$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7c12ac3-bb61-301d-a999-3412acd2d1b9.roa File: d7c12ac3-bb61-301d-a999-3412acd2d1b9.roa (raw, json) Hash identifier: Q5YUPL2jtmlJ+67JoQQJmHCjOELDwLMG+MmWsrlrU20= Subject key identifier: 5C:26:C6:D4:5B:1B:D9:48:B5:E7:BF:B2:5D:40:44:E2:E7:A9:63:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7E7DB3008420F154C605CD40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7c12ac3-bb61-301d-a999-3412acd2d1b9.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 33905 IP address blocks: 23.7.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:b3:00:84:20:f1:54:c6:05:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=9c5a8dd5-da7d-4c40-83bf-8ba2ece11082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9a:6d:db:ba:c6:b7:bb:57:b7:c7:e1:82:fb: 66:c8:77:b2:85:93:61:7e:fa:64:db:b8:d5:c5:c4: b8:22:c2:1a:bb:62:a6:3f:29:09:69:46:cf:ea:6c: f1:ac:5f:f5:32:8c:be:97:ab:66:0e:11:6f:26:9f: fd:7f:76:b1:38:3d:70:6c:4f:bf:02:a8:71:59:63: 44:ca:6e:7d:f1:22:30:e7:d1:b6:cc:3b:be:3b:59: 80:3d:50:94:de:b7:e7:1d:45:1e:1f:20:f2:00:2b: 9c:3f:7e:fb:52:f0:2f:23:d5:c7:1e:a1:31:cc:ce: d3:cf:77:8f:79:d1:32:c0:02:44:85:8c:2d:cd:21: aa:08:06:17:f0:3c:05:1a:6e:32:b1:58:18:0e:c1: 3a:e2:44:35:10:d4:dc:de:2a:80:b4:67:0b:8e:d8: 8c:f8:9f:cb:60:ff:0a:40:20:83:d9:89:ce:98:e8: 6d:a8:59:ec:6a:35:8c:d1:40:9d:29:d5:68:1c:e6: 0d:30:86:61:06:cc:bd:62:5e:85:5d:ed:08:61:0f: 83:f2:9d:61:d3:40:10:60:50:e5:e8:1f:54:e9:6a: ed:15:a1:38:d7:db:80:21:84:56:d5:b7:bb:76:85: a4:78:27:41:23:dd:d6:6f:15:dd:b4:ac:d0:b2:1d: 3b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:26:C6:D4:5B:1B:D9:48:B5:E7:BF:B2:5D:40:44:E2:E7:A9:63:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7c12ac3-bb61-301d-a999-3412acd2d1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.7.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:95:30:06:05:8a:18:62:fd:eb:f8:98:9e:c8:0b:68:c0:18: ea:fb:9a:50:7c:5a:8f:d1:66:ee:3b:54:30:be:a6:58:93:24: 4c:c1:9e:cd:f8:a9:26:9c:ac:5b:ec:dd:71:d7:d7:4b:d3:92: 7a:57:32:70:e5:7f:70:48:54:5c:aa:e2:f3:f3:e2:a0:d6:d1: 0b:87:e7:0b:12:f6:e1:a8:2f:7c:e9:0c:80:6e:0b:4c:b6:d7: 08:e1:16:44:99:cc:77:e9:a2:0f:14:b0:ff:08:7b:6c:e7:53: eb:d3:5e:4f:66:89:43:75:75:41:d5:0c:bc:14:0a:44:4c:e7: 67:46:23:71:e8:79:24:72:5b:38:f0:d3:99:74:6d:ba:c1:5c: 44:ac:dd:77:d4:d6:8c:41:08:b0:d1:a8:f9:ff:3d:cc:31:69: 49:f0:9a:23:ae:13:2f:41:de:a7:21:b3:d0:3f:e6:7d:7d:8d: c3:70:28:d7:72:68:c2:01:49:d9:60:9e:56:ab:8e:74:a9:c1: 30:96:48:6d:3f:5f:aa:4c:e5:6a:e8:83:70:b4:34:b3:e9:6d: 8f:e3:47:12:ea:ef:df:26:a6:ff:92:4e:6b:14:6b:d6:b7:96: 6c:64:3c:4a:e8:1f:b8:25:5c:f2:40:0a:c5:77:f7:ff:27:e3: 35:c0:8f:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fbMAhCDxVMYFzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk OWM1YThkZDUtZGE3ZC00YzQwLTgzYmYtOGJhMmVjZTExMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlppt27rGt7tXt8fhgvtmyHeyhZNhfvpk27jV xcS4IsIau2KmPykJaUbP6mzxrF/1Moy+l6tmDhFvJp/9f3axOD1wbE+/AqhxWWNE ym598SIw59G2zDu+O1mAPVCU3rfnHUUeHyDyACucP377UvAvI9XHHqExzM7Tz3eP edEywAJEhYwtzSGqCAYX8DwFGm4ysVgYDsE64kQ1ENTc3iqAtGcLjtiM+J/LYP8K QCCD2YnOmOhtqFnsajWM0UCdKdVoHOYNMIZhBsy9Yl6FXe0IYQ+D8p1h00AQYFDl 6B9U6WrtFaE419uAIYRW1be7doWkeCdBI93WbxXdtKzQsh07LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwmxtRbG9lItee/sl1AROLnqWMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDdjMTJhYzMtYmI2MS0z MDFkLWE5OTktMzQxMmFjZDJkMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSVMAYFihhi/ev4mJ7IC2jAGOr7mlB8Wo/RZu47VDC+pliTJEzBns34 qSacrFvs3XHX10vTknpXMnDlf3BIVFyq4vPz4qDW0QuH5wsS9uGoL3zpDIBuC0y2 1wjhFkSZzHfpog8UsP8Ie2znU+vTXk9miUN1dUHVDLwUCkRM52dGI3HoeSRyWzjw 05l0bbrBXESs3XfU1oxBCLDRqPn/PcwxaUnwmiOuEy9B3qchs9A/5n19jcNwKNdy aMIBSdlgnlarjnSpwTCWSG0/X6pM5Wrog3C0NLPpbY/jRxLq798mpv+STmsUa9a3 lmxkPEroH7glXPJACsV39/8n4zXAj5E= -----END CERTIFICATE-----Generated at Fri Oct 23 19:56:45 2026 by rpki-client