$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa File: 53e5c72a-194b-3ae3-b890-b640b286e4d9.roa (raw, json) Hash identifier: mFHkNFHRCTGyySvnTeC0rh/ReQ0Fl93fRGb278Dk67s= Subject key identifier: C2:35:EC:DD:BF:A0:5F:1C:DD:A8:6A:63:B4:45:90:97:90:75:6E:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8578675035853BAC96165400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 35994 IP address blocks: 23.32.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:67:50:35:85:3b:ac:96:16:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=b0d24e02-de45-4105-95a3-5e73e7a02099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:93:8b:ee:bd:37:79:41:85:a7:10:28:0e:6d: 3a:d1:82:e2:91:ac:79:d9:40:ae:06:48:d6:41:7d: 84:3f:0c:c5:6c:47:6f:68:86:2c:f2:b3:2a:0f:69: 81:08:12:a4:a3:9a:96:fd:51:44:79:55:e5:60:45: 8d:94:88:9f:fa:1a:ea:8b:40:d4:54:87:08:4b:fe: d3:77:aa:b3:1f:06:6e:d3:fc:4a:02:61:df:a3:af: ae:9f:07:f8:3d:7a:d8:21:8d:de:67:ea:5e:92:4f: 1e:7f:78:14:d9:a5:06:53:94:7d:2e:16:4a:29:a0: 54:81:c6:b9:a3:42:c0:ba:f2:81:54:da:30:d2:d4: 77:a2:dd:ec:b7:cd:df:15:1f:58:c1:09:cf:69:18: 89:00:b6:f4:f1:04:6a:c7:65:8d:14:bd:9d:2d:7a: 26:7e:3e:2a:f0:cd:62:70:76:fa:b6:91:f1:cb:b8: a0:03:89:59:89:ab:b2:1b:73:84:dd:7d:dc:aa:85: 83:8d:ff:a6:3b:cc:47:64:1b:33:db:36:0d:08:e7: 49:38:35:35:50:7c:0d:45:0c:36:aa:6e:f2:44:6e: da:5f:1d:24:a1:00:13:37:97:bc:4e:d7:07:3e:54: 59:cd:40:e9:ce:b3:1d:97:5c:53:a2:13:0d:b2:40: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:35:EC:DD:BF:A0:5F:1C:DD:A8:6A:63:B4:45:90:97:90:75:6E:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:75:b5:40:6a:57:6d:5e:a6:59:49:09:b4:42:9d:31:58:e4: f6:89:48:a3:2a:3a:fc:ba:de:8a:01:2c:5d:03:d9:8f:5b:89: 41:e2:cb:ee:63:a6:1b:9e:e9:b1:69:5a:20:8a:41:b9:f5:17: 18:3d:1d:f2:12:9d:56:f7:58:c7:07:6f:96:d5:ee:b6:b2:a5: 71:54:b9:90:33:ae:b5:ad:1a:f4:98:4c:ed:43:26:d7:3d:bc: ed:72:3d:60:e2:85:82:66:d3:dd:d4:13:be:dd:c6:5c:c3:8c: a4:4e:98:55:ec:e7:89:3e:4a:39:b6:ed:d3:46:b3:90:06:33: 39:a7:55:3a:c7:31:b5:58:63:b5:57:25:28:cf:87:21:08:12: 09:f2:e4:f4:34:0a:d7:54:6f:92:5b:94:fc:23:dc:6d:cf:67: 36:c3:60:b0:92:26:68:b9:25:bc:58:eb:bb:8c:71:e1:07:a8: 1b:15:c3:cc:ea:15:7b:3d:97:31:74:67:94:84:4f:83:4f:f3: 4a:62:8e:86:12:d9:7f:b5:5d:2b:76:02:22:e1:5a:43:a1:d2: 52:8b:5b:63:89:a3:fa:c1:16:7f:d9:09:e3:41:5f:2d:54:bf: d5:98:86:9a:f9:f1:67:6d:2c:33:d5:46:62:bd:ae:aa:be:00: 08:47:9e:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeGdQNYU7rJYWVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk YjBkMjRlMDItZGU0NS00MTA1LTk1YTMtNWU3M2U3YTAyMDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZOL7r03eUGFpxAoDm060YLikax52UCuBkjW QX2EPwzFbEdvaIYs8rMqD2mBCBKko5qW/VFEeVXlYEWNlIif+hrqi0DUVIcIS/7T d6qzHwZu0/xKAmHfo6+unwf4PXrYIY3eZ+pekk8ef3gU2aUGU5R9LhZKKaBUgca5 o0LAuvKBVNow0tR3ot3st83fFR9YwQnPaRiJALb08QRqx2WNFL2dLXomfj4q8M1i cHb6tpHxy7igA4lZiauyG3OE3X3cqoWDjf+mO8xHZBsz2zYNCOdJODU1UHwNRQw2 qm7yRG7aXx0koQATN5e8TtcHPlRZzUDpzrMdl1xTohMNskBIowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMI17N2/oF8c3ahqY7RFkJeQdW7PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTNlNWM3MmEtMTk0Yi0z YWUzLWI4OTAtYjY0MGIyODZlNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC11tUBqV21epllJCbRCnTFY5PaJSKMqOvy63ooBLF0D2Y9biUHiy+5j phue6bFpWiCKQbn1Fxg9HfISnVb3WMcHb5bV7raypXFUuZAzrrWtGvSYTO1DJtc9 vO1yPWDihYJm093UE77dxlzDjKROmFXs54k+Sjm27dNGs5AGMzmnVTrHMbVYY7VX JSjPhyEIEgny5PQ0CtdUb5JblPwj3G3PZzbDYLCSJmi5JbxY67uMceEHqBsVw8zq FXs9lzF0Z5SET4NP80pijoYS2X+1XSt2AiLhWkOh0lKLW2OJo/rBFn/ZCeNBXy1U v9WYhpr58WdtLDPVRmK9rqq+AAhHnpQ= -----END CERTIFICATE-----Generated at Sun Oct 25 07:58:26 2026 by rpki-client