$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cfc511d-a1ee-3e0b-ad11-44a71f5232fe.roa File: 5cfc511d-a1ee-3e0b-ad11-44a71f5232fe.roa (raw, json) Hash identifier: mxiW3FKkQzPtxkS0SHEQJJMjnv2FHsdsprFxEgtuKCY= Subject key identifier: A6:1D:24:CC:D8:AF:C2:4C:FC:4A:12:B3:94:BF:29:5F:8E:A7:EA:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA79307574E4719F6FCCBB400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cfc511d-a1ee-3e0b-ad11-44a71f5232fe.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.202.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:07:57:4e:47:19:f6:fc:cb:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=df54a195-8eb5-4f03-84c1-e3038c736cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e2:b8:65:8d:f1:29:fa:8b:5d:47:14:3f:7d: 74:23:4e:bb:46:f2:d2:f4:a9:4e:22:4e:fa:85:82: 52:cd:51:e1:2e:57:19:ec:1a:4f:9c:94:ef:55:27: 27:3d:e9:01:d2:82:cc:e1:16:df:2e:a0:fa:1f:1e: c8:3b:cd:19:a0:2a:b5:1f:6f:2a:63:f7:75:90:04: 8c:48:3c:fc:2c:df:12:f8:7b:9e:76:97:ad:a7:61: 52:2a:1f:bb:6d:07:67:f9:82:55:2f:a5:97:0f:80: c2:90:7f:5d:89:91:c5:9c:06:08:07:d9:87:25:01: 70:30:e3:c9:39:ff:e4:eb:7c:b5:46:c2:ad:15:51: 53:11:9b:e9:b6:c5:f2:2a:01:52:20:3c:76:50:3f: 98:9c:82:1e:a5:90:a0:8b:95:ad:2d:19:c9:78:02: f7:ec:48:19:88:1d:75:59:57:2a:66:53:07:f7:48: 22:e7:06:67:4b:f4:af:92:3d:61:54:69:22:05:60: bc:f1:7f:3f:81:92:80:1e:8c:87:53:5e:0a:24:45: 40:63:3e:d5:74:0b:a4:56:fa:83:00:28:81:68:91: 66:1f:80:f3:02:9d:e4:69:52:bf:25:9a:54:0e:48: cb:d9:56:19:d5:7b:c9:97:46:e5:61:d8:c2:48:5f: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1D:24:CC:D8:AF:C2:4C:FC:4A:12:B3:94:BF:29:5F:8E:A7:EA:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cfc511d-a1ee-3e0b-ad11-44a71f5232fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a5:c0:0e:99:ba:35:5c:9b:29:3b:b8:52:5a:61:6c:34:98: f6:cb:bb:4d:05:2a:bb:68:f2:b5:2f:bd:94:26:55:62:d8:77: 24:d4:a3:9c:20:d8:2d:7e:51:64:0e:36:29:d5:75:11:fc:5c: d3:69:48:b3:fc:5e:60:b1:bc:64:4c:80:62:3c:90:1e:d0:29: 08:51:35:59:b6:7b:be:f4:34:f6:7f:48:13:22:36:0d:41:2a: fe:d4:28:ba:0f:6a:b2:a0:18:ea:ec:3f:10:40:3d:df:d7:b2: 5d:07:c2:37:2b:30:4d:59:82:8b:d8:48:59:6a:2f:40:75:0a: d9:44:97:5b:b4:20:8d:77:33:bb:75:b7:02:e8:24:ac:bd:aa: d7:f7:42:61:7e:69:ae:5d:ca:35:c7:a2:ad:ee:b5:37:c9:50: 0a:8d:da:8d:43:9d:01:88:04:c2:cc:4b:44:a1:2c:53:6e:93: 59:cd:92:00:7c:b3:d7:b6:ff:40:a2:58:19:4c:8c:1e:a2:d1: 89:da:d3:db:6f:66:b5:f6:59:44:5d:1e:74:b9:be:d0:db:b1: 3d:63:bc:b6:ae:99:3e:7c:b6:a8:8d:9e:e0:4a:db:c6:09:aa: 66:46:c7:e5:25:d7:9f:8e:09:8d:2f:cb:8c:e6:bd:9e:38:ff: 4b:6f:f5:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkwdXTkcZ9vzLtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGY1NGExOTUtOGViNS00ZjAzLTg0YzEtZTMwMzhjNzM2Y2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOK4ZY3xKfqLXUcUP310I067RvLS9KlOIk76 hYJSzVHhLlcZ7BpPnJTvVScnPekB0oLM4RbfLqD6Hx7IO80ZoCq1H28qY/d1kASM SDz8LN8S+Huedpetp2FSKh+7bQdn+YJVL6WXD4DCkH9diZHFnAYIB9mHJQFwMOPJ Of/k63y1RsKtFVFTEZvptsXyKgFSIDx2UD+YnIIepZCgi5WtLRnJeAL37EgZiB11 WVcqZlMH90gi5wZnS/Svkj1hVGkiBWC88X8/gZKAHoyHU14KJEVAYz7VdAukVvqD ACiBaJFmH4DzAp3kaVK/JZpUDkjL2VYZ1XvJl0blYdjCSF9NfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYdJMzYr8JM/EoSs5S/KV+Op+paMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNmYzUxMWQtYTFlZS0z ZTBiLWFkMTEtNDRhNzFmNTIzMmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8qfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHClwA6ZujVcmyk7uFJaYWw0mPbLu00FKrto8rUvvZQmVWLYdyTUo5wg 2C1+UWQONinVdRH8XNNpSLP8XmCxvGRMgGI8kB7QKQhRNVm2e770NPZ/SBMiNg1B Kv7UKLoParKgGOrsPxBAPd/Xsl0HwjcrME1ZgovYSFlqL0B1CtlEl1u0II13M7t1 twLoJKy9qtf3QmF+aa5dyjXHoq3utTfJUAqN2o1DnQGIBMLMS0ShLFNuk1nNkgB8 s9e2/0CiWBlMjB6i0Yna09tvZrX2WURdHnS5vtDbsT1jvLaumT58tqiNnuBK28YJ qmZGx+Ul15+OCY0vy4zmvZ44/0tv9ac= -----END CERTIFICATE-----Generated at Fri Sep 4 23:38:00 2026 by rpki-client