$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca31aaff-e399-3195-8a19-e16e897013f3.roa File: ca31aaff-e399-3195-8a19-e16e897013f3.roa (raw, json) Hash identifier: YSfWDxe5Lc28gOUp0p6jjrKXeUw1vKs5PsjAtr5CsZA= Subject key identifier: F7:26:43:16:57:70:F2:E0:D7:E8:75:BD:6C:85:EF:EF:BA:53:C8:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F58CD5C2250B588A0EED4BE40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca31aaff-e399-3195-8a19-e16e897013f3.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 6762 IP address blocks: 23.197.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:5c:22:50:b5:88:a0:ee:d4:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=e3433578-27d3-41ba-b1b7-dc8d367eb1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:05:b2:c4:cc:05:80:b8:7e:41:79:ff:7a: ac:c2:cd:26:8e:3e:2c:55:1e:5f:20:08:03:2f:76: 47:85:2a:49:f5:1c:7d:a5:04:e7:5d:4a:5f:4c:3c: a0:d3:93:74:54:be:e1:38:2a:24:a0:7b:90:06:d8: 09:e7:b8:52:62:fa:7d:ac:91:aa:42:14:44:a8:2f: 77:ca:58:13:67:cb:3c:40:9e:a5:a3:5c:be:b1:7b: a6:fb:a4:68:39:2e:8e:91:1c:04:a0:03:88:72:e7: a2:c8:66:8f:94:77:96:0f:32:d2:98:e1:ff:50:27: 3c:91:2f:e5:27:fa:44:1a:6c:19:88:82:18:cf:ff: 14:d7:59:e2:6c:f2:bb:ce:d5:5f:bc:f4:5b:ae:6b: 5f:7c:7e:2f:10:6d:90:19:0e:50:0b:f3:69:14:c5: ca:88:b7:44:6d:92:7d:e1:6b:71:30:7c:cb:f8:fd: ff:87:f2:02:45:22:05:1d:c0:70:eb:63:08:11:27: ed:a0:20:42:fc:5a:01:f5:22:75:31:83:b5:a4:bd: 87:e4:60:00:48:bc:0f:f6:f3:2e:05:79:9f:d9:2d: 3d:e0:58:7c:eb:68:23:a2:8d:bd:8b:c1:5e:1b:14: 70:20:a4:7b:8c:c2:5c:f1:16:a4:61:8b:7d:e9:d9: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:26:43:16:57:70:F2:E0:D7:E8:75:BD:6C:85:EF:EF:BA:53:C8:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca31aaff-e399-3195-8a19-e16e897013f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.197.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:26:6e:d4:08:41:58:4e:d1:9e:a4:71:9e:35:39:9a:2c:2a: 14:07:e3:d7:f0:af:3c:73:8d:f8:c7:f5:57:3c:0f:db:73:a8: 27:4b:41:df:48:aa:74:e9:90:a6:b5:b0:2e:74:50:1b:6d:95: 84:50:d0:1a:3e:73:16:34:4b:2c:e2:04:dc:76:a1:24:ba:78: a6:de:11:35:92:7d:37:94:65:11:4e:aa:f6:9f:81:18:98:fb: 5c:af:d1:31:1d:b3:b6:90:2e:7c:19:43:c5:04:2c:16:59:be: be:02:50:56:1e:dd:81:54:2c:20:43:2d:1e:23:78:68:d3:27: 90:f5:c0:52:5e:05:ee:6d:17:58:6a:70:38:22:dc:10:1b:65: f2:60:18:ab:c2:c7:a7:82:12:f6:14:f2:e1:fb:84:35:ad:9b: d8:66:73:b5:47:e7:ab:93:b9:d8:11:35:c4:a3:fb:12:3e:6f: a8:db:32:11:83:65:39:a0:0e:7a:ad:08:c8:4e:b1:1d:1b:96: 05:90:6d:9b:7e:c4:4a:55:e4:c3:15:65:28:32:6e:b4:7c:d1: b7:18:d1:d2:78:04:70:59:2a:85:a1:08:0f:a1:84:96:6e:d6: ba:05:51:a4:9f:8d:72:97:82:60:23:56:cc:bc:e4:1a:16:7e: 84:88:71:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVwiULWIoO7UvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ZTM0MzM1NzgtMjdkMy00MWJhLWIxYjctZGM4ZDM2N2ViMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBAFssTMBYC4fkF5/3qsws0mjj4sVR5fIAgD L3ZHhSpJ9Rx9pQTnXUpfTDyg05N0VL7hOCokoHuQBtgJ57hSYvp9rJGqQhREqC93 ylgTZ8s8QJ6lo1y+sXum+6RoOS6OkRwEoAOIcueiyGaPlHeWDzLSmOH/UCc8kS/l J/pEGmwZiIIYz/8U11nibPK7ztVfvPRbrmtffH4vEG2QGQ5QC/NpFMXKiLdEbZJ9 4WtxMHzL+P3/h/ICRSIFHcBw62MIESftoCBC/FoB9SJ1MYO1pL2H5GAASLwP9vMu BXmf2S094Fh862gjoo29i8FeGxRwIKR7jMJc8RakYYt96dmP0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcmQxZXcPLg1+h1vWyF7++6U8gZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2EzMWFhZmYtZTM5OS0z MTk1LThhMTktZTE2ZTg5NzAxM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4mbtQIQVhO0Z6kcZ41OZosKhQH49fwrzxzjfjH9Vc8D9tzqCdLQd9I qnTpkKa1sC50UBttlYRQ0Bo+cxY0SyziBNx2oSS6eKbeETWSfTeUZRFOqvafgRiY +1yv0TEds7aQLnwZQ8UELBZZvr4CUFYe3YFULCBDLR4jeGjTJ5D1wFJeBe5tF1hq cDgi3BAbZfJgGKvCx6eCEvYU8uH7hDWtm9hmc7VH56uTudgRNcSj+xI+b6jbMhGD ZTmgDnqtCMhOsR0blgWQbZt+xEpV5MMVZSgybrR80bcY0dJ4BHBZKoWhCA+hhJZu 1roFUaSfjXKXgmAjVsy85BoWfoSIccE= -----END CERTIFICATE-----Generated at Mon Oct 26 11:44:50 2026 by rpki-client