$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9b27fc6-f8af-3e3d-b57a-a9ae527d322e.roa File: d9b27fc6-f8af-3e3d-b57a-a9ae527d322e.roa (raw, json) Hash identifier: RHYJaOWXgt3094qdaMc+3hCSlfEJjXT9ghzSmEAinSs= Subject key identifier: FE:F1:FE:85:D6:40:99:FF:CB:6C:F8:7E:49:BF:49:F2:5C:1D:FE:A3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F080EF5E610B9CB76F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9b27fc6-f8af-3e3d-b57a-a9ae527d322e.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.38.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f0:80:ef:5e:61:0b:9c:b7:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=ae88b48f-f94c-4848-9734-fb5cad2467f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:8d:a0:ac:7c:af:e8:86:d6:9f:c9:74:61: 30:35:4e:2f:1c:a3:1d:ec:14:e5:b8:a9:ab:7a:01: 56:a9:0d:68:af:3f:87:1f:39:b2:ee:7e:51:6a:89: b1:07:48:e1:aa:8c:fc:ca:4b:90:07:97:50:ab:dd: 01:34:9b:90:7c:77:23:ee:41:4d:c1:0c:b4:89:8c: cc:57:ff:f6:ab:17:f1:8a:c3:56:9e:ac:88:c3:71: 6f:61:ec:29:e0:1c:10:ef:74:12:aa:ce:34:3b:f2: 2f:c9:b7:4c:21:24:63:25:56:4a:71:2d:7b:f6:b1: e5:1a:31:f1:0d:10:dd:de:3a:e0:e8:a4:24:54:63: e9:63:cc:6b:38:d4:4b:7a:0f:0e:9f:4a:b3:15:67: 7a:eb:10:0b:ce:28:d5:7e:74:42:92:b4:b4:75:d0: b8:9d:6d:64:1f:22:53:14:9a:f7:8f:4b:f1:43:95: bf:ca:c0:2b:82:fb:2e:29:88:99:53:39:28:42:cf: 4e:5c:a3:31:45:d5:1a:94:8b:18:07:6b:36:2c:d1: 86:32:fb:b9:c9:03:55:3f:f2:d8:28:d9:a7:41:b7: 1f:11:ad:b2:e1:d4:03:4c:51:82:e4:eb:cb:20:45: e1:cd:41:6d:4c:a7:61:48:4a:45:34:04:1f:b9:fa: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F1:FE:85:D6:40:99:FF:CB:6C:F8:7E:49:BF:49:F2:5C:1D:FE:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9b27fc6-f8af-3e3d-b57a-a9ae527d322e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f4:e6:a3:98:7f:74:48:6d:63:6a:20:7e:55:fe:ca:cf:76: 36:2f:1c:f7:3c:a0:4b:b4:9d:49:ee:b9:ef:f0:8d:6e:38:71: ad:7f:96:d9:fa:68:5b:1a:23:a8:e5:ec:c7:43:25:4a:65:33: 75:0d:64:cf:ee:b5:f4:ef:97:01:ff:69:ab:fd:d8:75:24:05: 4b:b6:9c:cd:c4:0d:d3:45:6d:6f:ad:4f:be:c7:a5:e9:d4:b7: 7e:8c:71:73:ec:0d:fe:4d:0d:09:d3:20:38:71:e9:8d:f5:a1: 48:f7:53:68:20:60:01:1c:ed:c4:9c:a4:66:53:0f:17:7f:d6: 07:e0:fc:b9:4a:b6:85:f5:78:f6:ad:3c:7c:7b:47:f0:3c:a7: c8:ba:a9:62:56:48:1e:1c:3b:64:0d:89:ca:ca:0c:e0:9d:72: de:dc:68:4b:6d:50:f3:0e:c4:57:f7:67:37:89:ab:36:3a:c5: 34:8d:f8:68:cc:74:f2:dc:9d:ab:86:94:b3:6c:e4:d2:15:69: 0d:9c:d9:ca:7b:5b:f1:22:e5:12:20:89:2a:2e:93:fd:c0:5d: 45:c9:00:b2:6b:06:9a:c4:19:84:31:b7:4d:95:21:3c:64:56: 10:e5:9f:98:96:d5:83:8f:de:2f:aa:ea:53:36:86:0f:54:aa: 42:57:43:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/CA715hC5y3b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YWU4OGI0OGYtZjk0Yy00ODQ4LTk3MzQtZmI1Y2FkMjQ2N2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiSNoKx8r+iG1p/JdGEwNU4vHKMd7BTluKmr egFWqQ1orz+HHzmy7n5RaomxB0jhqoz8ykuQB5dQq90BNJuQfHcj7kFNwQy0iYzM V//2qxfxisNWnqyIw3FvYewp4BwQ73QSqs40O/IvybdMISRjJVZKcS179rHlGjHx DRDd3jrg6KQkVGPpY8xrONRLeg8On0qzFWd66xALzijVfnRCkrS0ddC4nW1kHyJT FJr3j0vxQ5W/ysArgvsuKYiZUzkoQs9OXKMxRdUalIsYB2s2LNGGMvu5yQNVP/LY KNmnQbcfEa2y4dQDTFGC5OvLIEXhzUFtTKdhSEpFNAQfufpHbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7x/oXWQJn/y2z4fkm/SfJcHf6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDliMjdmYzYtZjhhZi0z ZTNkLWI1N2EtYTlhZTUyN2QzMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD05qOYf3RIbWNqIH5V/srPdjYvHPc8oEu0nUnuue/wjW44ca1/ltn6 aFsaI6jl7MdDJUplM3UNZM/utfTvlwH/aav92HUkBUu2nM3EDdNFbW+tT77HpenU t36McXPsDf5NDQnTIDhx6Y31oUj3U2ggYAEc7cScpGZTDxd/1gfg/LlKtoX1ePat PHx7R/A8p8i6qWJWSB4cO2QNicrKDOCdct7caEttUPMOxFf3ZzeJqzY6xTSN+GjM dPLcnauGlLNs5NIVaQ2c2cp7W/Ei5RIgiSouk/3AXUXJALJrBprEGYQxt02VITxk VhDln5iW1YOP3i+q6lM2hg9UqkJXQ00= -----END CERTIFICATE-----Generated at Tue Sep 22 18:56:50 2026 by rpki-client