$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c344c0a-fb77-39c8-8665-3fdbc356e43a.roa File: 9c344c0a-fb77-39c8-8665-3fdbc356e43a.roa (raw, json) Hash identifier: 31cDr6cQRe0nZjo+mebxnGR6ZHzXD72LWJLZfNGBkt8= Subject key identifier: C8:C7:43:8F:89:14:CE:C4:25:D3:72:BA:EF:B7:51:A2:FD:A4:DE:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA78788B3B6D2A8284A34AF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c344c0a-fb77-39c8-8665-3fdbc356e43a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.58.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:88:b3:b6:d2:a8:28:4a:34:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=47ba7e45-630d-4735-b951-827399ad4b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:f5:d9:9b:26:e3:9a:67:34:25:a8:2c:33: 69:3d:14:6b:cb:32:09:4c:17:47:d1:a8:c0:71:0b: ab:3e:89:5f:42:1c:ea:0b:c5:9b:9b:99:b4:37:6e: 86:90:09:93:f5:b3:d0:5b:86:b9:59:42:1c:82:e4: 85:0f:5f:7e:11:aa:8b:41:b8:14:91:e2:49:d1:39: d8:c2:11:f7:35:27:09:ef:4c:1e:2d:de:c8:65:9a: fc:76:1c:e5:8a:b3:41:09:a1:6e:63:62:fb:32:7e: c6:eb:51:c2:c7:aa:d3:41:64:ba:7a:75:9c:c2:07: 39:e1:de:50:7f:80:93:4d:7d:ab:dc:ad:65:9b:e1: 43:30:a6:22:37:84:ee:5d:0c:37:db:c6:a7:4b:10: f0:c4:a4:13:f7:23:ed:9d:70:7e:10:48:9f:59:25: c6:7a:28:d0:5b:10:96:70:b0:b7:24:e9:f1:73:59: c0:8d:0a:fa:51:8f:ab:59:69:11:90:9b:37:23:a4: 71:00:ac:84:54:44:43:1e:22:b6:fe:7b:d3:26:99: e2:4b:2e:af:71:91:e2:a9:5b:01:7a:16:b0:69:29: d2:18:55:63:12:d4:5a:6f:8c:8e:47:c2:24:c5:7e: 6b:a9:79:50:20:68:d6:0f:1b:eb:a7:9e:8c:9a:23: 37:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C7:43:8F:89:14:CE:C4:25:D3:72:BA:EF:B7:51:A2:FD:A4:DE:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c344c0a-fb77-39c8-8665-3fdbc356e43a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b8:68:6b:77:47:54:5f:b4:2f:1b:8f:cb:28:29:72:e1:24: 7a:88:e3:e9:1b:41:2e:4b:6c:08:e3:65:e8:32:48:9b:95:75: ce:ac:6b:52:6c:88:89:44:4a:09:89:fb:37:86:9c:fc:0c:cc: 33:26:34:cf:bb:ac:6f:6f:f0:80:31:07:d3:08:8c:e8:65:7d: bf:70:56:41:a8:9a:45:61:14:c1:71:b4:ff:2e:0c:ca:8f:58: 6c:b1:14:6d:a2:f2:d2:8b:bf:8b:e9:9f:98:a1:15:05:23:90: 6e:05:c5:b6:8a:e6:e7:5c:81:1e:3a:55:b4:82:65:aa:2b:28: 91:20:8a:4f:7a:55:a9:12:de:b9:35:74:68:c8:58:81:db:ea: 61:a5:77:e7:50:0c:c7:29:cc:7a:09:61:d1:36:47:c1:0a:ee: af:8f:e4:f5:7e:55:90:ea:3c:23:42:09:6f:64:5f:9f:14:4e: f4:6b:f4:23:e2:ae:87:45:f0:5d:0b:74:2c:47:63:9d:4e:17: 12:9e:5c:e9:ec:7c:45:0b:6d:47:bf:8f:88:1a:08:e5:f0:e5: 45:88:68:17:3e:47:ee:1c:b7:b4:2a:a6:0f:e1:36:9e:fc:9e: cb:9a:01:14:43:ad:3e:4a:92:c5:2b:e8:d2:df:ff:fb:1d:4c: 62:15:56:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh4izttKoKEo0r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDdiYTdlNDUtNjMwZC00NzM1LWI5NTEtODI3Mzk5YWQ0YjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSD12Zsm45pnNCWoLDNpPRRryzIJTBdH0ajA cQurPolfQhzqC8Wbm5m0N26GkAmT9bPQW4a5WUIcguSFD19+EaqLQbgUkeJJ0TnY whH3NScJ70weLd7IZZr8dhzlirNBCaFuY2L7Mn7G61HCx6rTQWS6enWcwgc54d5Q f4CTTX2r3K1lm+FDMKYiN4TuXQw328anSxDwxKQT9yPtnXB+EEifWSXGeijQWxCW cLC3JOnxc1nAjQr6UY+rWWkRkJs3I6RxAKyEVERDHiK2/nvTJpniSy6vcZHiqVsB ehawaSnSGFVjEtRab4yOR8IkxX5rqXlQIGjWDxvrp56MmiM3JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjHQ4+JFM7EJdNyuu+3UaL9pN6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWMzNDRjMGEtZmI3Ny0z OWM4LTg2NjUtM2ZkYmMzNTZlNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzp7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES4aGt3R1RftC8bj8soKXLhJHqI4+kbQS5LbAjjZegySJuVdc6sa1Js iIlESgmJ+zeGnPwMzDMmNM+7rG9v8IAxB9MIjOhlfb9wVkGomkVhFMFxtP8uDMqP WGyxFG2i8tKLv4vpn5ihFQUjkG4FxbaK5udcgR46VbSCZaorKJEgik96VakS3rk1 dGjIWIHb6mGld+dQDMcpzHoJYdE2R8EK7q+P5PV+VZDqPCNCCW9kX58UTvRr9CPi rodF8F0LdCxHY51OFxKeXOnsfEULbUe/j4gaCOXw5UWIaBc+R+4ct7Qqpg/hNp78 nsuaARRDrT5KksUr6NLf//sdTGIVVok= -----END CERTIFICATE-----Generated at Sat Sep 5 03:27:17 2026 by rpki-client