$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97b49172-990e-3419-9f7e-3da2c27ce25c.roa File: 97b49172-990e-3419-9f7e-3da2c27ce25c.roa (raw, json) Hash identifier: QhO+REVCq+wj3muYK2JZoeqLBIirRQhWPeAt2Mj0R7Q= Subject key identifier: CD:7A:A2:CD:6E:62:7F:45:7C:A0:E8:09:20:DB:BD:7B:60:84:3D:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8F3DB11043291FEA0CC1F580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97b49172-990e-3419-9f7e-3da2c27ce25c.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 24319 IP address blocks: 23.37.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b1:10:43:29:1f:ea:0c:c1:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=55358a91-bb72-40e9-b1ba-dc1371552caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:cf:d0:cf:0e:79:b7:aa:97:33:6a:f2:f3: 58:90:0d:68:24:94:12:29:4c:a6:73:c1:26:e8:c1: 52:a5:0f:86:b9:9f:ee:ab:55:77:31:b3:26:d3:7b: 37:95:76:10:8e:fc:56:3e:68:a9:40:41:b0:0d:61: d6:01:65:07:05:5d:91:77:f1:fd:c6:2b:4f:30:37: a4:0c:6a:e2:f5:bb:e5:18:19:c4:47:b3:87:13:4a: 26:82:cc:69:d4:ca:f1:4b:fd:56:99:ad:c1:fc:c2: 4f:1a:45:24:3f:66:0c:78:e7:65:a8:12:61:5d:06: 55:45:5c:5b:38:5e:5f:55:88:1c:46:4a:4d:f2:09: 59:b7:67:ec:20:a8:b4:77:0c:c1:a1:7c:5d:a3:00: 24:f8:b2:8f:07:a8:f5:44:23:0f:5d:8d:10:dd:85: 9d:a9:5a:88:d0:d2:4f:c7:36:5b:9a:ba:6b:54:86: c9:26:2a:d4:53:d9:6b:d5:6f:0d:2f:41:ea:65:b9: c2:2b:46:87:6a:f0:10:a5:d0:10:ee:98:82:28:66: 17:1a:cc:68:32:7d:0a:0b:d1:1d:98:3d:f9:59:f1: 3f:f6:dd:e6:3d:6f:08:6b:f7:1a:0e:0f:4e:33:a6: 7b:ef:25:b1:5d:4f:e6:03:3b:d1:dd:e3:eb:73:91: 0d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7A:A2:CD:6E:62:7F:45:7C:A0:E8:09:20:DB:BD:7B:60:84:3D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97b49172-990e-3419-9f7e-3da2c27ce25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ed:11:36:24:b6:5e:ba:ed:64:f8:ed:7a:6d:b7:2d:f5:3d: cc:48:c6:18:06:5d:0d:a8:e9:64:5d:6e:e2:93:f2:74:89:0b: d6:32:5e:1b:5f:8f:41:10:a5:e7:1e:9a:49:fd:01:65:6b:97: f4:5a:80:53:95:72:3a:af:0e:56:5c:f1:90:5f:39:65:7f:4a: 8c:4a:f0:d4:b9:4f:4d:3b:1c:81:75:94:39:54:01:41:f7:5b: 5d:a3:e3:59:fa:f0:40:84:50:59:9a:b3:12:9b:1f:31:75:90: e1:25:30:b7:20:00:7c:91:cc:7b:44:14:c5:11:c3:f5:5d:19: 04:90:98:a2:52:59:d9:5f:ce:4d:6f:83:c1:e1:83:b5:26:4e: 8b:a1:95:bf:99:f6:25:66:eb:2e:0b:b8:a0:54:57:5b:55:04: 5d:46:c2:7d:72:92:d1:33:cc:d2:b3:cc:6e:8c:39:b6:b9:3d: ae:4c:43:fe:1d:32:68:77:7e:04:c5:88:3c:a1:f0:98:3b:84: aa:21:15:89:db:9f:6c:24:76:fb:bb:e9:25:3d:99:8e:64:7a: 37:6a:be:9f:db:af:7c:0e:e2:66:f5:fb:20:ce:3f:68:54:89: 3b:6f:8b:5f:99:cf:da:18:fe:5a:ff:43:5a:3b:4d:f5:21:30: f7:54:d9:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbEQQykf6gzB9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NTUzNThhOTEtYmI3Mi00MGU5LWIxYmEtZGMxMzcxNTUyY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOPP0M8OebeqlzNq8vNYkA1oJJQSKUymc8Em 6MFSpQ+GuZ/uq1V3MbMm03s3lXYQjvxWPmipQEGwDWHWAWUHBV2Rd/H9xitPMDek DGri9bvlGBnER7OHE0omgsxp1MrxS/1Wma3B/MJPGkUkP2YMeOdlqBJhXQZVRVxb OF5fVYgcRkpN8glZt2fsIKi0dwzBoXxdowAk+LKPB6j1RCMPXY0Q3YWdqVqI0NJP xzZbmrprVIbJJirUU9lr1W8NL0HqZbnCK0aHavAQpdAQ7piCKGYXGsxoMn0KC9Ed mD35WfE/9t3mPW8Ia/caDg9OM6Z77yWxXU/mAzvR3ePrc5ENrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM16os1uYn9FfKDoCSDbvXtghD2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTdiNDkxNzItOTkwZS0z NDE5LTlmN2UtM2RhMmMyN2NlMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/tETYktl667WT47Xptty31PcxIxhgGXQ2o6WRdbuKT8nSJC9YyXhtf j0EQpecemkn9AWVrl/RagFOVcjqvDlZc8ZBfOWV/SoxK8NS5T007HIF1lDlUAUH3 W12j41n68ECEUFmasxKbHzF1kOElMLcgAHyRzHtEFMURw/VdGQSQmKJSWdlfzk1v g8Hhg7UmTouhlb+Z9iVm6y4LuKBUV1tVBF1Gwn1yktEzzNKzzG6MOba5Pa5MQ/4d Mmh3fgTFiDyh8Jg7hKohFYnbn2wkdvu76SU9mY5kejdqvp/br3wO4mb1+yDOP2hU iTtvi1+Zz9oY/lr/Q1o7TfUhMPdU2ZU= -----END CERTIFICATE-----Generated at Mon Oct 26 06:26:54 2026 by rpki-client