$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ceae9b47-1934-365c-a5d2-dede793a8a17.roa File: ceae9b47-1934-365c-a5d2-dede793a8a17.roa (raw, json) Hash identifier: LfG/qKnpgxglm2+QqlG0hnZqZuLWozIzgNEzcf4pRCk= Subject key identifier: 04:11:DB:7E:15:F1:B4:08:3F:51:75:BC:B1:57:35:87:DE:F9:29:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D53887AE9792381F71C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ceae9b47-1934-365c-a5d2-dede793a8a17.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.62.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:53:88:7a:e9:79:23:81:f7:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9c10be81-a956-41b2-855e-0dd980ab5cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:88:5d:65:f0:69:fd:4e:9f:d6:12:f3:06: 10:44:84:b3:85:23:09:82:c6:3d:7d:92:30:d9:63: f0:ad:fe:ed:1e:e6:dc:33:ea:48:de:87:d9:29:42: 9a:69:d5:96:49:02:d4:66:65:08:5e:ab:51:53:06: 98:93:cd:55:be:95:a2:11:d7:81:29:47:d1:6d:a1: 77:ad:5a:5c:03:b9:83:b7:0b:b8:b1:88:77:41:c8: 56:e0:71:50:85:61:7c:ab:c1:4b:4e:b6:5f:53:2c: 85:a6:7a:89:8c:59:e7:9d:35:66:3e:85:b9:3b:12: d0:71:6c:c2:aa:46:fe:a2:84:fb:5a:35:c5:67:c0: 88:b2:50:2d:8a:18:67:39:30:bc:42:d3:13:58:ce: d4:7a:97:ee:49:61:42:d9:11:8a:77:63:ff:bc:24: 0c:57:68:d9:95:f4:07:3b:fd:22:fe:12:47:fb:bd: 57:45:60:3a:2e:41:83:a8:af:06:19:d1:53:87:1c: a1:75:2e:f9:44:08:f5:9f:0d:ad:af:eb:37:97:9d: 10:53:53:9c:fb:94:d9:1c:ee:53:b5:59:be:2d:d2: d8:fe:5a:ce:e1:f4:aa:33:c3:e3:e1:7a:5f:a1:ec: 15:57:0d:91:22:64:aa:27:8a:e8:1b:8f:f9:ab:cd: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:11:DB:7E:15:F1:B4:08:3F:51:75:BC:B1:57:35:87:DE:F9:29:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ceae9b47-1934-365c-a5d2-dede793a8a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.62.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:91:84:cf:64:95:8c:6c:01:42:fb:30:92:72:40:cb:a5:8f: 40:b1:1d:bb:ab:60:bb:44:04:51:18:cd:ec:ad:93:8a:42:cd: 1e:1f:69:21:e0:f7:3a:7b:c3:aa:fd:fa:fa:aa:2c:5d:72:36: 5d:6e:6e:9d:3f:7e:98:8f:e7:f4:ea:57:80:d7:5a:0e:1a:8a: 6c:bb:6f:14:13:f1:44:0e:89:4b:43:cf:b6:da:f4:22:fc:07: 8b:45:cf:9d:90:c8:af:54:e8:c2:ab:51:31:1d:2b:78:03:46: 31:7b:19:fc:77:e7:f6:da:f6:75:2b:f5:91:63:ff:89:68:d4: e5:66:f7:8b:6e:a4:e2:57:1c:bc:ca:aa:5f:32:33:a6:a5:2c: 48:b7:60:93:3d:e5:01:16:65:71:bd:4c:b3:94:52:4c:34:43: d9:02:fa:70:9f:df:e5:c8:23:e5:d0:36:2d:a5:7f:e4:77:c6: 9c:44:c1:74:67:5a:72:44:0d:e8:3b:29:80:33:f9:12:9c:b1: 8b:ce:9b:98:9c:58:f0:c0:32:a5:2e:f1:a7:14:6a:6e:11:bf: fd:a2:ea:ec:df:2e:32:54:14:e1:c0:fe:4a:dd:54:de:9e:6b: f9:3c:5d:c8:39:0f:8c:03:4e:59:dd:79:ff:0c:16:32:f9:24: ea:87:a7:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfVOIeul5I4H3HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWMxMGJlODEtYTk1Ni00MWIyLTg1NWUtMGRkOTgwYWI1Y2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDuIXWXwaf1On9YS8wYQRISzhSMJgsY9fZIw 2WPwrf7tHubcM+pI3ofZKUKaadWWSQLUZmUIXqtRUwaYk81VvpWiEdeBKUfRbaF3 rVpcA7mDtwu4sYh3QchW4HFQhWF8q8FLTrZfUyyFpnqJjFnnnTVmPoW5OxLQcWzC qkb+ooT7WjXFZ8CIslAtihhnOTC8QtMTWM7UepfuSWFC2RGKd2P/vCQMV2jZlfQH O/0i/hJH+71XRWA6LkGDqK8GGdFThxyhdS75RAj1nw2tr+s3l50QU1Oc+5TZHO5T tVm+LdLY/lrO4fSqM8Pj4XpfoewVVw2RImSqJ4roG4/5q81aiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQR234V8bQIP1F1vLFXNYfe+SkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2VhZTliNDctMTkzNC0z NjVjLWE1ZDItZGVkZTc5M2E4YTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiRhM9klYxsAUL7MJJyQMulj0CxHburYLtEBFEYzeytk4pCzR4faSHg 9zp7w6r9+vqqLF1yNl1ubp0/fpiP5/TqV4DXWg4aimy7bxQT8UQOiUtDz7ba9CL8 B4tFz52QyK9U6MKrUTEdK3gDRjF7Gfx35/ba9nUr9ZFj/4lo1OVm94tupOJXHLzK ql8yM6alLEi3YJM95QEWZXG9TLOUUkw0Q9kC+nCf3+XII+XQNi2lf+R3xpxEwXRn WnJEDeg7KYAz+RKcsYvOm5icWPDAMqUu8acUam4Rv/2i6uzfLjJUFOHA/krdVN6e a/k8Xcg5D4wDTlndef8MFjL5JOqHp9M= -----END CERTIFICATE-----Generated at Tue Oct 20 22:04:29 2026 by rpki-client