$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e581be77-0c9b-317d-a239-a2cc48a7f2ef.roa File: e581be77-0c9b-317d-a239-a2cc48a7f2ef.roa (raw, json) Hash identifier: JooP/A0BshX/JGXcre0+c/MqFXsj3Jyv53gnvPQD2D8= Subject key identifier: 9D:BF:35:F8:71:4C:C4:8F:E3:D1:87:38:D5:02:40:CF:B8:87:E4:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497E277BEE09BD1CD458FB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e581be77-0c9b-317d-a239-a2cc48a7f2ef.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.202.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:27:7b:ee:09:bd:1c:d4:58:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1fb6e82b-7def-4342-a429-59e51e5155d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:73:7a:6f:b5:8d:64:a2:f5:a3:70:6d:0e:7f: 90:04:b9:2e:46:ec:8b:a4:3b:47:db:6a:11:b6:b1: 23:c1:d1:b9:6f:62:b4:7d:a3:41:83:cd:05:db:95: 94:62:70:21:1f:41:01:f4:f2:4a:05:cb:84:e4:54: e8:db:d8:0d:82:b8:88:e1:dc:f1:e0:f2:8f:ba:a4: 5c:e1:a3:26:16:3f:9f:39:20:73:a8:53:2c:ff:d1: c5:08:24:b5:93:26:b7:18:a9:89:a7:04:18:78:01: ce:fa:a0:ef:ab:97:a4:2e:ca:e9:15:f7:ab:bc:3f: 72:f4:0a:c6:ed:2e:ec:1d:e9:74:3d:ec:31:fd:c0: 4f:c4:87:cd:04:75:75:64:e2:a7:05:6b:75:0f:38: 1b:70:97:be:8e:1e:7c:a3:2d:35:67:b9:f9:1c:34: e3:f9:60:7d:86:40:c5:89:8d:61:65:31:3a:84:69: 6f:19:62:fb:08:05:03:cd:fe:a8:b1:53:86:6b:74: 44:b7:2e:a3:67:29:88:44:c2:90:69:79:92:6c:14: 46:fa:10:86:53:9f:da:dd:48:69:e1:c0:da:64:cf: d6:08:a9:83:55:36:38:a1:30:9d:4e:cc:3b:d8:32: 2c:39:ca:77:b2:93:1d:9b:3a:83:bf:63:51:dc:f3: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BF:35:F8:71:4C:C4:8F:E3:D1:87:38:D5:02:40:CF:B8:87:E4:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e581be77-0c9b-317d-a239-a2cc48a7f2ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f7:f9:f7:95:64:0b:1b:aa:cf:78:9f:85:bf:bb:95:9c:c7: e6:ee:4d:cc:9c:3a:df:80:57:97:ea:c4:23:4b:4a:28:3a:45: c0:ff:c8:dc:bd:6c:0b:c3:53:f6:31:1f:e7:9e:5a:01:19:55: ec:e4:f7:0c:ec:66:69:ef:c9:78:0a:0f:07:1c:c7:6a:07:bf: 87:4c:d6:40:30:a3:58:eb:8c:aa:15:66:d1:6f:a0:20:b2:da: 02:9d:48:3c:83:82:02:6e:c0:3c:06:1e:76:2c:77:06:a3:61: f6:0b:bb:73:d9:30:1a:10:9f:6f:e3:92:ed:64:cd:87:e5:72: 92:0b:57:82:b1:6a:20:c3:00:f6:d5:ef:b7:ba:74:71:e4:14: ea:f3:1f:bd:99:95:59:38:09:ef:41:15:ef:03:36:5b:c8:9e: ee:ef:ad:94:db:30:40:7e:4c:0d:71:26:f4:dc:15:75:5e:b7: d3:1e:88:90:cc:87:95:ac:e7:d8:cd:f0:10:d3:c9:73:8f:e0: c1:e2:7b:41:25:ec:2c:ad:7f:80:82:a5:e7:88:3c:65:2c:50: 18:a6:12:43:26:cd:74:7c:e3:30:49:04:1b:41:b7:ab:7b:66: c3:4b:e3:11:10:20:6a:28:c3:45:7e:e7:a8:5c:06:4e:f3:25: f6:15:a8:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfid77gm9HNRY+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWZiNmU4MmItN2RlZi00MzQyLWE0MjktNTllNTFlNTE1NWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXN6b7WNZKL1o3BtDn+QBLkuRuyLpDtH22oR trEjwdG5b2K0faNBg80F25WUYnAhH0EB9PJKBcuE5FTo29gNgriI4dzx4PKPuqRc 4aMmFj+fOSBzqFMs/9HFCCS1kya3GKmJpwQYeAHO+qDvq5ekLsrpFfervD9y9ArG 7S7sHel0Pewx/cBPxIfNBHV1ZOKnBWt1DzgbcJe+jh58oy01Z7n5HDTj+WB9hkDF iY1hZTE6hGlvGWL7CAUDzf6osVOGa3REty6jZymIRMKQaXmSbBRG+hCGU5/a3Uhp 4cDaZM/WCKmDVTY4oTCdTsw72DIsOcp3spMdmzqDv2NR3PMssQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2/NfhxTMSP49GHONUCQM+4h+SzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTU4MWJlNzctMGM5Yi0z MTdkLWEyMzktYTJjYzQ4YTdmMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8rmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn3+feVZAsbqs94n4W/u5Wcx+buTcycOt+AV5fqxCNLSig6RcD/yNy9 bAvDU/YxH+eeWgEZVezk9wzsZmnvyXgKDwccx2oHv4dM1kAwo1jrjKoVZtFvoCCy 2gKdSDyDggJuwDwGHnYsdwajYfYLu3PZMBoQn2/jku1kzYflcpILV4KxaiDDAPbV 77e6dHHkFOrzH72ZlVk4Ce9BFe8DNlvInu7vrZTbMEB+TA1xJvTcFXVet9MeiJDM h5Ws59jN8BDTyXOP4MHie0El7Cytf4CCpeeIPGUsUBimEkMmzXR84zBJBBtBt6t7 ZsNL4xEQIGoow0V+56hcBk7zJfYVqD4= -----END CERTIFICATE-----Generated at Wed Oct 21 14:45:37 2026 by rpki-client