$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4cf3d9-013a-36f8-9139-ba9e9e83530a.roa File: 4f4cf3d9-013a-36f8-9139-ba9e9e83530a.roa (raw, json) Hash identifier: SBe/Wq0tGxQhreeNjoWts60q/Z9MngnWJ8EJWqCExXw= Subject key identifier: BC:E3:6F:CB:41:B6:4B:47:51:39:AA:44:B2:6B:E8:C4:9B:49:E6:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D43B2A0A4F41AD38B67C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4cf3d9-013a-36f8-9139-ba9e9e83530a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.57.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:43:b2:a0:a4:f4:1a:d3:8b:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d8a038d9-b8f1-4683-8d19-b2a042f0f8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ef:82:4a:0f:e5:cc:34:af:a7:94:e1:75:09: a1:c2:81:4a:cb:76:9a:8f:46:db:fb:12:c0:d6:d8: b3:50:bc:d1:d7:05:c3:7a:81:cf:e7:05:43:d0:f8: 35:b3:17:3a:7f:c6:5e:65:a7:75:a9:11:2b:4b:9b: 9b:b2:40:2d:7e:ea:92:c1:6c:e0:8c:16:76:93:23: fb:86:66:48:16:03:48:20:4b:c4:b3:64:3a:2e:70: 18:5b:71:77:f0:86:26:08:c9:29:88:8a:81:20:d4: 49:3c:2c:fa:4e:cd:55:9a:e2:76:1d:f9:56:61:e2: ad:cc:d5:ad:cc:88:a0:8e:58:f7:09:ea:7c:cf:76: a1:da:2c:03:02:e5:e4:18:3d:53:b8:6b:49:39:7c: b4:70:43:e5:c8:83:ec:d9:74:44:1f:f2:eb:75:b8: e8:b9:a9:29:24:28:74:6b:b9:dc:3e:17:c0:54:e5: 2e:e4:e4:5b:75:12:19:b5:54:1a:2b:71:37:d1:dc: 11:65:1a:63:98:47:94:2c:1f:78:f2:bb:cb:95:65: c0:e4:83:3e:1d:a6:0e:22:03:49:29:b1:8f:ba:c6: 0d:e0:67:73:7f:c3:c8:c0:6b:8d:87:12:b0:3d:e4: 4a:33:ec:8e:5d:be:fb:2f:1f:b9:21:cb:2a:f7:0f: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E3:6F:CB:41:B6:4B:47:51:39:AA:44:B2:6B:E8:C4:9B:49:E6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f4cf3d9-013a-36f8-9139-ba9e9e83530a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.57.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:91:e3:38:5a:25:28:91:dd:dc:8a:7a:a4:fb:67:98:81:1d: f5:5d:70:85:a4:08:93:cc:c2:eb:d8:fc:c2:23:3f:d8:d5:3e: ba:60:25:05:12:6c:b0:b1:ea:fd:eb:cf:2a:73:fe:52:d9:2f: 3b:3b:de:d9:bc:77:29:94:9d:7a:46:1f:10:74:cd:b5:34:40: 57:ce:d3:db:23:a5:da:20:fc:f1:9e:fb:dc:cb:52:8c:75:6a: 5e:7e:4a:ab:1c:20:84:f2:3c:c3:24:9b:35:be:c5:bf:48:f1: d5:16:dc:5b:36:33:21:6b:d6:d2:bc:74:11:fd:d6:4a:88:19: 96:51:f3:f1:8e:ea:b6:da:27:e8:33:a4:86:7e:ab:21:70:2c: 03:40:ba:2d:9c:3e:de:de:0e:1d:f2:20:ac:12:33:c3:ac:e3: 65:1c:ff:23:7c:5c:bb:4e:22:bf:73:23:4a:c1:b2:39:f9:17: ec:d2:ce:2c:6e:2a:3f:5d:0e:44:a6:22:d5:07:a1:a4:1c:33: fe:fd:e8:61:fc:72:25:6e:92:5c:9d:1d:8f:52:76:cc:bf:7c: bb:cb:73:58:80:02:4e:b3:c3:a6:f8:e8:dd:e2:fb:df:8d:92: 46:e0:43:e9:56:8d:af:5a:93:6d:21:a7:a7:c2:8b:9e:db:a1: 9d:5e:fc:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfUOyoKT0GtOLZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDhhMDM4ZDktYjhmMS00NjgzLThkMTktYjJhMDQyZjBmOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu+CSg/lzDSvp5ThdQmhwoFKy3aaj0bb+xLA 1tizULzR1wXDeoHP5wVD0Pg1sxc6f8ZeZad1qRErS5ubskAtfuqSwWzgjBZ2kyP7 hmZIFgNIIEvEs2Q6LnAYW3F38IYmCMkpiIqBINRJPCz6Ts1VmuJ2HflWYeKtzNWt zIigjlj3Cep8z3ah2iwDAuXkGD1TuGtJOXy0cEPlyIPs2XREH/LrdbjouakpJCh0 a7ncPhfAVOUu5ORbdRIZtVQaK3E30dwRZRpjmEeULB948rvLlWXA5IM+HaYOIgNJ KbGPusYN4Gdzf8PIwGuNhxKwPeRKM+yOXb77Lx+5Icsq9w8M9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzjb8tBtktHUTmqRLJr6MSbSebdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY0Y2YzZDktMDEzYS0z NmY4LTkxMzktYmE5ZTllODM1MzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmR4zhaJSiR3dyKeqT7Z5iBHfVdcIWkCJPMwuvY/MIjP9jVPrpgJQUS bLCx6v3rzypz/lLZLzs73tm8dymUnXpGHxB0zbU0QFfO09sjpdog/PGe+9zLUox1 al5+SqscIITyPMMkmzW+xb9I8dUW3Fs2MyFr1tK8dBH91kqIGZZR8/GO6rbaJ+gz pIZ+qyFwLANAui2cPt7eDh3yIKwSM8Os42Uc/yN8XLtOIr9zI0rBsjn5F+zSzixu Kj9dDkSmItUHoaQcM/796GH8ciVuklydHY9Sdsy/fLvLc1iAAk6zw6b46N3i+9+N kkbgQ+lWja9ak20hp6fCi57boZ1e/FA= -----END CERTIFICATE-----Generated at Fri Oct 23 20:48:29 2026 by rpki-client