$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/769e33f2-962b-3a0a-bd8e-e3cbc8708bdc.roa File: 769e33f2-962b-3a0a-bd8e-e3cbc8708bdc.roa (raw, json) Hash identifier: KwZy8sg2NDmvzo/+ZxSS+mVYaD+l64jQlSha4kdrpK4= Subject key identifier: 10:8A:A1:51:CE:07:16:63:16:05:E8:A1:9D:AE:B4:6E:E1:A3:E6:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E268C4BA286806924AEC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/769e33f2-962b-3a0a-bd8e-e3cbc8708bdc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.202.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:26:8c:4b:a2:86:80:69:24:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4bdf36c4-fa6c-42dd-9f5e-be38a5e43236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:fd:fe:22:a5:db:aa:3a:21:2b:1c:1f:4e: 0f:8a:c7:6c:32:18:77:d9:df:8b:1a:e9:2c:40:66: e8:96:64:b5:3e:ef:32:da:ca:3e:f2:e8:38:07:22: 83:98:19:02:b8:34:b4:7c:70:e5:c2:97:bd:81:c5: b0:66:c6:c1:01:e7:23:f7:f1:7d:b5:e3:64:b2:c7: 6d:6c:f5:64:78:ed:20:f5:2a:03:22:6d:ee:82:38: 1a:38:ad:cf:89:59:94:f4:a7:41:f4:23:df:52:af: 8e:ab:1c:e1:26:e3:3a:b6:21:1b:06:94:2d:92:c1: 65:e9:fe:52:dc:6f:dd:ad:d4:25:fa:d0:5f:f6:c3: d4:89:03:38:c5:b8:19:02:4d:66:db:d2:7a:1b:7d: 79:b4:d6:9c:c2:bc:fe:c1:9c:6f:db:37:28:e3:96: 1e:ed:8b:91:0b:d1:88:9a:4d:08:da:fe:73:54:d7: 76:3c:dd:88:df:e9:f1:dd:38:83:e5:bd:e5:82:e4: bd:38:fb:42:34:c0:e2:72:bd:0a:ee:d9:4d:02:b9: 0d:2c:c3:08:e6:dd:29:c2:0d:32:ad:45:84:01:73: 62:5d:fa:41:e8:90:58:34:37:9d:8d:7d:25:91:9d: df:73:bd:1d:f4:09:8c:6e:61:a7:81:b5:72:f9:fd: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8A:A1:51:CE:07:16:63:16:05:E8:A1:9D:AE:B4:6E:E1:A3:E6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/769e33f2-962b-3a0a-bd8e-e3cbc8708bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:d5:72:17:29:29:23:b5:46:e9:9d:7e:64:ad:cb:90:7a:47: 11:e8:0b:f9:36:0b:6f:e5:df:03:fc:4b:f6:aa:f0:c3:3a:72: 61:8e:25:c7:dc:e5:ab:1a:6d:e3:74:02:22:bc:1e:3d:81:05: 16:fc:23:9e:37:f6:c1:e7:59:5b:16:1d:e0:7c:29:01:0a:46: 8c:db:60:39:5d:2e:7f:c6:ff:86:95:ea:de:8a:26:6f:33:f9: fc:86:45:f8:ae:e3:49:6e:9a:d6:13:72:c7:fc:88:81:88:9f: 5d:f9:69:76:19:8f:e8:67:e0:84:92:e3:b0:6e:3b:c9:8f:23: d8:02:ee:99:eb:d1:f2:ea:bd:c1:74:5a:26:8a:e6:67:6e:84: dc:71:0c:f4:59:73:c0:86:69:93:2d:85:a7:de:e8:73:9c:35: bc:ce:b9:84:8b:4e:7a:28:6a:ad:8a:e1:1a:20:63:d2:2b:a5: db:d8:50:86:ac:03:c4:f9:4e:81:25:f1:8c:eb:23:1f:fb:82: df:45:03:c5:28:90:c9:4d:79:6b:28:6e:67:19:33:83:70:d5: 37:78:79:ce:61:3f:96:5d:7b:1c:a3:ab:ba:0c:6e:9e:68:b1: c6:f0:32:5c:83:f4:0c:3d:d5:8e:72:9e:ec:50:b8:19:1a:85: 10:85:b0:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfiaMS6KGgGkkrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJkZjM2YzQtZmE2Yy00MmRkLTlmNWUtYmUzOGE1ZTQzMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpn9/iKl26o6ISscH04PisdsMhh32d+LGuks QGbolmS1Pu8y2so+8ug4ByKDmBkCuDS0fHDlwpe9gcWwZsbBAecj9/F9teNkssdt bPVkeO0g9SoDIm3ugjgaOK3PiVmU9KdB9CPfUq+OqxzhJuM6tiEbBpQtksFl6f5S 3G/drdQl+tBf9sPUiQM4xbgZAk1m29J6G315tNacwrz+wZxv2zco45Ye7YuRC9GI mk0I2v5zVNd2PN2I3+nx3TiD5b3lguS9OPtCNMDicr0K7tlNArkNLMMI5t0pwg0y rUWEAXNiXfpB6JBYNDedjX0lkZ3fc70d9AmMbmGngbVy+f28HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCKoVHOBxZjFgXooZ2utG7ho+YHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzY5ZTMzZjItOTYyYi0z YTBhLWJkOGUtZTNjYmM4NzA4YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjVchcpKSO1RumdfmSty5B6RxHoC/k2C2/l3wP8S/aq8MM6cmGOJcfc 5asabeN0AiK8Hj2BBRb8I5439sHnWVsWHeB8KQEKRozbYDldLn/G/4aV6t6KJm8z +fyGRfiu40lumtYTcsf8iIGIn135aXYZj+hn4ISS47BuO8mPI9gC7pnr0fLqvcF0 WiaK5mduhNxxDPRZc8CGaZMthafe6HOcNbzOuYSLTnooaq2K4RogY9IrpdvYUIas A8T5ToEl8YzrIx/7gt9FA8UokMlNeWsobmcZM4Nw1Td4ec5hP5Zdexyjq7oMbp5o scbwMlyD9Aw91Y5ynuxQuBkahRCFsCg= -----END CERTIFICATE-----Generated at Fri Oct 23 18:45:36 2026 by rpki-client