$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/741a0961-2984-301a-89be-a8d3bf403220.roa File: 741a0961-2984-301a-89be-a8d3bf403220.roa (raw, json) Hash identifier: 2t+37jbiNDUKyQfMwaTUYb3Pr8Z1hCYNjnDPY3+idrY= Subject key identifier: 25:0E:8C:81:29:8A:F7:9B:10:7B:D8:F2:1A:1D:B5:38:38:25:52:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093CF5A21CA764493EFB33A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/741a0961-2984-301a-89be-a8d3bf403220.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.1.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f5:a2:1c:a7:64:49:3e:fb:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=d6e2db27-ef80-44a3-ad4f-4abafeb5a816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1b:36:53:bc:93:91:6e:88:93:f2:9e:e4:e6: 2c:88:19:34:19:09:2f:bc:7e:03:f0:99:55:67:50: 6d:cf:0c:52:57:c1:1d:99:45:c4:92:b0:74:6a:df: 0f:92:8f:50:9a:aa:d3:6e:e2:e5:1d:85:1e:84:4a: da:3a:63:52:d9:86:17:fe:3e:0e:07:0b:a0:23:70: a5:69:4a:a8:94:01:c0:d0:69:91:21:58:f4:26:be: e9:d8:8c:af:d7:73:f3:09:f0:05:dc:81:f4:fe:f1: 79:c3:83:50:c0:6c:39:a1:50:14:e3:b8:87:63:1a: fa:d9:16:8d:3f:b1:89:2b:13:89:a3:65:a4:8f:e4: 0d:6d:92:3d:0a:74:e7:f8:7d:bc:3c:36:59:94:21: 9c:bd:62:b2:ff:5c:3e:84:8a:d2:c1:aa:08:f5:5b: 28:48:26:b1:be:e6:26:4a:d9:81:82:f4:d1:11:fa: 13:71:90:4e:c0:23:fc:b1:0c:f1:dc:db:ea:9c:95: 49:40:8b:57:f7:4a:6b:11:b9:18:ec:39:15:c4:2d: 53:ff:61:5f:38:f7:b7:24:db:9c:e0:34:e8:6f:58: 72:ea:1f:56:f1:a0:d1:ac:f0:97:7f:c4:82:87:20: 4a:8b:fc:9d:e7:bd:78:ea:06:6d:06:d6:4f:f1:ee: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0E:8C:81:29:8A:F7:9B:10:7B:D8:F2:1A:1D:B5:38:38:25:52:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/741a0961-2984-301a-89be-a8d3bf403220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:3f:9d:89:a6:54:09:8b:f1:f9:19:71:d7:89:e8:c6:89:e3: 61:8d:48:3b:96:1e:ac:d1:57:08:46:36:2d:74:44:a7:0b:97: 4f:63:e0:a7:31:f4:15:ab:a5:5a:14:b9:f8:d7:39:fe:f8:a7: ad:81:35:5a:6e:8a:ca:54:62:0d:3d:99:bf:73:ec:11:67:3b: c6:9e:18:bb:d3:8f:29:6b:7f:aa:5f:69:08:d5:79:7f:7d:bb: 7c:9e:90:ee:36:7d:52:ae:55:df:74:dc:ec:c9:c4:eb:6e:fb: 00:88:4a:14:49:6f:a4:46:dd:27:b1:a6:22:d9:3e:0d:d9:c7: f8:4c:88:a9:b7:9f:04:23:cb:47:a4:32:fb:7c:19:3a:ad:8a: f6:52:bf:52:19:51:fa:41:7b:dc:d4:83:b0:8c:9e:2d:84:dd: 0c:74:9f:3a:20:bc:a2:a5:98:40:23:f6:81:f8:99:ad:e4:47: b7:fe:de:65:fb:61:ff:8f:9d:f6:fa:8e:1d:c0:d4:93:08:4a: 98:32:a1:9a:dd:f6:10:8a:37:85:58:1a:8b:ac:e2:83:12:f9: 75:c3:d8:c3:91:78:67:a9:05:10:2a:38:e7:f2:f2:07:f9:f5: fc:93:7d:cc:ec:d8:b6:7a:91:ae:b3:fd:e8:9c:69:9a:a3:d5: 71:55:46:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPWiHKdkST77M6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDZlMmRiMjctZWY4MC00NGEzLWFkNGYtNGFiYWZlYjVhODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhs2U7yTkW6Ik/Ke5OYsiBk0GQkvvH4D8JlV Z1BtzwxSV8EdmUXEkrB0at8Pko9QmqrTbuLlHYUehEraOmNS2YYX/j4OBwugI3Cl aUqolAHA0GmRIVj0Jr7p2Iyv13PzCfAF3IH0/vF5w4NQwGw5oVAU47iHYxr62RaN P7GJKxOJo2Wkj+QNbZI9CnTn+H28PDZZlCGcvWKy/1w+hIrSwaoI9VsoSCaxvuYm StmBgvTREfoTcZBOwCP8sQzx3NvqnJVJQItX90prEbkY7DkVxC1T/2FfOPe3JNuc 4DTob1hy6h9W8aDRrPCXf8SChyBKi/yd57146gZtBtZP8e6TPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUOjIEpivebEHvY8hodtTg4JVK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzQxYTA5NjEtMjk4NC0z MDFhLTg5YmUtYThkM2JmNDAzMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY/nYmmVAmL8fkZcdeJ6MaJ42GNSDuWHqzRVwhGNi10RKcLl09j4Kcx 9BWrpVoUufjXOf74p62BNVpuispUYg09mb9z7BFnO8aeGLvTjylrf6pfaQjVeX99 u3yekO42fVKuVd903OzJxOtu+wCIShRJb6RG3SexpiLZPg3Zx/hMiKm3nwQjy0ek Mvt8GTqtivZSv1IZUfpBe9zUg7CMni2E3Qx0nzogvKKlmEAj9oH4ma3kR7f+3mX7 Yf+Pnfb6jh3A1JMISpgyoZrd9hCKN4VYGous4oMS+XXD2MOReGepBRAqOOfy8gf5 9fyTfczs2LZ6ka6z/eicaZqj1XFVRko= -----END CERTIFICATE-----Generated at Sat Sep 5 02:52:00 2026 by rpki-client