$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d4ba307-a361-31bd-8ad3-bb59387ca990.roa File: 9d4ba307-a361-31bd-8ad3-bb59387ca990.roa (raw, json) Hash identifier: rsa/xjX8I09PXLQxR0Xf81BrnFKgo07MGoVl6QxuYk4= Subject key identifier: 4A:21:68:66:C7:75:93:05:EF:1C:8A:EC:B2:92:0F:13:68:27:72:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EED5206473812FA53EBD24E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d4ba307-a361-31bd-8ad3-bb59387ca990.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 24319 IP address blocks: 23.53.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:06:47:38:12:fa:53:eb:d2:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=8cb00a43-6e2b-4451-b898-11cd6e210386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:68:b4:20:01:31:d7:1e:9c:5f:f2:fe:77: cd:7c:87:a0:29:dc:d3:8f:40:f6:a6:7b:bd:32:13: 0b:63:48:93:37:9c:6e:9a:e7:0a:3f:f2:fd:03:6d: d6:f9:39:c6:89:21:1d:70:53:94:07:ec:95:07:cc: b6:6f:8c:79:0b:6e:66:91:bc:d6:cc:e2:76:d2:eb: 50:9d:65:ef:35:ea:d9:3d:0c:5a:6b:7c:ac:d0:68: de:bb:a7:23:6b:02:b2:b9:23:09:a9:89:b6:6e:1e: 41:6a:a3:5b:3e:6a:16:38:66:51:13:f9:ac:94:22: 26:6c:22:9c:b6:f3:3d:66:01:bd:68:d7:aa:af:92: 0a:80:c3:aa:95:a1:e7:64:8a:29:79:10:cc:40:f0: d2:ea:4f:00:36:1b:cc:80:e3:e0:29:da:fa:32:02: 90:19:57:b1:d9:2b:d3:4f:fa:0d:cc:82:fd:f3:9b: 82:39:fd:07:14:39:d2:a7:76:0b:97:40:eb:23:1a: ed:90:92:dd:3c:5c:41:4d:62:82:80:e8:03:b7:b2: 6f:ad:8e:90:24:84:f7:35:4d:ee:2d:b7:b9:47:e3: 82:42:5f:39:9e:f7:b3:7e:53:78:bb:1f:e1:1b:d6: 34:36:34:3f:aa:79:ba:f6:85:8d:ec:8f:46:0d:45: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:68:66:C7:75:93:05:EF:1C:8A:EC:B2:92:0F:13:68:27:72:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d4ba307-a361-31bd-8ad3-bb59387ca990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:a0:a7:9b:9f:85:c5:be:db:61:52:4d:78:12:fb:e2:fe:18: 46:10:1f:4c:90:ca:b0:1c:d2:d6:09:1b:9f:97:c9:1a:db:59: 94:9d:42:57:63:7c:82:b9:60:61:ac:86:85:61:84:fb:89:f0: 6d:8d:fc:0c:ec:99:7a:a0:c8:bd:8b:b2:f9:a2:45:58:e8:92: c5:59:9b:d8:c3:5b:ee:38:2e:a9:69:c0:28:38:1e:67:22:ab: cf:64:16:a4:48:6b:a2:1c:5a:c9:8d:6a:d5:96:33:c7:ad:fb: 21:f4:f5:7c:4b:c9:cc:2f:28:63:8a:5a:21:89:d3:0f:5f:bc: d1:84:2c:ea:6f:62:29:a7:92:a7:9f:7f:85:72:67:68:5f:da: f9:4c:a2:99:85:76:eb:1f:0e:3d:c8:53:98:dd:a6:a1:3f:fa: 4f:66:60:b2:fb:66:87:2b:27:32:e3:70:e5:ae:7c:74:c3:9a: c5:4d:a2:96:06:56:38:36:f4:6c:2c:16:d8:69:70:35:2c:6a: 0d:8a:c7:71:80:01:76:02:0e:f4:29:d0:2c:c7:40:34:9c:aa: 46:71:82:9e:af:30:6b:af:72:d9:4c:58:e6:16:b4:2c:2a:b7: 35:d8:77:2f:b2:96:f9:4f:43:75:34:b1:9b:27:20:96:ad:3e: 69:6c:91:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgZHOBL6U+vSToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk OGNiMDBhNDMtNmUyYi00NDUxLWI4OTgtMTFjZDZlMjEwMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH5otCABMdcenF/y/nfNfIegKdzTj0D2pnu9 MhMLY0iTN5xumucKP/L9A23W+TnGiSEdcFOUB+yVB8y2b4x5C25mkbzWzOJ20utQ nWXvNerZPQxaa3ys0Gjeu6cjawKyuSMJqYm2bh5BaqNbPmoWOGZRE/mslCImbCKc tvM9ZgG9aNeqr5IKgMOqlaHnZIopeRDMQPDS6k8ANhvMgOPgKdr6MgKQGVex2SvT T/oNzIL985uCOf0HFDnSp3YLl0DrIxrtkJLdPFxBTWKCgOgDt7JvrY6QJIT3NU3u Lbe5R+OCQl85nvezflN4ux/hG9Y0NjQ/qnm69oWN7I9GDUVjfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEohaGbHdZMF7xyK7LKSDxNoJ3KRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWQ0YmEzMDctYTM2MS0z MWJkLThhZDMtYmI1OTM4N2NhOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzUJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABugp5ufhcW+22FSTXgS++L+GEYQH0yQyrAc0tYJG5+XyRrbWZSdQldj fIK5YGGshoVhhPuJ8G2N/AzsmXqgyL2LsvmiRVjoksVZm9jDW+44LqlpwCg4Hmci q89kFqRIa6IcWsmNatWWM8et+yH09XxLycwvKGOKWiGJ0w9fvNGELOpvYimnkqef f4VyZ2hf2vlMopmFdusfDj3IU5jdpqE/+k9mYLL7ZocrJzLjcOWufHTDmsVNopYG Vjg29GwsFthpcDUsag2Kx3GAAXYCDvQp0CzHQDScqkZxgp6vMGuvctlMWOYWtCwq tzXYdy+ylvlPQ3U0sZsnIJatPmlskVw= -----END CERTIFICATE-----Generated at Sat Sep 5 03:29:46 2026 by rpki-client