$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9c1e8f7-d535-31e8-ae5e-4cae1328a3a2.roa File: d9c1e8f7-d535-31e8-ae5e-4cae1328a3a2.roa (raw, json) Hash identifier: JGzqh4zGOCaXtoOXszVyhS+308DqIJJLwIXCsF85Stk= Subject key identifier: 1F:54:30:11:22:02:11:E3:E3:2F:80:81:A8:95:DD:8A:EB:3E:C8:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA791C670C021D88425EC4980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9c1e8f7-d535-31e8-ae5e-4cae1328a3a2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.200.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:c6:70:c0:21:d8:84:25:ec:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=23dcb181-b415-4b99-b76a-df44f195ab73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:a2:be:96:7e:12:b8:90:c2:60:c4:f1:b6: 17:54:74:2c:67:da:10:26:c2:42:36:09:f3:83:84: 5d:8f:dc:50:26:5d:e1:14:02:07:d8:d1:7c:4c:00: f5:8a:64:00:05:3a:b2:1d:48:01:d1:94:83:37:bb: d6:e3:fa:62:6c:1f:67:72:23:02:64:fb:0e:39:e1: 91:6c:53:4d:9f:9b:1f:b3:b0:da:4b:43:1c:11:40: c3:75:30:76:47:5d:d1:83:e3:fa:fd:49:04:33:03: f8:27:6c:ee:07:da:b7:25:cd:6e:ec:a8:56:d4:7a: 0a:51:56:fe:8b:0b:85:63:30:ee:a4:1b:cf:63:90: 70:d5:df:54:79:6f:f6:b4:12:58:fe:91:c7:2d:a7: b4:65:e4:d7:89:fc:f0:30:f9:a7:8a:11:29:52:ea: 27:17:fe:2c:a9:5c:11:e8:ee:ab:fb:d5:40:6b:fe: 89:9c:42:52:8d:bf:0b:f9:e7:b1:2d:c0:58:58:2a: 05:b0:22:7e:6a:0e:e0:7f:aa:73:11:bb:99:f7:22: 07:12:79:b2:88:88:ae:9f:9f:9d:9f:cf:ad:a6:78: e3:7e:d9:5a:54:66:d8:e9:d9:56:2f:1e:a0:5b:4c: da:f4:d9:6e:a3:d7:2d:48:8a:89:93:2c:58:1b:29: 95:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:54:30:11:22:02:11:E3:E3:2F:80:81:A8:95:DD:8A:EB:3E:C8:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9c1e8f7-d535-31e8-ae5e-4cae1328a3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.200.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:98:21:a5:9c:04:b3:76:47:d8:97:99:81:e9:50:d1:5d:48: 51:a0:3a:c7:70:8f:23:ba:df:e8:88:5f:92:cd:8a:34:36:b1: 4e:a6:1e:57:f1:37:13:35:7c:4b:f8:15:75:e0:8e:41:70:8c: 7f:d1:4a:81:b0:70:bc:e8:1b:72:2f:8f:7c:0d:76:95:e6:2b: 34:be:00:63:bf:3f:9e:4e:0e:96:15:ed:43:98:6b:80:de:90: 35:72:ce:e1:9f:a5:c8:7f:4b:68:51:47:a7:53:81:2a:b8:8d: cf:72:80:9c:43:6f:5b:54:fb:54:e8:85:55:b7:58:43:5e:87: e7:bd:0e:32:8b:39:b5:36:1b:fe:25:ba:55:d5:fa:3e:0a:80: a5:54:cd:95:05:64:d9:e7:41:6b:e0:dc:9e:a8:0e:38:21:42: 54:83:c3:b1:d7:58:83:46:42:9b:77:7a:7e:d5:3a:78:e7:52: b6:0d:5f:67:44:13:08:1f:19:7b:05:72:1e:62:aa:38:0e:e8: cb:0a:b2:cb:d0:4e:a7:c5:5f:50:7f:dc:44:3d:fa:48:01:c4: fe:e2:25:22:ea:b7:3a:98:74:bc:8f:fa:e7:3c:f4:48:b6:75: b6:11:45:ee:7f:21:55:ef:71:44:19:a3:28:18:aa:45:d1:a0: 2b:27:90:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkcZwwCHYhCXsSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjNkY2IxODEtYjQxNS00Yjk5LWI3NmEtZGY0NGYxOTVhYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty+ivpZ+EriQwmDE8bYXVHQsZ9oQJsJCNgnz g4Rdj9xQJl3hFAIH2NF8TAD1imQABTqyHUgB0ZSDN7vW4/pibB9nciMCZPsOOeGR bFNNn5sfs7DaS0McEUDDdTB2R13Rg+P6/UkEMwP4J2zuB9q3Jc1u7KhW1HoKUVb+ iwuFYzDupBvPY5Bw1d9UeW/2tBJY/pHHLae0ZeTXifzwMPmnihEpUuonF/4sqVwR 6O6r+9VAa/6JnEJSjb8L+eexLcBYWCoFsCJ+ag7gf6pzEbuZ9yIHEnmyiIiun5+d n8+tpnjjftlaVGbY6dlWLx6gW0za9Nluo9ctSIqJkyxYGymVZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9UMBEiAhHj4y+AgaiV3YrrPsiyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDljMWU4ZjctZDUzNS0z MWU4LWFlNWUtNGNhZTEzMjhhM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCYIaWcBLN2R9iXmYHpUNFdSFGgOsdwjyO63+iIX5LNijQ2sU6mHlfx NxM1fEv4FXXgjkFwjH/RSoGwcLzoG3Ivj3wNdpXmKzS+AGO/P55ODpYV7UOYa4De kDVyzuGfpch/S2hRR6dTgSq4jc9ygJxDb1tU+1TohVW3WENeh+e9DjKLObU2G/4l ulXV+j4KgKVUzZUFZNnnQWvg3J6oDjghQlSDw7HXWINGQpt3en7VOnjnUrYNX2dE EwgfGXsFch5iqjgO6MsKssvQTqfFX1B/3EQ9+kgBxP7iJSLqtzqYdLyP+uc89Ei2 dbYRRe5/IVXvcUQZoygYqkXRoCsnkI0= -----END CERTIFICATE-----Generated at Sat Sep 5 07:16:16 2026 by rpki-client