$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01a59bc2-ef7c-3c0c-b018-726cadfb2673.roa File: 01a59bc2-ef7c-3c0c-b018-726cadfb2673.roa (raw, json) Hash identifier: M1PHzf855lSwUdlzV5xvLkIFxepE3GUKXGdKV/uOw8Y= Subject key identifier: 59:F9:F3:C7:A9:0C:9A:B6:2C:34:86:50:80:C9:F1:FA:F6:AE:FD:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985D154250456A0340660E4 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01a59bc2-ef7c-3c0c-b018-726cadfb2673.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.204.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:d1:54:25:04:56:a0:34:06:60:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f65b5704-c316-465a-b7fb-287cdd660201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1d:c6:b6:27:b7:e8:66:0c:cb:3a:8c:45:4e: d2:a2:2a:91:e0:71:aa:a2:af:dd:3b:3c:c5:c2:ad: 8e:90:20:3d:8c:d1:a9:2e:c1:79:e6:7d:10:73:d4: 1c:20:6e:31:4b:12:9a:e5:1d:3c:9f:0e:16:5a:4c: 6d:b3:25:12:01:32:90:df:d9:06:a0:ad:46:08:51: 96:14:7f:b3:78:34:d0:8d:21:7d:bd:17:99:e3:58: a2:e8:a8:5f:ac:f5:07:df:8d:e8:de:08:f3:42:17: 45:dd:a8:87:f6:02:b6:67:5b:28:f3:79:74:a9:96: 8a:08:26:35:e2:c3:72:08:be:52:8b:3b:05:b3:ad: fd:ed:88:56:a4:b7:1b:a0:98:5b:75:c2:6f:cd:47: 03:8a:a7:df:96:05:b2:9c:00:a6:16:22:69:12:f2: 16:c7:9b:fc:f7:34:23:68:61:86:c9:a4:af:c1:cb: c4:41:29:5f:f6:98:d5:cd:40:52:09:28:34:69:cf: 22:4a:57:0a:f7:7b:85:64:ac:37:52:4c:e1:3b:4d: 11:0f:9d:0e:82:1b:48:74:3c:ab:ce:14:2e:05:89: 05:83:cc:68:f5:7e:cb:62:6a:a7:cf:ad:c0:8a:7d: 20:27:2a:0f:75:8f:6e:20:dc:4e:db:d2:64:dc:79: 04:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F9:F3:C7:A9:0C:9A:B6:2C:34:86:50:80:C9:F1:FA:F6:AE:FD:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01a59bc2-ef7c-3c0c-b018-726cadfb2673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:88:6f:b1:0b:01:85:bd:46:f4:94:c1:ac:47:5c:8c:f1:64: da:0f:94:22:f8:92:b8:42:25:c2:19:20:ea:9a:2d:a4:26:ed: 56:38:de:de:66:c4:c6:fe:50:7d:b5:4f:60:93:1a:ec:32:4e: 61:d1:c3:41:54:b8:74:48:3c:c7:de:60:e3:c1:36:53:98:3a: c4:c5:9d:1d:1c:af:bc:f1:bc:2c:41:eb:24:c0:74:ac:10:48: 25:62:a6:8c:77:72:94:9f:ae:34:fa:b7:64:01:a8:e4:4d:f6: df:96:0d:29:1a:af:ba:7d:79:25:4a:e3:db:a0:79:10:b5:04: d7:6a:8f:dd:77:6b:fe:6f:27:4b:9d:37:bc:a1:6f:43:f9:e7: bb:bb:a9:60:e1:b7:55:37:a7:02:18:23:26:f2:d1:3b:0b:4a: 27:f9:22:33:60:ca:9d:55:db:c5:a7:fa:03:22:a2:62:4f:73: a2:bb:52:6c:b0:4e:18:4f:44:34:bb:10:f9:e4:2c:97:50:65: aa:ac:ff:5c:c6:ab:0f:88:a8:ed:b0:b5:02:bf:de:35:c7:27: ec:47:2b:e3:63:85:d3:57:f1:05:73:bf:8f:6a:26:24:70:56: d2:c5:ae:74:d6:fd:2f:38:9b:cd:6d:1a:c2:7c:06:ab:40:fc: 11:c4:72:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhdFUJQRWoDQGYOQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjY1YjU3MDQtYzMxNi00NjVhLWI3ZmItMjg3Y2RkNjYwMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB3Gtie36GYMyzqMRU7SoiqR4HGqoq/dOzzF wq2OkCA9jNGpLsF55n0Qc9QcIG4xSxKa5R08nw4WWkxtsyUSATKQ39kGoK1GCFGW FH+zeDTQjSF9vReZ41ii6KhfrPUH343o3gjzQhdF3aiH9gK2Z1so83l0qZaKCCY1 4sNyCL5SizsFs6397YhWpLcboJhbdcJvzUcDiqfflgWynACmFiJpEvIWx5v89zQj aGGGyaSvwcvEQSlf9pjVzUBSCSg0ac8iSlcK93uFZKw3UkzhO00RD50OghtIdDyr zhQuBYkFg8xo9X7LYmqnz63Ain0gJyoPdY9uINxO29Jk3HkEUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn588epDJq2LDSGUIDJ8fr2rv3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDFhNTliYzItZWY3Yy0z YzBjLWIwMTgtNzI2Y2FkZmIyNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiIb7ELAYW9RvSUwaxHXIzxZNoPlCL4krhCJcIZIOqaLaQm7VY43t5m xMb+UH21T2CTGuwyTmHRw0FUuHRIPMfeYOPBNlOYOsTFnR0cr7zxvCxB6yTAdKwQ SCVipox3cpSfrjT6t2QBqORN9t+WDSkar7p9eSVK49ugeRC1BNdqj913a/5vJ0ud N7yhb0P557u7qWDht1U3pwIYIyby0TsLSif5IjNgyp1V28Wn+gMiomJPc6K7Umyw ThhPRDS7EPnkLJdQZaqs/1zGqw+IqO2wtQK/3jXHJ+xHK+NjhdNX8QVzv49qJiRw VtLFrnTW/S84m81tGsJ8BqtA/BHEcgU= -----END CERTIFICATE-----Generated at Fri Oct 23 11:48:17 2026 by rpki-client