$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9ee21dd-8971-3caf-aada-5528dda5b951.roa File: a9ee21dd-8971-3caf-aada-5528dda5b951.roa (raw, json) Hash identifier: b4xQOCFdNeDhBvFJOuovA8YEz8geyMyixGp8xiW1pTg= Subject key identifier: A3:BC:6B:C1:7D:29:2F:88:31:8B:8C:1F:67:83:2A:40:0F:84:3B:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F57680302CF9083A440EF9A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9ee21dd-8971-3caf-aada-5528dda5b951.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.210.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:03:02:cf:90:83:a4:40:ef:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=2a366d9e-e505-49b3-b7ab-02473155d0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:20:29:e1:13:db:2c:73:74:fb:66:35:95: 56:05:db:a4:6d:df:38:12:e3:7e:6c:f0:be:f5:25: e0:a2:a1:ed:8a:d3:26:7b:a3:df:95:e9:2b:6d:c2: 26:79:6b:fc:19:c4:09:16:3d:aa:19:17:1d:97:e7: 7e:f9:93:3e:a2:cc:f2:3c:05:55:73:38:1f:63:c2: 65:9d:2f:1d:31:2a:1c:ff:6f:b0:1e:7d:ed:cd:a3: fb:4c:4e:2c:d0:66:61:a9:a6:5b:77:63:01:9c:e0: 6c:5c:0c:f5:89:34:e4:ef:4f:2b:c7:0c:17:4f:b9: 7a:5d:e9:72:2b:0c:e9:b4:5f:30:34:95:d7:a2:49: aa:76:7b:42:fe:05:18:a4:5a:4e:bc:00:07:9e:a8: 28:94:61:85:aa:6b:52:38:99:66:4b:16:31:62:c4: b2:55:e0:4e:28:37:9e:88:62:c0:45:c6:7b:c7:f7: ed:d9:48:c7:1f:1b:17:88:9d:8a:d9:e9:0b:cf:57: 96:a3:fc:f4:83:ef:11:41:48:c3:a8:fa:16:68:3e: 90:4e:c2:35:de:ce:f9:6e:5d:65:f5:68:13:f0:7f: 04:01:e4:3d:b7:ad:38:e6:47:ba:a3:ab:34:97:4a: b1:65:6a:4f:5c:60:3d:56:2d:4c:ac:03:48:4b:40: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BC:6B:C1:7D:29:2F:88:31:8B:8C:1F:67:83:2A:40:0F:84:3B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9ee21dd-8971-3caf-aada-5528dda5b951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3d:89:27:65:c6:04:f4:ee:bc:33:65:b8:c2:d5:2a:a1:ba: 56:0e:fa:ad:20:73:a2:f9:1e:03:97:87:12:28:ee:c6:5e:b7: 2a:e0:68:e7:bd:77:9c:74:d7:87:47:1d:29:a9:7a:18:6b:1a: 24:f1:61:aa:8a:6d:08:94:93:25:82:e1:42:c4:0e:b6:4a:d6: 72:f8:e2:f2:6f:e4:05:62:87:07:d0:a1:bd:e4:08:91:00:a6: 04:54:0a:d6:2e:e2:86:66:c4:5b:e4:21:b7:70:ac:fc:4f:e2: 39:74:02:ce:2d:1c:10:00:7b:d5:3a:b5:a4:0e:aa:56:81:7d: 3e:2f:37:c2:2f:1f:4e:55:77:7a:08:72:1b:c8:55:29:c1:3a: 46:b6:2c:de:57:06:c2:90:cd:5d:3a:c4:00:82:df:19:d1:a4: 8b:f8:06:47:a7:40:4d:d4:d8:93:dd:a4:71:0e:0a:ee:a9:ed: 1f:01:63:41:f9:6c:37:76:20:7e:88:c8:40:78:d4:ea:36:59: 2d:53:f2:16:f6:ee:d7:fb:fb:e6:06:54:ae:51:6b:f4:2e:dd: 58:b4:6f:9a:f5:ac:ec:7f:b4:78:f8:98:7f:2f:9a:f0:64:38: 85:36:cc:2d:2d:11:91:29:85:22:24:a7:35:21:6d:22:b1:01: 7d:8d:3a:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAMCz5CDpEDvmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MmEzNjZkOWUtZTUwNS00OWIzLWI3YWItMDI0NzMxNTVkMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPkgKeET2yxzdPtmNZVWBdukbd84EuN+bPC+ 9SXgoqHtitMme6PflekrbcImeWv8GcQJFj2qGRcdl+d++ZM+oszyPAVVczgfY8Jl nS8dMSoc/2+wHn3tzaP7TE4s0GZhqaZbd2MBnOBsXAz1iTTk708rxwwXT7l6Xely KwzptF8wNJXXokmqdntC/gUYpFpOvAAHnqgolGGFqmtSOJlmSxYxYsSyVeBOKDee iGLARcZ7x/ft2UjHHxsXiJ2K2ekLz1eWo/z0g+8RQUjDqPoWaD6QTsI13s75bl1l 9WgT8H8EAeQ9t6045ke6o6s0l0qxZWpPXGA9Vi1MrANIS0C4LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO8a8F9KS+IMYuMH2eDKkAPhDtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTllZTIxZGQtODk3MS0z Y2FmLWFhZGEtNTUyOGRkYTViOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9IHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE9iSdlxgT07rwzZbjC1SqhulYO+q0gc6L5HgOXhxIo7sZetyrgaOe9 d5x014dHHSmpehhrGiTxYaqKbQiUkyWC4ULEDrZK1nL44vJv5AVihwfQob3kCJEA pgRUCtYu4oZmxFvkIbdwrPxP4jl0As4tHBAAe9U6taQOqlaBfT4vN8IvH05Vd3oI chvIVSnBOka2LN5XBsKQzV06xACC3xnRpIv4BkenQE3U2JPdpHEOCu6p7R8BY0H5 bDd2IH6IyEB41Oo2WS1T8hb27tf7++YGVK5Ra/Qu3Vi0b5r1rOx/tHj4mH8vmvBk OIU2zC0tEZEphSIkpzUhbSKxAX2NOrM= -----END CERTIFICATE-----Generated at Mon Oct 26 13:55:38 2026 by rpki-client