$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf7cf78-efe8-33fd-bf1c-3cd4206791fe.roa File: baf7cf78-efe8-33fd-bf1c-3cd4206791fe.roa (raw, json) Hash identifier: fEpQAFHcIv9TKToA9PBIM4uN6nsvJJxlM+2amsybd8Q= Subject key identifier: 3D:6D:57:6C:C0:82:3D:E2:CE:2F:A1:C8:7B:21:53:FB:AC:09:FE:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985787E75DF53578BCD791B Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf7cf78-efe8-33fd-bf1c-3cd4206791fe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.203.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:78:7e:75:df:53:57:8b:cd:79:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bf97384d-b5f9-46ab-89bb-2ed3820d0cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c6:54:f4:18:3b:cb:dd:62:c1:00:99:64:09: 45:15:0a:5d:9a:66:85:33:c6:5c:2b:17:7d:75:c4: 47:85:2e:7a:70:a5:0a:f1:37:b5:24:b7:4f:89:a3: 21:95:ae:4d:23:93:b1:f0:2c:28:f5:c7:50:a4:08: f8:52:ca:29:07:58:94:ed:62:76:da:a1:f5:c1:d1: 32:56:d3:52:d7:7f:ab:07:3c:01:1e:06:2a:d4:15: 68:ba:9f:14:0a:ad:6f:53:a6:25:6d:3f:63:a1:71: 0f:99:31:fe:8c:88:ec:48:fc:20:77:a9:86:69:bb: 1a:52:a6:8d:2c:10:a4:8a:7a:c1:3f:df:dd:c2:ed: e7:80:37:13:05:57:65:88:a1:dd:4d:b2:2a:3b:94: 7a:fd:40:a7:d8:78:2d:bb:78:22:1a:16:16:ce:92: 8f:1e:23:59:37:ce:6b:30:d3:ee:c5:ca:ac:fb:19: 1d:9a:6a:53:cc:02:da:97:38:66:c1:b1:39:d6:c5: 8d:d7:3d:6c:c4:14:b2:45:0a:60:dc:b0:1d:ae:33: df:ca:d5:32:a9:4d:00:f7:8b:05:ad:f8:a3:b1:b6: 5a:b8:93:97:ea:b2:ab:a0:e8:28:a6:20:84:d4:e1: d5:75:7f:79:0d:df:29:6e:f2:a9:06:f6:1b:c3:ca: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6D:57:6C:C0:82:3D:E2:CE:2F:A1:C8:7B:21:53:FB:AC:09:FE:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf7cf78-efe8-33fd-bf1c-3cd4206791fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6c:92:c3:bb:0d:7f:4d:18:56:87:2e:bf:df:a5:93:a3:de: 4e:d1:0f:7f:25:b4:2a:19:4b:39:89:dd:37:ce:76:0f:75:a9: 11:9a:70:e6:c9:2b:3c:86:3a:b7:89:60:82:5b:b3:ef:58:f8: 24:bc:fd:59:cf:04:6b:42:5c:07:b5:46:f0:53:68:82:b0:90: 85:ea:cd:03:0c:d0:7b:97:a9:cd:5d:36:f2:7a:4f:21:dd:cd: 04:4b:9c:e7:5c:4e:05:05:53:fa:e2:cb:89:21:f1:b4:8d:26: 36:f0:24:7e:16:d2:8a:b8:b1:56:c9:8d:1b:7b:e2:e5:20:0f: b3:d9:b4:1a:0a:0f:4b:b2:95:4e:5a:98:dd:4a:04:14:6c:78: 71:e1:04:56:a3:75:d6:00:d6:4d:30:c8:78:19:7a:87:9c:3c: bd:b0:1b:9d:4e:df:80:47:d0:11:41:08:ad:c9:35:18:fa:18: f6:19:c9:01:d4:bf:67:c0:d4:ae:cd:68:06:4f:22:fd:a7:45: 5b:73:cc:47:3c:8d:49:37:6b:b0:31:cc:cc:7e:bc:b2:3a:25: 53:1c:6f:76:c0:4f:68:fb:51:eb:86:22:d8:17:26:e0:98:19: 74:49:b2:02:d1:34:b1:3e:07:24:bb:a3:7f:8f:c0:ca:32:80: 1c:be:3a:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhXh+dd9TV4vNeRswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmY5NzM4NGQtYjVmOS00NmFiLTg5YmItMmVkMzgyMGQwY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsZU9Bg7y91iwQCZZAlFFQpdmmaFM8ZcKxd9 dcRHhS56cKUK8Te1JLdPiaMhla5NI5Ox8Cwo9cdQpAj4UsopB1iU7WJ22qH1wdEy VtNS13+rBzwBHgYq1BVoup8UCq1vU6YlbT9joXEPmTH+jIjsSPwgd6mGabsaUqaN LBCkinrBP9/dwu3ngDcTBVdliKHdTbIqO5R6/UCn2Hgtu3giGhYWzpKPHiNZN85r MNPuxcqs+xkdmmpTzALalzhmwbE51sWN1z1sxBSyRQpg3LAdrjPfytUyqU0A94sF rfijsbZauJOX6rKroOgopiCE1OHVdX95Dd8pbvKpBvYbw8otAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1tV2zAgj3izi+hyHshU/usCf5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmFmN2NmNzgtZWZlOC0z M2ZkLWJmMWMtM2NkNDIwNjc5MWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8uUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5sksO7DX9NGFaHLr/fpZOj3k7RD38ltCoZSzmJ3TfOdg91qRGacObJ KzyGOreJYIJbs+9Y+CS8/VnPBGtCXAe1RvBTaIKwkIXqzQMM0HuXqc1dNvJ6TyHd zQRLnOdcTgUFU/riy4kh8bSNJjbwJH4W0oq4sVbJjRt74uUgD7PZtBoKD0uylU5a mN1KBBRseHHhBFajddYA1k0wyHgZeoecPL2wG51O34BH0BFBCK3JNRj6GPYZyQHU v2fA1K7NaAZPIv2nRVtzzEc8jUk3a7AxzMx+vLI6JVMcb3bAT2j7UeuGItgXJuCY GXRJsgLRNLE+ByS7o3+PwMoygBy+OiQ= -----END CERTIFICATE-----Generated at Sun Oct 25 07:56:21 2026 by rpki-client