWFhNDYtNGNlZjAwYTFlZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtyc+37LDNGiUV2WgHyDbehaM8MlOcCITCd2 YjNUreVzgjVhivRb9pc1Kb93oeZKGbKTznPOvybd8Knym8xIgA7rQlD/XO0cfNy9 SxdQwN6o+LoS56XuWpPbDEHa2627qcZfg+SbQ/hkyd7gtBvFEN4LP1ZKqnbab/S3 PlEPb/iHb6XrpOTYnQZouuiwHYWywe5rfQGHOl09TVS0mfQQLZqzXFTva/i3QKH5 xh8YtQcI6HYDGJI2MARClldEmRrwm73ijD+2BmEfutRRwY9JYrd9p5OI3JSzIW4U AKIXcNVUAVIK9/ucmqZCqaa0uDFGyw/a6XtMmSpEHwVc5F2DfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ56w3GXdB+aMj2YZzH+zVxOG6xYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzBlNTgzMTYtOWFhNi0z ZDQ1LTlmNWYtOWY1NzBjNTcxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABv/POlRgab8xaJZ/WiT5TsQJyWGBw5Vwtz6/uVPSgrQT9RE7lkWTuP5 e7v/FOMIFd+gI8/dXZIIwUuZ2Xjza1vi4s46Pohwuz+D2rohxR5b6V5zDKb5+gdJ tJRC5lHBRiTs5wzuHNI0JWk+6VJs7xmWr5kxir1Ws2NqQh9cbKg2tCnUxILQ1LRj bSYyvkw/9ml/9PIhCe8y7QTEr5+NqhK4AZHXUpHcXSsXKojbU2FrpPgcCQAjrdpK Ae2yu7oiId3V52qy90QR445fUk9lJGl5tlRvQMgBSLGo9HktPLaS1QFm1zqazRgv MxmVDcbt+k8jHPnoATjRiHOqmgbyFxA= -----END CERTIFICATE-----Generated at Mon Sep 21 21:04:38 2026 by rpki-client