$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc2d9d9c-883e-39db-8223-54dcf79224f3.roa File: dc2d9d9c-883e-39db-8223-54dcf79224f3.roa (raw, json) Hash identifier: NbTfPMqKvE0V+J9KMTAmlpRiz+bK8YqRpOOc6zKfUKs= Subject key identifier: 0B:F2:34:8D:C0:B3:33:A5:7A:7C:17:33:8C:76:3D:CB:CE:D8:31:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA791F05A0AB35AFD5BF34680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc2d9d9c-883e-39db-8223-54dcf79224f3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20940 IP address blocks: 23.201.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:f0:5a:0a:b3:5a:fd:5b:f3:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=74ea68bd-c838-4e59-b319-5d0ad88c6562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9d:1d:10:cc:6c:09:f1:e6:15:af:07:35:72: 3e:5b:76:78:57:cb:ed:ca:0d:48:3d:93:27:8b:e4: cb:3a:2b:4f:1e:76:3f:0b:b0:c3:2d:e9:86:dc:61: 03:f8:14:d2:0d:57:8a:96:2e:90:a6:6e:73:98:b6: 46:b7:24:d4:94:23:e9:55:d3:87:0c:3c:fb:0c:ba: e1:ce:26:eb:e9:d1:39:8d:48:be:77:e9:b7:66:0a: 34:d5:aa:37:03:d7:0c:46:a2:00:45:73:70:cd:60: ca:a8:6b:1a:6f:eb:8a:b4:4b:48:44:26:d5:e6:07: d6:91:67:59:cf:fc:a1:63:28:36:6f:73:2c:18:8f: 56:c6:14:52:b3:ea:c1:7d:ef:4b:c1:d0:b8:f9:ad: e6:8c:83:a7:99:78:19:8d:b8:f4:f4:7f:29:23:e6: 4c:fa:04:7a:99:01:72:53:86:af:21:6f:21:b8:63: 44:90:26:8d:46:07:33:d4:34:e3:52:0e:73:4a:4a: c8:11:cd:9c:7b:e4:ea:f1:f6:fc:a5:cf:35:ec:7b: e1:d7:cf:07:8a:37:58:45:a6:39:43:8c:f0:4c:84: 23:4f:3e:9c:e3:15:0f:12:ec:c5:28:f4:55:59:18: a5:43:31:6b:3c:85:89:ce:e9:84:9e:9a:cb:50:24: 61:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F2:34:8D:C0:B3:33:A5:7A:7C:17:33:8C:76:3D:CB:CE:D8:31:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc2d9d9c-883e-39db-8223-54dcf79224f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.201.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7b:0d:e2:f0:7d:b0:4e:9b:56:82:4e:0d:1f:03:ea:94:fc: 40:0f:b2:c3:86:39:08:50:93:5b:6e:56:22:79:a3:b6:67:21: aa:d6:a7:d5:94:1c:09:d2:b5:82:67:a8:0f:5f:2a:b3:c9:ca: e0:2c:59:25:35:53:a1:84:6e:f3:39:30:b3:93:e8:3b:69:66: 03:e2:25:94:a1:1b:e4:bc:f1:49:e8:0a:7a:a3:e8:5e:cb:7e: 61:cd:67:f5:fb:37:9b:7c:45:7c:90:59:ac:15:38:63:22:89: 78:6d:77:7d:3d:9f:58:dd:4f:a9:03:a0:c2:12:ba:98:b3:f5: e7:df:ae:16:6b:67:af:98:9d:8e:7c:25:9b:28:46:2e:07:82: bb:a2:8a:10:01:2f:31:14:76:ba:97:4b:2b:28:26:4d:fb:1b: a3:46:7d:de:d6:b2:e5:08:75:14:49:14:e9:f5:3f:e2:af:32: 8c:17:e3:ce:c3:7e:78:3d:94:4d:87:a2:f4:16:d6:0a:41:90: 97:bf:5f:78:10:2f:f9:21:4a:a2:da:2c:d1:cf:ea:11:fa:54: fe:e5:72:c4:e3:44:39:3c:1b:18:ab:bf:2b:e7:96:e4:95:5f: 12:6e:4f:e9:6e:07:37:56:bf:bb:41:f6:d2:42:24:1a:92:8c: 7c:5e:1e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkfBaCrNa/VvzRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzRlYTY4YmQtYzgzOC00ZTU5LWIzMTktNWQwYWQ4OGM2NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup0dEMxsCfHmFa8HNXI+W3Z4V8vtyg1IPZMn i+TLOitPHnY/C7DDLemG3GED+BTSDVeKli6Qpm5zmLZGtyTUlCPpVdOHDDz7DLrh zibr6dE5jUi+d+m3Zgo01ao3A9cMRqIARXNwzWDKqGsab+uKtEtIRCbV5gfWkWdZ z/yhYyg2b3MsGI9WxhRSs+rBfe9LwdC4+a3mjIOnmXgZjbj09H8pI+ZM+gR6mQFy U4avIW8huGNEkCaNRgcz1DTjUg5zSkrIEc2ce+Tq8fb8pc817Hvh188HijdYRaY5 Q4zwTIQjTz6c4xUPEuzFKPRVWRilQzFrPIWJzumEnprLUCRhFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvyNI3AszOlenwXM4x2PcvO2DEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGMyZDlkOWMtODgzZS0z OWRiLTgyMjMtNTRkY2Y3OTIyNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8k5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ7DeLwfbBOm1aCTg0fA+qU/EAPssOGOQhQk1tuViJ5o7ZnIarWp9WU HAnStYJnqA9fKrPJyuAsWSU1U6GEbvM5MLOT6DtpZgPiJZShG+S88UnoCnqj6F7L fmHNZ/X7N5t8RXyQWawVOGMiiXhtd309n1jdT6kDoMISupiz9effrhZrZ6+YnY58 JZsoRi4HgruiihABLzEUdrqXSysoJk37G6NGfd7WsuUIdRRJFOn1P+KvMowX487D fng9lE2HovQW1gpBkJe/X3gQL/khSqLaLNHP6hH6VP7lcsTjRDk8GxirvyvnluSV XxJuT+luBzdWv7tB9tJCJBqSjHxeHmM= -----END CERTIFICATE-----Generated at Fri Sep 4 22:44:55 2026 by rpki-client