$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45c2f904-1b9d-3dc2-9cd7-e234b66b959f.roa File: 45c2f904-1b9d-3dc2-9cd7-e234b66b959f.roa (raw, json) Hash identifier: RNwq+sSABBIjckHDkqe6T89+QsxEWkiq584JGHGROmo= Subject key identifier: 30:4C:A9:E6:4E:4A:1C:6F:B3:BD:C8:1A:4D:AE:49:4D:F2:34:CE:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985624F7532CF4B1B069700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45c2f904-1b9d-3dc2-9cd7-e234b66b959f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 24319 IP address blocks: 23.59.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:62:4f:75:32:cf:4b:1b:06:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e61eb506-d1c1-4ecb-8cdc-950a8dda5edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:e3:e5:ce:30:b2:4b:07:34:b0:43:27:44: 98:fd:c0:ac:25:9a:04:4c:cb:35:16:95:0d:64:83: 36:bd:3a:d0:a9:1b:4b:d1:92:88:97:bc:96:01:38: 31:40:ea:20:c0:61:e5:73:72:2e:f1:c7:9a:84:b0: 13:ca:e0:73:c3:c6:c0:80:4e:4a:b9:40:f4:ae:40: 26:12:ba:55:2c:3d:53:2d:5e:2c:55:f4:aa:b4:ae: 46:e4:a7:da:c0:47:18:b8:1f:ec:52:e7:26:da:ec: 40:7c:d3:e0:70:08:c0:de:ef:ab:58:59:c3:7f:a2: 7e:fd:56:32:11:d5:9b:bd:f5:fe:a4:c7:19:da:02: 0f:fa:a2:51:24:c8:4c:de:39:01:49:47:54:d6:9c: f2:c1:73:76:ae:e5:84:2a:59:04:50:e4:79:b3:d6: ad:71:60:90:83:15:fb:9f:5e:24:e0:dd:cc:cf:66: f1:74:fb:61:03:ff:c6:d1:93:7f:b5:9b:13:70:b5: 4b:fa:0d:02:61:fd:14:cb:7c:ed:7c:5a:f7:41:b3: c1:4c:8c:a6:f8:e1:36:d1:4b:93:9b:f7:70:4d:21: f4:b7:e0:db:f1:45:4c:28:0d:b8:dd:0e:ef:47:18: 1b:77:d1:30:65:db:93:fd:85:53:58:79:ac:7e:e4: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4C:A9:E6:4E:4A:1C:6F:B3:BD:C8:1A:4D:AE:49:4D:F2:34:CE:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45c2f904-1b9d-3dc2-9cd7-e234b66b959f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:cc:5a:ab:d0:c6:db:74:c3:35:ba:f0:b0:83:45:7a:a9:b6: 83:8c:28:5a:53:10:f9:83:2c:86:f3:c5:f3:4e:f0:b5:3e:31: fc:7d:97:1c:f6:fa:5f:dc:1f:d9:85:e0:ef:7e:2a:b6:eb:24: 3e:27:63:63:5b:39:fd:c5:16:9e:05:79:71:17:43:b9:ca:6a: 2a:f7:57:7b:ab:22:f7:6a:d1:0a:2b:6e:c4:47:4d:24:bd:c1: 0a:c6:ed:41:4a:e1:19:13:26:36:a8:0b:da:dc:b5:27:02:9b: 9d:23:9e:0f:30:99:02:25:a3:d9:a8:36:1b:78:e3:d1:96:b8: 3b:ba:43:98:19:01:a1:49:47:c8:7f:d9:1a:51:36:77:02:2f: ef:1b:d7:a6:5d:e5:60:e4:62:0b:18:72:43:63:b0:f9:a6:a0: 36:5b:64:5b:94:99:56:f9:cb:d1:c9:f4:7d:b6:2c:60:d3:4f: 4d:e8:9b:13:d5:94:39:1a:1e:8f:c5:e7:2b:1e:64:de:5a:9a: da:df:e4:6f:ad:42:75:ac:ca:c5:97:5d:61:82:be:12:db:12: 06:d4:db:60:4f:9e:07:9f:95:b1:c7:5b:c7:15:09:4d:b2:57: 9d:9a:a4:66:6e:23:2b:51:5c:34:de:35:dd:f7:5f:cf:08:9c: 48:3d:70:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhWJPdTLPSxsGlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTYxZWI1MDYtZDFjMS00ZWNiLThjZGMtOTUwYThkZGE1ZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob7j5c4wsksHNLBDJ0SY/cCsJZoETMs1FpUN ZIM2vTrQqRtL0ZKIl7yWATgxQOogwGHlc3Iu8ceahLATyuBzw8bAgE5KuUD0rkAm ErpVLD1TLV4sVfSqtK5G5KfawEcYuB/sUucm2uxAfNPgcAjA3u+rWFnDf6J+/VYy EdWbvfX+pMcZ2gIP+qJRJMhM3jkBSUdU1pzywXN2ruWEKlkEUOR5s9atcWCQgxX7 n14k4N3Mz2bxdPthA//G0ZN/tZsTcLVL+g0CYf0Uy3ztfFr3QbPBTIym+OE20UuT m/dwTSH0t+Db8UVMKA243Q7vRxgbd9EwZduT/YVTWHmsfuSX6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBMqeZOShxvs73IGk2uSU3yNM5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDVjMmY5MDQtMWI5ZC0z ZGMyLTljZDctZTIzNGI2NmI5NTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXMWqvQxtt0wzW68LCDRXqptoOMKFpTEPmDLIbzxfNO8LU+Mfx9lxz2 +l/cH9mF4O9+KrbrJD4nY2NbOf3FFp4FeXEXQ7nKair3V3urIvdq0QorbsRHTSS9 wQrG7UFK4RkTJjaoC9rctScCm50jng8wmQIlo9moNht449GWuDu6Q5gZAaFJR8h/ 2RpRNncCL+8b16Zd5WDkYgsYckNjsPmmoDZbZFuUmVb5y9HJ9H22LGDTT03omxPV lDkaHo/F5yseZN5amtrf5G+tQnWsysWXXWGCvhLbEgbU22BPngeflbHHW8cVCU2y V52apGZuIytRXDTeNd33X88InEg9cDU= -----END CERTIFICATE-----Generated at Wed Oct 21 18:56:41 2026 by rpki-client