$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa File: d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa (raw, json) Hash identifier: AnUUMyXRpVaViz1E50xbZTDbXzbjgyz55tg3z1p0oC8= Subject key identifier: B0:46:2F:92:E3:48:DE:DB:80:87:8D:B7:D7:B8:85:BF:11:3B:9E:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF87CD81AC945067FBB621680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.67.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:d8:1a:c9:45:06:7f:bb:62:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=f9e6d8ad-8c09-4d90-b9c3-df238ced5f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:cd:ec:48:4a:1d:7e:81:84:6e:80:12:55: 32:3d:4c:b9:14:71:60:f2:c3:39:f8:9c:a0:e3:a0: a1:9d:f0:52:78:62:ae:f7:55:5f:90:5a:fb:ee:0a: 3b:4b:7f:58:91:6f:49:e2:77:31:2c:c1:d8:e2:b8: c3:63:39:08:62:fa:4b:d7:1b:f1:68:b8:08:f6:38: ff:b7:94:60:c9:60:27:09:ef:ac:07:41:b3:f1:26: 4a:e4:7b:82:ce:26:79:38:76:24:e1:e7:56:1a:40: 63:5d:50:a8:43:67:76:f8:cd:7e:71:c2:8d:e8:77: 67:24:ed:a4:4a:4d:08:22:ca:38:27:12:0d:3a:6f: e4:e0:7d:f2:10:9b:11:30:4e:b7:b8:c8:2c:8e:45: d1:a0:39:4d:c0:7a:6c:49:f0:06:92:2b:85:28:d7: f8:e3:1c:29:3e:54:87:fb:a2:60:c8:58:ff:9b:0c: 05:43:12:bd:7d:36:90:50:07:c2:9c:aa:6f:7c:e0: 06:62:61:38:6c:4e:f9:42:5f:1a:f7:d6:c0:9a:bd: 1b:97:24:ce:bc:84:d2:88:44:39:d5:bf:38:e2:21: b9:bc:5e:a6:13:e2:57:74:cb:98:f0:07:d4:91:e7: 96:94:4c:48:f9:9c:99:b0:15:e5:7f:29:cd:d5:48: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:46:2F:92:E3:48:DE:DB:80:87:8D:B7:D7:B8:85:BF:11:3B:9E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5c2c971-894e-38ce-b882-4e65e2ed0a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b6:43:62:f6:e1:fe:b8:28:5e:46:b5:df:da:67:f1:a9:55: cc:fc:cf:a4:2a:10:27:33:79:0f:ca:fb:57:db:43:e4:56:a4: e3:0a:75:0a:c9:11:83:b2:49:b4:4a:9b:a5:c8:86:c4:e2:df: 5b:c6:bf:95:4d:fa:d2:e0:05:63:9a:40:78:10:c2:fc:d6:27: 16:f8:6b:58:c2:94:90:ee:94:94:37:3e:bf:83:cf:49:88:be: 50:33:c9:3a:72:13:63:6f:61:5e:ab:b0:75:b7:48:cf:87:67: ee:f6:22:59:07:63:79:e4:1b:84:ae:29:e5:77:8b:1e:cd:9b: d7:6d:a3:84:0b:d4:88:d9:2b:a2:d2:ad:3e:fd:25:c4:89:e2: 19:2a:95:2b:30:05:1a:6a:2d:1a:38:34:d2:05:9e:1a:86:27: 85:73:2a:44:f4:77:a0:b4:dd:b2:e5:74:50:5d:b5:22:b0:40: 9b:21:e7:7a:48:8f:f8:de:2a:26:64:29:77:1b:31:20:d3:74: b7:f2:4c:da:3e:c6:bd:30:27:bb:c2:e4:ac:f0:01:be:eb:6c: df:8f:61:81:0d:e9:47:f5:35:33:3b:9d:11:d9:b7:b3:08:69: 14:f2:5c:b3:db:cd:b9:53:46:07:a7:ce:9d:63:a6:75:09:a6: be:82:b4:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fNgayUUGf7tiFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZjllNmQ4YWQtOGMwOS00ZDkwLWI5YzMtZGYyMzhjZWQ1ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB/N7EhKHX6BhG6AElUyPUy5FHFg8sM5+Jyg 46ChnfBSeGKu91VfkFr77go7S39YkW9J4ncxLMHY4rjDYzkIYvpL1xvxaLgI9jj/ t5RgyWAnCe+sB0Gz8SZK5HuCziZ5OHYk4edWGkBjXVCoQ2d2+M1+ccKN6HdnJO2k Sk0IIso4JxINOm/k4H3yEJsRME63uMgsjkXRoDlNwHpsSfAGkiuFKNf44xwpPlSH +6JgyFj/mwwFQxK9fTaQUAfCnKpvfOAGYmE4bE75Ql8a99bAmr0blyTOvITSiEQ5 1b844iG5vF6mE+JXdMuY8AfUkeeWlExI+ZyZsBXlfynN1Uim/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBGL5LjSN7bgIeNt9e4hb8RO55nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVjMmM5NzEtODk0ZS0z OGNlLWI4ODItNGU2NWUyZWQwYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe2Q2L24f64KF5Gtd/aZ/GpVcz8z6QqECczeQ/K+1fbQ+RWpOMKdQrJ EYOySbRKm6XIhsTi31vGv5VN+tLgBWOaQHgQwvzWJxb4a1jClJDulJQ3Pr+Dz0mI vlAzyTpyE2NvYV6rsHW3SM+HZ+72IlkHY3nkG4SuKeV3ix7Nm9dto4QL1IjZK6LS rT79JcSJ4hkqlSswBRpqLRo4NNIFnhqGJ4VzKkT0d6C03bLldFBdtSKwQJsh53pI j/jeKiZkKXcbMSDTdLfyTNo+xr0wJ7vC5KzwAb7rbN+PYYEN6Uf1NTM7nRHZt7MI aRTyXLPbzblTRgenzp1jpnUJpr6CtJs= -----END CERTIFICATE-----Generated at Fri Sep 4 23:27:59 2026 by rpki-client