$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e1004f1-4e40-3762-881a-ddd604a479b2.roa File: 0e1004f1-4e40-3762-881a-ddd604a479b2.roa (raw, json) Hash identifier: jw6uk4XD/d8ivVT0Y//8qIqnDiJ3LBCX8rv4DJXWRsw= Subject key identifier: C5:3F:30:0A:9D:24:02:43:7E:1E:35:C9:41:E4:79:01:4F:FF:E9:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE917479F7C9AA7F8A2AF6CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e1004f1-4e40-3762-881a-ddd604a479b2.roa Signing time: Fri 21 Aug 2026 12:38:46 +0000 ROA not before: Fri 21 Aug 2026 12:38:46 +0000 ROA not after: Thu 19 Nov 2026 13:38:46 +0000 asID: 32787 IP address blocks: 23.0.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:17:47:9f:7c:9a:a7:f8:a2:af:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 21 12:38:46 2026 GMT Not After : Nov 19 13:38:46 2026 GMT Subject: CN=28c6be62-9b1d-4b2a-aadd-b46ae3e798da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5e:80:06:f3:ad:34:53:b2:1b:32:29:a4:a6: ed:3e:ac:1e:13:d9:c5:d5:37:5d:ed:71:b7:10:f9: 70:db:c9:78:3d:07:1f:34:00:4f:f9:e2:03:b2:30: c8:8a:64:65:12:b8:8c:e6:82:58:e0:47:24:be:18: f7:bf:5e:ab:97:e5:d0:59:4b:d8:56:0f:b6:3c:b3: 6b:ba:8c:b0:45:ff:61:6b:9f:0b:6e:7b:69:d9:48: ec:a9:b9:e0:0a:6e:5c:7f:ca:60:40:74:c7:78:46: 58:25:38:40:b8:13:3e:44:7c:cd:6f:25:a7:11:17: c6:36:15:dc:e9:70:92:08:4e:d4:7f:e0:65:5b:14: 9a:d0:d7:3d:1b:e8:fc:54:0f:a2:01:96:00:83:aa: c7:26:f8:77:70:db:9f:cf:a8:3a:bd:17:99:4a:c9: 73:8b:fd:56:74:90:8a:fd:01:d6:f4:ae:a8:b8:f6: dd:08:4e:3c:9d:d2:ea:c9:94:9d:ea:21:8f:0a:53: ca:d7:16:b4:2b:84:d5:24:79:e5:32:74:37:5d:7c: b6:6a:8b:95:7a:cf:35:63:d6:e0:0e:43:98:95:e0: 48:3a:c6:29:33:bb:93:f5:26:4a:d7:9a:e1:44:fe: f9:79:11:3a:16:40:27:7b:09:85:5d:a4:ad:51:ef: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:30:0A:9D:24:02:43:7E:1E:35:C9:41:E4:79:01:4F:FF:E9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e1004f1-4e40-3762-881a-ddd604a479b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:68:99:1d:98:2d:7a:bc:a7:50:6e:8e:b2:07:f0:5f:cd:99: b5:af:4a:50:d2:15:37:6a:84:f5:cc:75:a2:a8:31:a0:1d:89: 5b:36:50:86:3f:9c:9e:7e:d8:99:7f:23:4d:08:92:28:75:3b: 68:5c:08:8a:78:c5:19:f3:17:f3:d1:bb:62:a7:46:71:a3:fb: 74:f2:4a:19:58:8a:36:7b:f4:44:28:67:c9:ab:8c:bb:0c:a0: 43:25:f6:fb:42:7f:51:b7:40:32:31:03:8c:60:21:37:a5:65: f0:c2:22:4a:d8:25:0c:86:98:4a:09:3c:0c:a4:f4:b2:d2:d0: 68:bf:0f:85:aa:c9:96:62:8b:1e:4c:7b:c6:63:ba:54:64:57: ac:d1:fc:30:47:55:3e:c3:cb:d9:f1:62:c8:09:d4:5c:46:04: 37:5c:6c:f0:af:b9:c1:3d:74:ee:05:63:d8:fe:0a:cd:74:f0: b0:f2:f7:b3:b7:9b:46:da:de:55:af:c9:bf:a5:ec:9c:59:52: 9b:d5:52:df:2f:a7:48:3c:8f:14:30:39:13:e4:59:12:ff:d7: 69:83:73:38:b9:7b:85:54:23:ad:84:29:20:81:02:bc:ac:d2: 2e:dd:ce:d0:52:b8:36:44:76:37:06:1c:29:41:2e:aa:44:a2: e8:9a:a3:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pF0effJqn+KKvbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMTEyMzg0NloXDTI2MTExOTEzMzg0NlowLzEtMCsGA1UEAxMk MjhjNmJlNjItOWIxZC00YjJhLWFhZGQtYjQ2YWUzZTc5OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg16ABvOtNFOyGzIppKbtPqweE9nF1Tdd7XG3 EPlw28l4PQcfNABP+eIDsjDIimRlEriM5oJY4Eckvhj3v16rl+XQWUvYVg+2PLNr uoywRf9ha58Lbntp2UjsqbngCm5cf8pgQHTHeEZYJThAuBM+RHzNbyWnERfGNhXc 6XCSCE7Uf+BlWxSa0Nc9G+j8VA+iAZYAg6rHJvh3cNufz6g6vReZSslzi/1WdJCK /QHW9K6ouPbdCE48ndLqyZSd6iGPClPK1xa0K4TVJHnlMnQ3XXy2aouVes81Y9bg DkOYleBIOsYpM7uT9SZK15rhRP75eRE6FkAnewmFXaStUe/P/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU/MAqdJAJDfh41yUHkeQFP/+lbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGUxMDA0ZjEtNGU0MC0z NzYyLTg4MWEtZGRkNjA0YTQ3OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwDhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFomR2YLXq8p1BujrIH8F/NmbWvSlDSFTdqhPXMdaKoMaAdiVs2UIY/ nJ5+2Jl/I00Ikih1O2hcCIp4xRnzF/PRu2KnRnGj+3TyShlYijZ79EQoZ8mrjLsM oEMl9vtCf1G3QDIxA4xgITelZfDCIkrYJQyGmEoJPAyk9LLS0Gi/D4WqyZZiix5M e8ZjulRkV6zR/DBHVT7Dy9nxYsgJ1FxGBDdcbPCvucE9dO4FY9j+Cs108LDy97O3 m0ba3lWvyb+l7JxZUpvVUt8vp0g8jxQwORPkWRL/12mDczi5e4VUI62EKSCBArys 0i7dztBSuDZEdjcGHClBLqpEouiao7c= -----END CERTIFICATE-----Generated at Fri Sep 4 23:39:52 2026 by rpki-client