$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8b0fcc3-b74e-3630-8d41-7bea5f0432f9.roa File: e8b0fcc3-b74e-3630-8d41-7bea5f0432f9.roa (raw, json) Hash identifier: 5hRxVNsQT65fj03kLApTY2lV0Gzz+CFjfcJP/+CkAOs= Subject key identifier: C7:50:D6:79:75:3A:A1:21:01:5D:5A:FB:F4:89:EB:E8:F3:81:88:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D4A5B1C0E96EBF7F5E700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8b0fcc3-b74e-3630-8d41-7bea5f0432f9.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.52.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:4a:5b:1c:0e:96:eb:f7:f5:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=8bd1c18f-048d-48f4-a452-acf82ba3fa68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d2:7b:0b:8d:88:27:72:3a:18:d8:c7:48:90: fa:bb:55:f6:a1:e1:85:07:26:48:b9:d8:73:6a:95: 98:0f:e1:17:db:1b:40:71:36:df:12:ff:f2:40:5b: 7f:9d:5a:9a:b4:e6:6d:dc:65:5c:9d:9b:39:dd:82: 80:f4:5d:6d:00:c9:d1:1f:89:d6:e9:15:8a:ff:69: 3a:e4:8e:b2:80:a8:cd:a2:1b:cb:b8:a4:5c:fd:64: c7:94:a9:ee:b9:52:0f:76:ab:2f:ee:95:77:97:11: a3:a4:5d:9b:40:b3:b0:ca:a4:5e:67:93:e4:d4:43: 4c:ac:37:85:42:ac:9d:58:59:66:b8:09:19:44:44: 06:94:2a:76:0f:65:db:20:0f:f7:da:59:05:70:c0: 81:5a:54:a9:19:bc:70:94:c5:9a:51:4e:94:fc:a8: f2:0b:12:cf:94:40:bb:50:b4:84:1d:09:75:94:91: 8f:39:00:7c:a6:3b:66:cc:31:93:b7:8b:4b:50:8c: c3:cb:15:c0:17:88:e2:11:7c:da:dd:39:6e:a0:3c: 53:20:68:be:e9:f4:0b:3a:1a:a5:da:77:d0:dc:23: 6b:6d:73:90:f2:fc:08:09:df:4a:b5:3a:cb:f8:5d: 34:17:da:a1:3b:26:eb:a7:c1:52:94:15:77:17:df: 6d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:50:D6:79:75:3A:A1:21:01:5D:5A:FB:F4:89:EB:E8:F3:81:88:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8b0fcc3-b74e-3630-8d41-7bea5f0432f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4f:76:b7:89:89:67:08:b1:d2:0a:d8:9d:1d:d3:55:fd:2e: 8e:99:95:9c:68:78:6a:d0:15:64:b9:7c:cb:17:a6:0d:33:e2: d6:6d:61:7c:13:d1:e3:ea:d7:b2:55:5a:95:5e:bc:ff:72:b0: 22:31:b8:60:b4:06:10:ef:4f:cc:85:fc:a8:a9:96:19:f5:36: 6e:2f:78:14:e4:9f:2a:10:22:79:e7:52:d8:36:8a:f0:94:51: 19:02:83:a4:fa:d3:76:43:b6:6c:3d:12:52:cc:0d:a9:15:05: a8:64:eb:7d:42:bc:a5:b7:49:74:c0:89:3c:5c:dd:74:77:49: ec:e8:c1:0f:88:6b:8c:d9:10:e1:21:73:db:5a:9c:5c:c4:95: 49:91:33:2d:d3:84:f6:68:1f:75:9d:12:49:87:c8:a3:0f:0c: 37:a5:1d:b4:46:02:bf:02:42:85:0f:ca:5e:88:6a:28:3c:63: ec:df:65:32:6d:eb:ed:60:14:05:f7:c3:c6:be:5e:18:eb:3a: 5c:35:d7:cd:44:c0:1a:08:03:08:b4:f4:91:e0:ad:66:d8:f1: 5e:5d:5b:c6:2c:33:1d:fe:1c:b8:2a:21:fb:ed:b7:20:18:7c: b7:a3:4a:5c:18:8d:ef:1d:3b:e1:d4:03:d9:06:b8:a3:c6:79: 05:61:75:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUpbHA6W6/f15wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk OGJkMWMxOGYtMDQ4ZC00OGY0LWE0NTItYWNmODJiYTNmYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitJ7C42IJ3I6GNjHSJD6u1X2oeGFByZIudhz apWYD+EX2xtAcTbfEv/yQFt/nVqatOZt3GVcnZs53YKA9F1tAMnRH4nW6RWK/2k6 5I6ygKjNohvLuKRc/WTHlKnuuVIPdqsv7pV3lxGjpF2bQLOwyqReZ5Pk1ENMrDeF QqydWFlmuAkZREQGlCp2D2XbIA/32lkFcMCBWlSpGbxwlMWaUU6U/KjyCxLPlEC7 ULSEHQl1lJGPOQB8pjtmzDGTt4tLUIzDyxXAF4jiEXza3TluoDxTIGi+6fQLOhql 2nfQ3CNrbXOQ8vwICd9KtTrL+F00F9qhOybrp8FSlBV3F99tWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdQ1nl1OqEhAV1a+/SJ6+jzgYhwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZThiMGZjYzMtYjc0ZS0z NjMwLThkNDEtN2JlYTVmMDQzMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhPdreJiWcIsdIK2J0d01X9Lo6ZlZxoeGrQFWS5fMsXpg0z4tZtYXwT 0ePq17JVWpVevP9ysCIxuGC0BhDvT8yF/Kiplhn1Nm4veBTknyoQInnnUtg2ivCU URkCg6T603ZDtmw9ElLMDakVBahk631CvKW3SXTAiTxc3XR3SezowQ+Ia4zZEOEh c9tanFzElUmRMy3ThPZoH3WdEkmHyKMPDDelHbRGAr8CQoUPyl6Iaig8Y+zfZTJt 6+1gFAX3w8a+XhjrOlw1181EwBoIAwi09JHgrWbY8V5dW8YsMx3+HLgqIfvttyAY fLejSlwYje8dO+HUA9kGuKPGeQVhdfE= -----END CERTIFICATE-----Generated at Tue Oct 20 22:16:24 2026 by rpki-client