$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa File: 71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa (raw, json) Hash identifier: w+pb0UCeQk7DCFB/VYsh0sp/nk3HiG65K0flDnXvye4= Subject key identifier: 1F:4E:3D:54:D5:11:22:E7:74:B9:2D:9F:1F:03:3C:FC:C9:7F:E9:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB30B3A1CC8A415298EFEE4 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 16625 IP address blocks: 23.1.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:0b:3a:1c:c8:a4:15:29:8e:fe:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=96f41a24-9430-481b-bfe4-39129ba3b756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:7e:c8:a7:0b:96:bf:b8:87:ce:8f:00:e7: 61:67:60:4a:b3:dc:9d:30:ef:1f:08:73:c2:23:b0: 5b:fe:3c:28:93:5c:db:93:c3:1d:b9:15:d6:ab:26: 29:49:c5:97:6f:f3:77:5c:c3:58:31:47:ce:0f:08: 68:ab:7d:e3:01:29:1b:5d:50:bf:33:e4:05:11:23: 91:60:84:cf:bc:0b:3a:b6:c6:fc:99:09:b7:7b:ed: c7:f7:c2:3e:29:11:e0:3b:62:f9:d9:86:5f:68:60: 42:76:0c:65:c1:e9:23:83:97:fa:f0:fa:30:70:e5: c8:71:aa:91:52:a1:40:d7:b0:22:af:78:ca:4f:6e: 15:1b:c7:90:ef:14:75:0c:40:7b:42:70:f7:84:15: e5:91:23:4e:36:25:e0:cc:12:05:1b:36:c1:82:7c: 5c:e0:7e:5f:28:2a:10:92:e9:55:bc:4a:2c:15:77: 71:09:9b:08:c7:b8:37:47:f4:cc:42:50:94:a6:32: cb:7d:58:e8:9d:54:4b:fd:be:80:3c:06:81:b0:ba: 4c:b0:7d:a0:99:02:95:bf:51:e8:72:2d:95:6d:bd: d9:2f:76:35:2c:34:ad:0e:4d:3b:07:a6:dc:89:50: 37:0e:83:3e:ed:04:ab:00:90:37:45:72:50:45:6e: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4E:3D:54:D5:11:22:E7:74:B9:2D:9F:1F:03:3C:FC:C9:7F:E9:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:39:bb:36:51:0d:15:6f:06:6b:d9:56:37:92:72:e9:d0:ea: 87:2a:3b:f0:09:df:dd:2b:99:6c:a7:93:a8:57:f0:19:19:99: 47:39:18:c7:b4:88:46:f9:64:fa:5a:69:14:9f:a6:de:99:3b: 07:41:16:46:75:ec:a6:94:93:44:bd:76:cb:da:ac:b2:d7:63: 8c:d9:c5:ad:4d:a1:ff:cf:43:38:ea:be:00:53:70:8f:e4:3a: d5:c9:af:4e:33:40:39:0d:f3:e1:af:6a:00:58:1e:62:22:5f: 35:d3:6b:d9:c2:85:0d:17:06:96:49:9b:27:50:10:6f:03:c5: c9:39:7e:3a:7c:52:2f:00:ac:cd:fd:1f:2b:a9:34:12:51:b7: 80:55:72:69:c0:f9:3b:b1:c0:12:e8:77:53:3a:22:b7:47:dd: da:aa:3b:40:01:4f:85:a5:f2:9c:fa:7b:c5:a3:d7:20:09:f0: f9:71:a7:b2:53:59:f4:c2:0a:d3:91:e7:1f:ae:fe:40:75:c0: d3:0d:10:59:24:b9:ac:87:48:f3:d0:e9:bd:dc:c8:a6:25:01: 2b:a9:3b:70:73:68:2c:6a:84:b3:29:bf:09:f1:09:bb:04:f2: 56:6d:e2:91:40:f2:05:6c:c4:53:8f:17:17:06:60:c7:18:1b: 09:68:39:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sws6HMikFSmO/uQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk OTZmNDFhMjQtOTQzMC00ODFiLWJmZTQtMzkxMjliYTNiNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv5+yKcLlr+4h86PAOdhZ2BKs9ydMO8fCHPC I7Bb/jwok1zbk8MduRXWqyYpScWXb/N3XMNYMUfODwhoq33jASkbXVC/M+QFESOR YITPvAs6tsb8mQm3e+3H98I+KRHgO2L52YZfaGBCdgxlwekjg5f68PowcOXIcaqR UqFA17Air3jKT24VG8eQ7xR1DEB7QnD3hBXlkSNONiXgzBIFGzbBgnxc4H5fKCoQ kulVvEosFXdxCZsIx7g3R/TMQlCUpjLLfVjonVRL/b6APAaBsLpMsH2gmQKVv1Ho ci2Vbb3ZL3Y1LDStDk07B6bciVA3DoM+7QSrAJA3RXJQRW7j8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9OPVTVESLndLktnx8DPPzJf+k7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFhYTU5Y2YtNWY0YS0z M2RiLWJkMTctMzZiMzA0YWM3OWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFwHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU5uzZRDRVvBmvZVjeScunQ6ocqO/AJ390rmWynk6hX8BkZmUc5GMe0 iEb5ZPpaaRSfpt6ZOwdBFkZ17KaUk0S9dsvarLLXY4zZxa1Nof/PQzjqvgBTcI/k OtXJr04zQDkN8+GvagBYHmIiXzXTa9nChQ0XBpZJmydQEG8Dxck5fjp8Ui8ArM39 HyupNBJRt4BVcmnA+TuxwBLod1M6IrdH3dqqO0ABT4Wl8pz6e8Wj1yAJ8Plxp7JT WfTCCtOR5x+u/kB1wNMNEFkkuayHSPPQ6b3cyKYlASupO3BzaCxqhLMpvwnxCbsE 8lZt4pFA8gVsxFOPFxcGYMcYGwloOf0= -----END CERTIFICATE-----Generated at Wed Oct 21 19:46:13 2026 by rpki-client