$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa File: e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa (raw, json) Hash identifier: tzN88Rz6alyrRovAff2udkPEdWzZBqHnFih2q0DNMx4= Subject key identifier: AE:6E:9D:54:9A:90:C7:5B:51:8C:16:0B:3C:52:C5:2A:61:E3:AF:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8DD8567CD673A6FAC8CB75C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 20940 IP address blocks: 23.1.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:56:7c:d6:73:a6:fa:c8:cb:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=dfcf5c6a-9a5b-4757-8c77-ed5845f2798a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:c8:68:62:25:6d:97:d2:63:7b:14:01:ce: 9d:ae:c3:7a:6c:05:63:c8:46:94:e6:3e:0b:62:b5: c7:7b:a2:26:ae:77:54:90:e1:6f:ef:32:52:6f:52: cf:90:12:c4:a3:cd:6c:06:c4:e1:f8:33:ca:9e:41: 9a:a3:5a:d9:f1:05:22:1d:fc:1b:9c:a9:82:80:29: 0a:c7:c7:99:46:5e:57:23:81:02:33:7f:e3:21:c2: 6f:d8:33:62:b7:6d:f7:92:e5:f0:73:df:d5:eb:49: 81:65:16:73:50:33:93:de:92:33:fa:b5:f4:52:33: 3d:30:d5:1b:31:68:c6:c7:9f:95:e8:8f:c6:c6:af: a1:c8:33:4f:37:2d:4c:ed:c5:13:5e:e3:34:da:04: 45:19:5c:91:e7:ea:0c:0b:16:9c:85:45:8c:c1:cf: a9:a6:93:94:23:72:b9:20:44:b4:d8:a3:79:d9:f8: 02:c3:1b:33:55:f8:00:47:da:bb:d0:c1:4a:53:7e: 9e:e7:4b:f1:58:bf:c5:ba:7e:47:0a:10:25:a2:9b: 29:c9:62:71:a8:7e:52:75:64:d5:ab:bd:50:28:2a: 15:7e:9a:46:3a:88:c9:29:77:20:77:c0:f6:01:26: 18:71:97:97:4c:7c:4e:4f:68:0e:60:cb:ff:a1:1c: 68:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6E:9D:54:9A:90:C7:5B:51:8C:16:0B:3C:52:C5:2A:61:E3:AF:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e438c12c-eed9-3eda-a4d5-4ad96749be1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:bc:ad:55:2c:56:f4:00:10:a4:93:1d:58:bd:59:f8:4d:a1: 35:59:ee:46:3e:be:78:9d:f2:72:8c:ce:ab:be:ef:68:a8:c9: 57:3f:5c:9e:65:fa:a9:e2:0b:9e:08:4e:51:97:12:b1:5d:04: bd:9f:4f:f3:b7:ce:66:5c:91:10:5b:46:1f:fd:d5:ce:b6:2e: 87:7a:4e:8a:ab:ca:28:8a:09:61:0f:2b:bf:a3:88:d3:5c:24: 78:59:ab:16:c3:b3:6a:3a:74:94:f4:5f:d1:71:3f:e6:53:02: d8:25:df:ca:52:41:0d:ce:1b:49:39:76:d9:3e:f0:27:93:55: 8a:5c:43:18:59:cc:e2:66:0b:25:40:a6:bb:e9:30:9c:d4:07: cd:f6:e6:01:06:af:11:a9:dd:e6:0b:b2:70:57:5a:e5:7b:1e: 21:9c:a2:a0:e1:d8:c6:56:01:fc:f1:93:b7:ce:63:ab:12:0d: 96:aa:b0:35:ac:13:d5:30:c5:d9:14:50:25:a7:60:82:f6:01: 12:f8:56:04:1f:cd:3d:06:0b:e4:90:90:cd:33:5d:aa:1c:04: a1:65:d5:a8:a1:23:53:d3:96:ba:2e:d0:ca:1d:42:b9:17:12: 31:5e:e6:ca:b0:a9:bd:5b:02:38:53:c2:be:bd:45:c3:38:a5: de:14:f2:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2FZ81nOm+sjLdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk ZGZjZjVjNmEtOWE1Yi00NzU3LThjNzctZWQ1ODQ1ZjI3OThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRHIaGIlbZfSY3sUAc6drsN6bAVjyEaU5j4L YrXHe6ImrndUkOFv7zJSb1LPkBLEo81sBsTh+DPKnkGao1rZ8QUiHfwbnKmCgCkK x8eZRl5XI4ECM3/jIcJv2DNit233kuXwc9/V60mBZRZzUDOT3pIz+rX0UjM9MNUb MWjGx5+V6I/Gxq+hyDNPNy1M7cUTXuM02gRFGVyR5+oMCxachUWMwc+pppOUI3K5 IES02KN52fgCwxszVfgAR9q70MFKU36e50vxWL/Fun5HChAlopspyWJxqH5SdWTV q71QKCoVfppGOojJKXcgd8D2ASYYcZeXTHxOT2gOYMv/oRxovwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5unVSakMdbUYwWCzxSxSph4684MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQzOGMxMmMtZWVkOS0z ZWRhLWE0ZDUtNGFkOTY3NDliZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG8rVUsVvQAEKSTHVi9WfhNoTVZ7kY+vnid8nKMzqu+72ioyVc/XJ5l +qniC54ITlGXErFdBL2fT/O3zmZckRBbRh/91c62Lod6ToqryiiKCWEPK7+jiNNc JHhZqxbDs2o6dJT0X9FxP+ZTAtgl38pSQQ3OG0k5dtk+8CeTVYpcQxhZzOJmCyVA prvpMJzUB8325gEGrxGp3eYLsnBXWuV7HiGcoqDh2MZWAfzxk7fOY6sSDZaqsDWs E9UwxdkUUCWnYIL2ARL4VgQfzT0GC+SQkM0zXaocBKFl1aihI1PTlrou0ModQrkX EjFe5sqwqb1bAjhTwr69RcM4pd4U8ms= -----END CERTIFICATE-----Generated at Wed Oct 21 17:09:12 2026 by rpki-client