$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86be6470-c3bf-3757-811f-de1cc563e2b8.roa File: 86be6470-c3bf-3757-811f-de1cc563e2b8.roa (raw, json) Hash identifier: 3nxt0ufphaHdZILyo48QKp9HkmgUQJkPlEITE6E+rtI= Subject key identifier: 0D:FF:1A:12:8C:31:7F:4D:9D:D8:48:33:51:0B:34:7E:4B:1D:83:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D6DD78B988C5B037E3480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86be6470-c3bf-3757-811f-de1cc563e2b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.192.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:6d:d7:8b:98:8c:5b:03:7e:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d52b95ab-cb7c-4a76-a436-64748f13e559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:55:a5:de:cd:c6:16:aa:bf:9a:c7:28:3f:9f: 27:24:07:ac:45:1d:e3:fc:a4:05:98:75:33:f7:57: c0:5d:a4:9f:81:71:58:67:2c:11:6e:17:84:37:ba: f2:17:ba:6d:bc:2c:6f:dd:b7:db:ec:6d:89:5e:ab: 97:87:ba:c4:bb:41:21:81:a9:87:c6:30:6e:82:dd: 95:8d:27:61:6a:94:a3:32:1e:ea:12:33:60:00:75: ea:e2:78:92:f2:c8:4b:2d:59:69:84:a5:a4:e2:d2: c6:6c:b3:10:44:65:66:fd:d7:35:be:72:0f:f3:d5: 36:3f:bc:7a:e7:32:59:f5:ad:12:d9:58:7f:71:af: ec:08:b8:fe:2e:61:85:4b:de:d6:92:fd:78:4f:7a: b0:79:53:47:c5:1a:f2:07:e2:09:49:2b:31:b9:b0: f0:49:08:ad:6a:90:d8:c4:2a:d3:6e:8b:0d:59:d1: 64:61:1f:0a:c8:df:97:c1:06:63:22:b7:da:d5:64: cb:ce:6e:e9:89:a2:2a:a2:e1:a3:a1:09:04:59:d2: 8b:6a:d9:cd:1b:51:80:e8:ef:0b:06:c0:8e:a6:60: 48:5c:ef:ac:92:19:b2:bc:1a:ec:93:a5:07:d8:59: e0:cd:68:e1:9c:00:65:04:91:89:fe:57:3e:d0:0a: 0e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FF:1A:12:8C:31:7F:4D:9D:D8:48:33:51:0B:34:7E:4B:1D:83:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86be6470-c3bf-3757-811f-de1cc563e2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:70:8a:6b:55:03:bc:3d:ea:78:16:d3:54:3f:f8:a3:be:72: 4b:f5:dc:56:dd:1b:65:d8:10:f0:ab:30:a2:73:3b:bd:46:a2: 76:16:4a:1b:d6:63:a4:e8:b1:99:79:8b:89:63:6a:f7:ee:6b: 5f:23:e5:84:7a:5a:4f:3d:ca:ea:b5:d1:bf:d6:ca:ad:3c:40: c4:e4:a8:27:3c:9b:d9:63:30:47:09:16:e5:9f:a3:5f:c5:a0: f0:60:80:eb:68:b5:25:53:22:a7:c4:ea:b8:c7:3b:88:34:78: 3e:7d:ab:92:a4:1a:bb:67:23:66:2e:0d:3d:29:6e:64:c6:a2: 0c:17:c5:c7:90:7f:93:c5:66:85:e5:47:a3:d0:82:0c:09:75: 6e:45:b8:a3:c7:13:dd:b1:88:16:d1:d7:87:ca:d5:e0:ed:7b: 10:6d:df:ed:63:a5:1c:21:c5:27:cf:c9:8e:4b:39:8e:31:39: 96:e1:d2:c3:ad:9f:49:8d:30:f5:b1:1e:7f:44:87:b3:4e:7b: 0b:42:c4:5a:03:a6:66:f1:9b:ff:48:a9:3e:ff:b7:7f:64:a0: 90:ce:fc:5f:cb:93:1d:1d:37:39:86:09:fb:04:aa:2a:fb:5b: 82:82:b9:8b:f7:e7:2f:6f:1b:59:61:2f:73:b3:22:74:10:32: 80:33:84:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfW3Xi5iMWwN+NIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDUyYjk1YWItY2I3Yy00YTc2LWE0MzYtNjQ3NDhmMTNlNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Wl3s3GFqq/mscoP58nJAesRR3j/KQFmHUz 91fAXaSfgXFYZywRbheEN7ryF7ptvCxv3bfb7G2JXquXh7rEu0EhgamHxjBugt2V jSdhapSjMh7qEjNgAHXq4niS8shLLVlphKWk4tLGbLMQRGVm/dc1vnIP89U2P7x6 5zJZ9a0S2Vh/ca/sCLj+LmGFS97Wkv14T3qweVNHxRryB+IJSSsxubDwSQitapDY xCrTbosNWdFkYR8KyN+XwQZjIrfa1WTLzm7piaIqouGjoQkEWdKLatnNG1GA6O8L BsCOpmBIXO+skhmyvBrsk6UH2FngzWjhnABlBJGJ/lc+0AoOBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3/GhKMMX9NndhIM1ELNH5LHYOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZiZTY0NzAtYzNiZi0z NzU3LTgxMWYtZGUxY2M1NjNlMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8C9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhwimtVA7w96ngW01Q/+KO+ckv13FbdG2XYEPCrMKJzO71GonYWShvW Y6TosZl5i4ljavfua18j5YR6Wk89yuq10b/Wyq08QMTkqCc8m9ljMEcJFuWfo1/F oPBggOtotSVTIqfE6rjHO4g0eD59q5KkGrtnI2YuDT0pbmTGogwXxceQf5PFZoXl R6PQggwJdW5FuKPHE92xiBbR14fK1eDtexBt3+1jpRwhxSfPyY5LOY4xOZbh0sOt n0mNMPWxHn9Eh7NOewtCxFoDpmbxm/9IqT7/t39koJDO/F/Lkx0dNzmGCfsEqir7 W4KCuYv35y9vG1lhL3OzInQQMoAzhKs= -----END CERTIFICATE-----Generated at Sat Oct 24 10:44:49 2026 by rpki-client