$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da2e7354-8976-3232-9080-07a1c19f0679.roa File: da2e7354-8976-3232-9080-07a1c19f0679.roa (raw, json) Hash identifier: SnTW5G0WnaUdvJOy5MbTN/wGegHYhe60kRhcQiSdjVs= Subject key identifier: 91:95:07:CE:FD:5E:78:32:BA:FE:99:47:56:FE:60:B7:86:07:30:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D717119B5749468818180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da2e7354-8976-3232-9080-07a1c19f0679.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7713 IP address blocks: 23.193.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:71:71:19:b5:74:94:68:81:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09190d36-3080-4959-a28f-f228557a604f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:29:06:aa:f3:e2:58:31:28:c9:59:06:b1:2e: fb:3d:6b:9c:16:11:4d:85:c4:47:6f:e9:23:98:4e: 2b:5d:c6:51:72:d9:78:0c:21:b1:b4:d7:52:06:24: 92:eb:49:61:59:d2:6f:72:49:c3:34:9d:02:ad:3d: 1c:f1:06:ba:1a:90:21:4d:fe:7f:80:13:4a:b4:eb: c4:90:65:fd:e0:16:1f:6c:6b:fe:9f:e1:4d:fd:89: 5f:8a:8b:fc:72:a3:63:88:79:8b:af:a3:2f:ba:52: 0c:63:0e:fb:35:09:71:83:50:63:e0:3c:36:06:5e: 3a:5f:a6:73:87:3e:e7:63:98:87:5e:fb:72:d9:7a: a0:4d:e1:9d:f1:67:1c:60:5f:02:cf:89:f0:a9:4b: 0f:1c:6d:39:b2:3e:e1:73:0d:85:6f:c6:97:ff:78: 8f:9a:ce:2d:9e:ec:ec:0e:3e:a0:ab:13:11:a7:8e: d3:06:41:8c:e2:8f:e8:31:77:b5:87:50:a1:15:ba: 0f:73:e6:f2:1a:4c:6f:4d:9e:d6:69:52:4d:15:8f: 0a:1a:78:85:97:1a:be:09:1d:21:c8:c6:a2:5a:8e: b3:1c:67:dd:56:0b:5d:71:6a:e8:14:49:3a:98:fb: da:f7:15:86:81:56:29:66:91:09:36:b5:50:5d:57: 0b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:95:07:CE:FD:5E:78:32:BA:FE:99:47:56:FE:60:B7:86:07:30:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da2e7354-8976-3232-9080-07a1c19f0679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e9:c7:0e:7d:1c:f0:4e:86:f8:d7:23:91:d7:46:91:a8:4f: 24:00:07:87:41:02:0e:b7:23:dd:90:12:28:3d:e6:bc:86:76: af:e1:52:81:84:25:b3:29:f9:50:84:1a:59:0a:5f:cb:0f:5d: 1e:45:f1:b6:7d:fb:06:b8:a3:47:0f:d6:8c:88:b0:dd:f5:02: 31:f2:93:86:06:f2:54:56:2f:b0:af:19:94:c1:5e:56:9c:03: e4:cc:05:01:74:f6:34:d8:c9:16:05:78:27:8d:82:06:89:4a: d0:61:e4:4e:5c:12:36:0f:20:79:dd:75:5e:f5:68:c7:6b:12: e1:24:7e:2d:00:f5:37:03:a2:04:b5:3c:fa:a6:f2:0a:f8:d0: 26:ac:35:23:4d:25:5e:36:5c:73:3b:01:e1:f6:c5:a6:8d:3d: bf:f1:61:de:48:7c:2a:4a:fa:69:18:c8:cb:aa:a0:2a:87:fd: bd:1d:9d:43:c4:03:8b:b0:eb:f2:a6:3c:a2:f5:14:c4:af:05: 91:78:71:4a:e0:7d:b8:4f:ce:4a:b4:5d:bc:59:47:b3:c5:9d: 9d:90:fa:ce:07:8c:af:b2:2c:10:31:2e:03:d5:34:f4:db:a9: 23:9d:01:9a:52:17:a4:b7:52:a5:54:3f:53:54:59:ac:7e:8f: b9:a8:57:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfXFxGbV0lGiBgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDkxOTBkMzYtMzA4MC00OTU5LWEyOGYtZjIyODU1N2E2MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCkGqvPiWDEoyVkGsS77PWucFhFNhcRHb+kj mE4rXcZRctl4DCGxtNdSBiSS60lhWdJvcknDNJ0CrT0c8Qa6GpAhTf5/gBNKtOvE kGX94BYfbGv+n+FN/Ylfiov8cqNjiHmLr6MvulIMYw77NQlxg1Bj4Dw2Bl46X6Zz hz7nY5iHXvty2XqgTeGd8WccYF8Cz4nwqUsPHG05sj7hcw2Fb8aX/3iPms4tnuzs Dj6gqxMRp47TBkGM4o/oMXe1h1ChFboPc+byGkxvTZ7WaVJNFY8KGniFlxq+CR0h yMaiWo6zHGfdVgtdcWroFEk6mPva9xWGgVYpZpEJNrVQXVcLkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGVB879Xngyuv6ZR1b+YLeGBzD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGEyZTczNTQtODk3Ni0z MjMyLTkwODAtMDdhMWMxOWYwNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8HUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDpxw59HPBOhvjXI5HXRpGoTyQAB4dBAg63I92QEig95ryGdq/hUoGE JbMp+VCEGlkKX8sPXR5F8bZ9+wa4o0cP1oyIsN31AjHyk4YG8lRWL7CvGZTBXlac A+TMBQF09jTYyRYFeCeNggaJStBh5E5cEjYPIHnddV71aMdrEuEkfi0A9TcDogS1 PPqm8gr40CasNSNNJV42XHM7AeH2xaaNPb/xYd5IfCpK+mkYyMuqoCqH/b0dnUPE A4uw6/KmPKL1FMSvBZF4cUrgfbhPzkq0XbxZR7PFnZ2Q+s4HjK+yLBAxLgPVNPTb qSOdAZpSF6S3UqVUP1NUWax+j7moV5Q= -----END CERTIFICATE-----Generated at Sat Sep 26 16:59:05 2026 by rpki-client