$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70c5b799-029a-3603-b484-71d82d564b99.roa File: 70c5b799-029a-3603-b484-71d82d564b99.roa (raw, json) Hash identifier: +j1nZVNaGxlJVq/PRkufZZWqbquZvkhfK0RrkxETDLk= Subject key identifier: 75:E5:AB:E9:35:8C:83:F1:BA:C1:B9:A7:C1:96:06:57:1C:E1:03:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8DD89168CD6DE4796A8FC280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70c5b799-029a-3603-b484-71d82d564b99.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 20940 IP address blocks: 23.1.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:91:68:cd:6d:e4:79:6a:8f:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=216d66df-7357-4681-8fff-011c388afc61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:d7:27:93:1f:c8:df:2b:91:46:67:f0:28: 57:a8:11:5f:a7:a1:7e:a6:87:d3:41:ed:dd:2d:34: 2b:ea:cf:3c:89:1a:37:df:fb:71:1a:c0:2b:ba:24: 48:8a:21:39:a0:8c:2d:3a:49:53:d0:6c:d1:3e:a6: 42:0c:34:8d:84:b1:9c:e1:90:43:40:06:11:9f:5a: 14:73:94:46:bd:89:b3:f4:77:d1:48:59:13:fb:67: 1d:9a:76:c5:40:17:87:aa:22:c1:64:aa:21:a5:8e: 7c:0c:fc:d1:95:68:bd:ee:5b:3e:01:28:bc:83:1a: 17:b0:2e:5b:37:29:50:90:0f:6a:e2:55:6d:88:67: 73:09:13:fe:a9:8d:78:32:d0:e2:05:b7:c6:59:4b: 6e:a2:fe:c9:be:cf:84:c1:80:73:3a:95:10:87:42: 18:3d:ee:e8:54:68:61:4e:46:d6:d9:c1:47:b1:80: 11:c0:a6:a9:42:61:d5:ff:41:52:50:5b:a4:45:97: 2c:1f:da:31:a7:82:11:a5:23:08:3a:0f:6f:5d:ca: 54:a1:7f:10:fc:64:6a:e5:b9:7d:1f:79:15:4b:56: d5:cf:1a:35:48:b2:66:d9:a9:ab:92:c0:21:22:4e: 92:bf:a5:9d:fd:5d:b9:06:70:cd:31:e7:07:43:d5: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E5:AB:E9:35:8C:83:F1:BA:C1:B9:A7:C1:96:06:57:1C:E1:03:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70c5b799-029a-3603-b484-71d82d564b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:f6:6d:b0:b0:9e:e1:10:4f:da:de:d7:8c:e9:ac:7e:0b:21: 97:e8:4b:98:e4:cd:f8:0b:f6:68:25:f0:dd:36:bd:4e:8a:01: 0a:ba:bb:e1:98:d3:3e:f3:e6:af:7d:ea:fb:64:30:32:60:72: 7c:e7:62:24:e2:20:41:60:86:91:3c:2e:ea:51:07:d2:27:95: f8:cf:73:73:69:c3:45:a8:0a:3c:ed:81:51:e9:2e:f6:80:a7: cc:ba:71:5f:99:64:3e:f5:78:8b:ad:f7:4a:6a:ec:4f:42:d8: f1:16:f7:4c:eb:57:a3:7c:e8:3c:ec:cc:3e:e5:83:a7:99:b3: d5:a5:2a:6f:8f:07:b4:8c:cb:ed:20:83:bc:7d:57:32:5e:50: 53:93:5a:98:1b:a0:bc:89:b8:69:80:ee:81:b5:cb:6a:d3:e8: ae:a6:2e:b5:9c:7f:a1:25:77:c2:b8:39:cd:fa:b7:97:3c:9b: 58:7c:c2:b6:6b:f3:70:af:b7:8c:48:78:68:1b:5e:6e:44:c9: 66:8a:a0:5c:49:2b:0d:f2:b2:f8:a3:7c:6b:a5:4a:16:83:fd: 1f:c1:32:da:b4:d2:6e:28:9c:fe:84:86:cf:d9:93:8c:d2:57: fc:8e:2d:1f:b1:ec:6c:e6:d9:c5:98:03:56:31:8d:9e:5a:8d: eb:12:79:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2JFozW3keWqPwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk MjE2ZDY2ZGYtNzM1Ny00NjgxLThmZmYtMDExYzM4OGFmYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9nXJ5MfyN8rkUZn8ChXqBFfp6F+pofTQe3d LTQr6s88iRo33/txGsAruiRIiiE5oIwtOklT0GzRPqZCDDSNhLGc4ZBDQAYRn1oU c5RGvYmz9HfRSFkT+2cdmnbFQBeHqiLBZKohpY58DPzRlWi97ls+ASi8gxoXsC5b NylQkA9q4lVtiGdzCRP+qY14MtDiBbfGWUtuov7Jvs+EwYBzOpUQh0IYPe7oVGhh TkbW2cFHsYARwKapQmHV/0FSUFukRZcsH9oxp4IRpSMIOg9vXcpUoX8Q/GRq5bl9 H3kVS1bVzxo1SLJm2amrksAhIk6Sv6Wd/V25BnDNMecHQ9W3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXlq+k1jIPxusG5p8GWBlcc4QOEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzBjNWI3OTktMDI5YS0z NjAzLWI0ODQtNzFkODJkNTY0Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf2bbCwnuEQT9re14zprH4LIZfoS5jkzfgL9mgl8N02vU6KAQq6u+GY 0z7z5q996vtkMDJgcnznYiTiIEFghpE8LupRB9InlfjPc3Npw0WoCjztgVHpLvaA p8y6cV+ZZD71eIut90pq7E9C2PEW90zrV6N86DzszD7lg6eZs9WlKm+PB7SMy+0g g7x9VzJeUFOTWpgboLyJuGmA7oG1y2rT6K6mLrWcf6Eld8K4Oc36t5c8m1h8wrZr 83Cvt4xIeGgbXm5EyWaKoFxJKw3ysvijfGulShaD/R/BMtq00m4onP6Ehs/Zk4zS V/yOLR+x7Gzm2cWYA1YxjZ5ajesSeT8= -----END CERTIFICATE-----Generated at Tue Oct 27 16:40:55 2026 by rpki-client