$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac80e38-2866-3ad8-840c-d9dc5b278b32.roa File: aac80e38-2866-3ad8-840c-d9dc5b278b32.roa (raw, json) Hash identifier: uC7o21nQJ0bGC6gQrG6d1kfHoq11pN+LCCzZj7w849Q= Subject key identifier: 62:5B:D8:25:50:7F:4C:40:2B:7B:8C:EC:2D:7E:11:1F:C5:DE:94:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7A2CB8D9516BCF860F4F9380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac80e38-2866-3ad8-840c-d9dc5b278b32.roa Signing time: Mon 12 Oct 2026 11:54:11 +0000 ROA not before: Mon 12 Oct 2026 11:54:11 +0000 ROA not after: Sun 10 Jan 2027 12:54:11 +0000 asID: 32787 IP address blocks: 23.57.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:2c:b8:d9:51:6b:cf:86:0f:4f:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 11:54:11 2026 GMT Not After : Jan 10 12:54:11 2027 GMT Subject: CN=089d3821-cfbb-4ba9-9fc8-781c517f1877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:52:6c:3b:cf:63:55:51:70:30:8c:b6:2e:df: 23:74:7c:03:cb:e3:a7:b7:8b:d5:af:66:23:c9:74: 75:a7:3c:82:0f:01:12:b7:bc:12:ba:89:08:06:07: 73:b3:8a:cb:21:87:f3:59:ee:0f:77:da:dd:0f:d8: 80:1c:f3:2e:25:ab:4d:e5:98:1c:bc:e1:ab:d1:81: 80:c1:fc:1c:3b:49:6d:81:26:b0:44:1c:83:af:51: 26:fc:db:02:cf:91:c5:19:16:89:0e:ec:05:62:47: e4:22:53:74:f6:23:92:eb:66:7a:02:ae:65:44:d9: 91:67:53:03:77:96:67:05:44:56:31:ca:ba:36:58: 9d:6a:41:09:03:a1:0f:fd:e0:4b:46:d8:19:73:ad: c7:2a:13:13:66:58:aa:cb:70:35:8b:e3:12:fb:88: 57:72:60:39:5d:3c:52:4e:17:15:13:ea:ee:a0:98: 7f:29:89:e7:97:9e:ba:24:0f:60:68:86:be:dd:31: 4d:29:67:f6:fb:c8:00:6a:36:77:45:26:1d:22:fa: b8:23:8f:fb:73:c0:ab:5a:c6:de:24:f7:f0:37:c5: ee:aa:f0:18:ad:37:be:10:c9:66:4c:ae:83:8e:c8: c6:e4:a9:5c:fd:73:35:03:86:00:33:f2:c2:ba:92: f0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5B:D8:25:50:7F:4C:40:2B:7B:8C:EC:2D:7E:11:1F:C5:DE:94:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac80e38-2866-3ad8-840c-d9dc5b278b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.57.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:7d:88:3c:3c:99:ee:ad:31:63:8a:d3:0a:0d:98:0b:9c:00: ad:1c:08:02:a1:a5:83:bc:e4:a2:40:5f:dd:17:de:c9:4f:c6: 29:52:d6:66:bc:bf:9d:9d:62:45:fa:6c:da:98:92:38:c6:30: 0c:3d:55:21:c5:0e:8f:98:ef:58:82:4f:68:3f:19:00:6d:5d: 7c:53:3f:a0:c6:6c:e1:2f:78:57:96:0b:dd:c4:d3:23:3f:3f: 85:3e:eb:1a:a3:03:0e:be:e5:c3:f3:da:6e:40:74:81:81:b0: ef:f0:bb:46:f8:ac:f7:2c:af:83:31:21:4f:51:2f:59:fb:ec: 11:1c:a5:11:2a:45:0a:cd:a6:ee:f5:ad:58:bd:f7:15:a0:58: c0:96:8b:9d:0d:6a:8b:8c:bf:81:37:4e:09:5a:46:a6:9d:96: 2d:3f:e4:d9:c4:56:91:18:de:7d:cb:0b:4d:3b:69:88:07:b4: e7:06:7c:67:e6:b8:83:5d:e0:6b:5e:df:28:3a:29:e8:1c:7b: 83:8b:be:93:9a:49:74:14:ce:ff:69:5b:27:ce:6c:45:4e:a6: 94:30:af:1b:af:94:c0:da:92:aa:81:26:00:1e:5b:51:c4:de: ec:ac:59:ed:2e:f2:5e:4d:b2:e9:71:a4:53:bd:2e:75:71:57: f7:03:44:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96LLjZUWvPhg9Pk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMjExNTQxMVoXDTI3MDExMDEyNTQxMVowLzEtMCsGA1UEAxMk MDg5ZDM4MjEtY2ZiYi00YmE5LTlmYzgtNzgxYzUxN2YxODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVJsO89jVVFwMIy2Lt8jdHwDy+Ont4vVr2Yj yXR1pzyCDwESt7wSuokIBgdzs4rLIYfzWe4Pd9rdD9iAHPMuJatN5ZgcvOGr0YGA wfwcO0ltgSawRByDr1Em/NsCz5HFGRaJDuwFYkfkIlN09iOS62Z6Aq5lRNmRZ1MD d5ZnBURWMcq6NlidakEJA6EP/eBLRtgZc63HKhMTZliqy3A1i+MS+4hXcmA5XTxS ThcVE+ruoJh/KYnnl566JA9gaIa+3TFNKWf2+8gAajZ3RSYdIvq4I4/7c8CrWsbe JPfwN8XuqvAYrTe+EMlmTK6DjsjG5Klc/XM1A4YAM/LCupLw8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJb2CVQf0xAK3uM7C1+ER/F3pTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWFjODBlMzgtMjg2Ni0z YWQ4LTg0MGMtZDlkYzViMjc4YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd9iDw8me6tMWOK0woNmAucAK0cCAKhpYO85KJAX90X3slPxilS1ma8 v52dYkX6bNqYkjjGMAw9VSHFDo+Y71iCT2g/GQBtXXxTP6DGbOEveFeWC93E0yM/ P4U+6xqjAw6+5cPz2m5AdIGBsO/wu0b4rPcsr4MxIU9RL1n77BEcpREqRQrNpu71 rVi99xWgWMCWi50NaouMv4E3TglaRqadli0/5NnEVpEY3n3LC007aYgHtOcGfGfm uINd4Gte3yg6Kegce4OLvpOaSXQUzv9pWyfObEVOppQwrxuvlMDakqqBJgAeW1HE 3uysWe0u8l5NsulxpFO9LnVxV/cDRNY= -----END CERTIFICATE-----Generated at Wed Oct 21 21:12:55 2026 by rpki-client