$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0a24279-1b7c-306f-b8cf-760136f324fe.roa File: a0a24279-1b7c-306f-b8cf-760136f324fe.roa (raw, json) Hash identifier: H6mL1YWMCYoJe12E/mlATerPDLhypDNjf4c4z5gVOhg= Subject key identifier: E2:B7:D5:5E:6C:48:E0:9F:4A:08:87:8D:36:25:20:CC:5F:B9:98:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093CF65EC8577B2B0C131540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0a24279-1b7c-306f-b8cf-760136f324fe.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.2.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f6:5e:c8:57:7b:2b:0c:13:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=3416094a-8c09-4cf5-81f6-debf12c171b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:bc:38:7c:de:3e:fd:5a:e1:07:cd:49:7b: 77:7e:81:2f:74:36:60:be:22:c2:6a:9c:5d:d4:56: 09:78:ad:d2:ee:40:c8:97:c1:a4:f4:97:8c:ee:25: c4:11:9c:28:af:44:2a:ca:0a:e3:9a:d1:77:6f:53: 8a:2f:56:7b:1e:78:b8:29:4e:a6:0d:33:04:fe:cd: 23:4f:47:60:04:34:6c:4d:0b:9e:97:95:5c:2f:32: 94:b2:c6:84:22:39:cb:2b:10:ac:d2:ad:3a:be:c6: 4b:ee:d1:ef:75:bb:7b:bf:15:23:60:d6:71:e0:25: 0c:cf:67:a5:0d:57:cc:de:ae:85:ef:0e:c0:0f:e6: 96:45:bc:ed:09:6b:9b:b2:0d:8d:d8:b5:77:c3:46: 69:e8:f4:b6:c5:e5:56:d2:31:c7:a4:34:2e:7a:96: 17:35:8d:7e:4b:cd:f8:6d:ed:0f:b3:1b:40:42:1b: b5:0d:99:63:8c:dd:3e:41:2a:ab:fe:f8:b1:99:85: 18:00:4d:54:aa:dd:f3:fc:48:b9:20:d2:67:67:96: a4:30:fa:80:c4:9a:e8:86:4e:45:a6:14:1f:35:bf: 17:62:1d:27:7d:bc:a5:b4:de:ab:2f:00:80:10:49: a8:ec:d2:a4:37:f1:e8:84:77:6f:0d:10:ce:8a:0f: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B7:D5:5E:6C:48:E0:9F:4A:08:87:8D:36:25:20:CC:5F:B9:98:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0a24279-1b7c-306f-b8cf-760136f324fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:91:00:de:e5:9e:2a:fa:83:d7:3f:8c:7e:af:94:43:f2:b3: cb:66:cd:c8:89:8b:1a:b6:59:88:20:50:53:d1:9d:e7:f7:c4: 14:2d:2d:cd:8a:82:8a:56:9f:ac:dc:8e:a6:9d:70:dd:6e:4f: 1a:90:dd:cc:ff:90:d2:7f:36:b5:d6:e2:80:e2:77:e5:a1:4d: bd:c2:b3:65:8d:56:69:ba:f7:8a:e7:7e:7f:15:89:13:22:40: 55:50:47:18:27:44:31:5d:0f:18:f2:23:0c:d9:21:15:01:10: 13:fc:c7:4b:e6:ad:8f:f4:12:6c:1d:41:9c:b3:9d:61:94:8d: af:6b:24:e7:af:f7:1d:4a:ef:1f:49:19:57:ea:0e:e7:d0:83: 83:49:09:62:f8:62:bf:dd:9e:d4:06:50:63:a4:f0:93:3f:20: ae:f6:3f:b1:3f:ab:ff:37:93:07:70:f6:16:4f:89:c6:44:bd: 18:04:a4:e0:1b:83:f2:6c:ef:ec:ae:2d:e9:ee:80:b7:70:ae: 44:f9:57:ee:c1:6e:a8:0c:68:ef:91:1a:3e:af:f4:4d:62:e3: ce:09:5f:16:ac:f4:ad:42:9d:3a:b0:3f:56:01:e5:ab:5d:9f: 93:9a:da:25:19:65:97:60:c6:b6:2c:67:f8:ae:7c:fb:fd:09: b2:f8:94:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPZeyFd7KwwTFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MzQxNjA5NGEtOGMwOS00Y2Y1LTgxZjYtZGViZjEyYzE3MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSC8OHzePv1a4QfNSXt3foEvdDZgviLCapxd 1FYJeK3S7kDIl8Gk9JeM7iXEEZwor0QqygrjmtF3b1OKL1Z7Hni4KU6mDTME/s0j T0dgBDRsTQuel5VcLzKUssaEIjnLKxCs0q06vsZL7tHvdbt7vxUjYNZx4CUMz2el DVfM3q6F7w7AD+aWRbztCWubsg2N2LV3w0Zp6PS2xeVW0jHHpDQuepYXNY1+S834 be0PsxtAQhu1DZljjN0+QSqr/vixmYUYAE1Uqt3z/Ei5INJnZ5akMPqAxJrohk5F phQfNb8XYh0nfbyltN6rLwCAEEmo7NKkN/HohHdvDRDOig9AQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK31V5sSOCfSgiHjTYlIMxfuZisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBhMjQyNzktMWI3Yy0z MDZmLWI4Y2YtNzYwMTM2ZjMyNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwISMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECRAN7lnir6g9c/jH6vlEPys8tmzciJixq2WYggUFPRnef3xBQtLc2K gopWn6zcjqadcN1uTxqQ3cz/kNJ/NrXW4oDid+WhTb3Cs2WNVmm694rnfn8ViRMi QFVQRxgnRDFdDxjyIwzZIRUBEBP8x0vmrY/0EmwdQZyznWGUja9rJOev9x1K7x9J GVfqDufQg4NJCWL4Yr/dntQGUGOk8JM/IK72P7E/q/83kwdw9hZPicZEvRgEpOAb g/Js7+yuLenugLdwrkT5V+7BbqgMaO+RGj6v9E1i484JXxas9K1CnTqwP1YB5atd n5Oa2iUZZZdgxrYsZ/iufPv9CbL4lDk= -----END CERTIFICATE-----Generated at Sat Sep 5 06:12:49 2026 by rpki-client