$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa File: d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa (raw, json) Hash identifier: rcGqRF7qAeIrTd9VUgd7b0kpNAmqtEGgWZUoMMKx2qE= Subject key identifier: 85:EA:A1:11:01:FE:58:F8:F4:D5:B2:62:C8:B6:CB:C4:8E:8B:CC:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA791C4A847796F3244390320 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.200.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:c4:a8:47:79:6f:32:44:39:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=44b2ef2a-8b41-455b-8dfa-9912865f1bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:84:4a:ca:72:34:37:c7:16:77:c1:f3:22:c4: bf:85:78:85:75:7c:4c:36:7b:02:78:fc:71:00:0b: 9b:fc:fc:13:07:75:13:cd:3e:35:64:cc:fc:7b:c3: 8c:8d:fe:69:c5:56:5b:a3:41:63:17:24:0c:a5:28: 98:d7:85:e8:9a:8c:e9:dc:19:7a:09:63:b7:08:23: db:51:b2:36:5e:5e:d4:58:e9:f4:4c:22:4b:d6:ee: 01:6c:37:59:70:f1:8c:db:36:8d:74:99:bc:f3:7a: 06:00:59:f1:76:eb:ea:5a:7c:fb:b0:8c:d8:5a:7f: c6:ed:f8:cd:31:9f:ee:14:89:f0:d5:e4:6a:18:85: b0:4d:f7:2e:39:2e:4b:8c:72:07:b1:b8:03:fc:05: 45:59:58:59:d6:ca:6b:7e:ef:30:95:28:32:3d:48: 6d:bc:54:64:d9:16:5e:33:6d:44:30:03:20:10:8a: b9:7b:fd:99:41:f5:48:82:04:dc:82:0d:88:fa:71: a6:f9:7f:23:cf:3b:2b:0c:74:e8:e7:6b:6b:f9:d8: 6c:6e:b3:9b:8c:79:fb:10:da:4b:33:b0:e3:77:9e: cc:d7:57:8a:b7:54:6e:f2:05:c6:c4:4d:65:a6:80: 15:71:e0:43:ce:c2:6e:f7:38:69:be:36:29:66:d1: c4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EA:A1:11:01:FE:58:F8:F4:D5:B2:62:C8:B6:CB:C4:8E:8B:CC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5dcd28e-35c3-3af6-b9aa-e46692ac3715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d4:f7:1c:28:06:d5:64:d3:ea:a4:2f:5b:3c:1b:45:73:19: 40:cb:8c:a1:dd:05:36:20:76:67:af:60:77:af:08:b6:d7:24: 46:5b:2a:7d:c3:b7:84:c8:72:e1:70:cd:b0:e4:fd:f7:45:56: 72:ce:2a:f8:cf:e3:f3:55:ab:e1:be:bf:ec:b1:13:2a:78:b4: 38:12:28:79:6d:fd:44:88:2c:02:60:c5:a3:f1:46:a3:0f:28: b2:bd:7d:ea:65:44:88:19:68:4c:4e:8c:c5:19:bd:ef:e3:57: aa:b5:5f:c3:e9:5b:71:a2:b8:b2:cb:c6:6f:8e:0f:3d:08:50: a6:d2:a9:16:00:89:35:6c:eb:7d:5a:18:1b:a1:16:65:31:8c: e4:d7:ac:7d:a9:81:ff:8c:0b:55:bc:93:c6:83:cd:84:f4:19: 57:17:2f:7b:c6:01:36:39:56:92:da:22:c3:45:be:24:2f:b8: 79:88:2a:25:a1:10:b8:25:32:c9:76:30:2f:27:c7:0c:2b:5c: eb:17:98:dd:4a:28:9f:b2:a7:fc:3a:2b:0f:0c:ad:c3:ad:dc: 6d:19:de:11:d5:d1:c7:10:e9:7b:3f:d5:ae:33:b3:64:30:d8: 09:6f:bc:8d:02:31:c5:84:f5:91:28:2f:73:bb:d0:20:ac:a0: d8:35:35:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkcSoR3lvMkQ5AyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDRiMmVmMmEtOGI0MS00NTViLThkZmEtOTkxMjg2NWYxYmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4RKynI0N8cWd8HzIsS/hXiFdXxMNnsCePxx AAub/PwTB3UTzT41ZMz8e8OMjf5pxVZbo0FjFyQMpSiY14Xomozp3Bl6CWO3CCPb UbI2Xl7UWOn0TCJL1u4BbDdZcPGM2zaNdJm883oGAFnxduvqWnz7sIzYWn/G7fjN MZ/uFInw1eRqGIWwTfcuOS5LjHIHsbgD/AVFWVhZ1sprfu8wlSgyPUhtvFRk2RZe M21EMAMgEIq5e/2ZQfVIggTcgg2I+nGm+X8jzzsrDHTo52tr+dhsbrObjHn7ENpL M7Djd57M11eKt1Ru8gXGxE1lpoAVceBDzsJu9zhpvjYpZtHEowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXqoREB/lj49NWyYsi2y8SOi8xVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVkY2QyOGUtMzVjMy0z YWY2LWI5YWEtZTQ2NjkyYWMzNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTU9xwoBtVk0+qkL1s8G0VzGUDLjKHdBTYgdmevYHevCLbXJEZbKn3D t4TIcuFwzbDk/fdFVnLOKvjP4/NVq+G+v+yxEyp4tDgSKHlt/USILAJgxaPxRqMP KLK9feplRIgZaExOjMUZve/jV6q1X8PpW3GiuLLLxm+ODz0IUKbSqRYAiTVs631a GBuhFmUxjOTXrH2pgf+MC1W8k8aDzYT0GVcXL3vGATY5VpLaIsNFviQvuHmIKiWh ELglMsl2MC8nxwwrXOsXmN1KKJ+yp/w6Kw8MrcOt3G0Z3hHV0ccQ6Xs/1a4zs2Qw 2AlvvI0CMcWE9ZEoL3O70CCsoNg1NZU= -----END CERTIFICATE-----Generated at Sat Sep 5 02:46:48 2026 by rpki-client