$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7f0fd6e-4690-37fa-b70c-25aa59506100.roa File: a7f0fd6e-4690-37fa-b70c-25aa59506100.roa (raw, json) Hash identifier: e6kVuEpqxgnyC+egP+DBLOLH3bFZY7AYtmkmeVR6Lgk= Subject key identifier: B0:5D:3F:EA:96:AB:A4:4E:0C:85:7E:FB:A8:F0:2D:40:B0:35:08:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F43DD5C60DA7D38B00822E180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7f0fd6e-4690-37fa-b70c-25aa59506100.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.49.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:5c:60:da:7d:38:b0:08:22:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=0346fc0d-81fc-4eb1-ab78-d1ffd6056040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:e7:32:2d:8b:1e:07:cc:16:de:f7:98:3b: 3a:d7:69:91:93:79:5f:b0:34:5f:37:56:b3:91:d8: 95:25:6d:cc:9a:20:77:90:b8:0d:a9:8f:bd:da:5c: 86:29:a0:17:b9:16:df:0c:c9:8f:aa:85:83:f8:4b: 6b:dc:1a:c3:31:38:7b:7d:05:ba:7c:bf:23:a0:4b: c3:eb:13:d4:62:97:61:f0:ea:da:43:d7:17:d9:35: 93:aa:1f:15:ab:8f:3c:ba:87:f3:62:24:fa:92:d0: ff:32:fa:5f:65:ce:72:9a:e1:55:61:ef:15:f4:d4: 00:05:52:42:62:d5:fc:c3:8e:42:ab:23:55:70:8c: 2b:37:aa:e8:9a:c0:21:1e:91:87:d2:2b:40:f0:12: 3d:43:18:56:4e:8a:fa:c8:38:1b:82:8b:88:aa:a2: f2:c5:48:cd:62:47:2f:27:4e:64:8b:9e:43:83:41: c5:46:e2:a5:7c:7c:b2:98:d2:52:52:71:79:93:bb: 02:0d:5d:75:ee:ab:b7:13:5b:e4:93:37:c7:b8:60: 40:a3:63:8a:0a:cb:36:fa:e9:01:a2:a3:84:7b:20: 61:51:ce:e0:c1:2a:fd:42:63:c8:0b:48:83:b9:f6: 1e:5a:8f:47:2c:29:25:9e:1f:5f:65:40:ed:0a:fa: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5D:3F:EA:96:AB:A4:4E:0C:85:7E:FB:A8:F0:2D:40:B0:35:08:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7f0fd6e-4690-37fa-b70c-25aa59506100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6a:4d:31:70:94:bb:b7:62:79:ef:7c:33:57:b8:f3:46:eb: e4:9d:f8:ac:39:74:b5:4c:9b:85:3d:96:27:ac:42:ab:93:03: e6:47:77:59:b3:dd:cc:35:cb:d3:98:4c:68:fe:c4:08:84:50: ad:6a:14:90:6e:7f:7a:23:4a:58:94:be:78:3f:ec:ff:cc:0b: 93:9b:70:d4:6c:4a:75:c2:18:80:c1:3c:1d:55:34:43:83:a4: 8d:2c:1a:fb:25:b2:1b:01:0e:09:69:fd:9c:b9:9e:37:00:43: 25:2e:d3:d1:1c:44:33:a5:d4:12:c6:10:8a:e6:c5:98:dc:24: 62:45:22:67:c5:95:78:e9:92:19:bc:c3:20:92:d8:14:1c:bd: ab:81:3a:c5:74:9b:62:42:40:30:0c:46:5d:f1:a4:c5:ea:d0: b5:1e:dc:68:66:6c:b3:a9:e2:aa:4f:0f:6a:08:de:2e:34:c7: 52:96:c9:ca:9c:65:3d:40:ae:c5:8e:b9:87:f1:27:d4:c9:7d: de:cf:13:54:74:a7:60:18:fc:9c:bc:85:d1:87:82:6d:f5:45: cf:4c:aa:a5:67:e0:3a:e2:a8:12:a8:ae:0d:b9:ff:a8:ec:91: bd:76:dc:62:d9:04:1c:d9:ec:da:2f:04:fb:2c:53:7f:f1:72: f5:be:cb:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3Vxg2n04sAgi4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MDM0NmZjMGQtODFmYy00ZWIxLWFiNzgtZDFmZmQ2MDU2MDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCrnMi2LHgfMFt73mDs612mRk3lfsDRfN1az kdiVJW3MmiB3kLgNqY+92lyGKaAXuRbfDMmPqoWD+Etr3BrDMTh7fQW6fL8joEvD 6xPUYpdh8OraQ9cX2TWTqh8Vq488uofzYiT6ktD/MvpfZc5ymuFVYe8V9NQABVJC YtX8w45CqyNVcIwrN6romsAhHpGH0itA8BI9QxhWTor6yDgbgouIqqLyxUjNYkcv J05ki55Dg0HFRuKlfHyymNJSUnF5k7sCDV117qu3E1vkkzfHuGBAo2OKCss2+ukB oqOEeyBhUc7gwSr9QmPIC0iDufYeWo9HLCklnh9fZUDtCvoEfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBdP+qWq6RODIV++6jwLUCwNQiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTdmMGZkNmUtNDY5MC0z N2ZhLWI3MGMtMjVhYTU5NTA2MTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhqTTFwlLu3YnnvfDNXuPNG6+Sd+Kw5dLVMm4U9liesQquTA+ZHd1mz 3cw1y9OYTGj+xAiEUK1qFJBuf3ojSliUvng/7P/MC5ObcNRsSnXCGIDBPB1VNEOD pI0sGvslshsBDglp/Zy5njcAQyUu09EcRDOl1BLGEIrmxZjcJGJFImfFlXjpkhm8 wyCS2BQcvauBOsV0m2JCQDAMRl3xpMXq0LUe3GhmbLOp4qpPD2oI3i40x1KWycqc ZT1ArsWOuYfxJ9TJfd7PE1R0p2AY/Jy8hdGHgm31Rc9MqqVn4DriqBKorg25/6js kb123GLZBBzZ7NovBPssU3/xcvW+y2c= -----END CERTIFICATE-----Generated at Tue Oct 27 07:12:20 2026 by rpki-client