$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f18a3044-ef30-3ce5-a35d-8e2308e8ae2c.roa File: f18a3044-ef30-3ce5-a35d-8e2308e8ae2c.roa (raw, json) Hash identifier: e0pYV5HfKyPxmBpfqM2rdaI98VQADOPTx08YERAhDwQ= Subject key identifier: 48:E9:71:F8:7F:E6:1D:0C:DA:BB:EF:6E:CD:4E:B7:17:65:B9:34:C3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4985BA6A128220D965F9D700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f18a3044-ef30-3ce5-a35d-8e2308e8ae2c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.202.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:ba:6a:12:82:20:d9:65:f9:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=297e38b2-091f-45e7-a42f-46057d28be1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:77:48:26:62:c9:cf:43:4b:b5:81:46:44: 23:5d:e7:ec:d0:91:a1:4c:64:70:8a:c4:b4:3c:ea: c2:69:9a:b0:04:bf:a1:89:3c:5d:f0:be:9b:4f:a7: 6f:7b:86:bd:d7:6a:92:cd:4a:e7:fe:87:f7:87:d9: a5:69:1b:39:30:a4:32:65:47:55:5b:8a:d8:e2:a8: ee:0f:4f:20:0c:0f:a6:39:75:80:bd:a2:67:f2:a7: c8:37:cc:a2:1d:2f:f1:bc:1b:c0:d4:ac:fb:14:1d: 07:b7:d6:50:75:b9:8d:c9:ba:3c:c7:d9:c2:7f:8c: 56:f8:c8:62:29:81:20:00:37:df:4e:cd:c8:cd:44: ed:f5:66:97:ce:01:c5:9f:a7:e5:f2:c8:4e:f3:2d: 86:eb:30:0c:ae:f3:01:96:56:52:ec:86:da:d6:e6: 1a:0e:bf:5a:b9:6b:11:2f:28:51:72:e6:bf:0a:b7: e0:05:8b:34:6e:94:af:07:6f:8b:2a:c9:7d:8e:d9: 64:0c:8d:f2:d7:b2:30:ea:ac:38:8e:15:9b:90:4e: c2:43:d4:69:de:f8:83:18:01:85:06:21:42:41:ac: 45:91:9b:a7:67:04:14:23:29:df:31:c8:d1:b2:13: 9b:59:06:10:b4:eb:39:36:0e:17:0e:c4:27:4f:b1: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E9:71:F8:7F:E6:1D:0C:DA:BB:EF:6E:CD:4E:B7:17:65:B9:34:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f18a3044-ef30-3ce5-a35d-8e2308e8ae2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.202.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6a:71:30:8c:64:3e:9e:2e:6e:78:09:fd:18:aa:6d:4b:ca: d9:34:b3:f7:c7:8b:94:f4:08:6e:72:01:ff:4b:a2:2c:58:5e: 5f:1c:95:4f:7c:0c:29:ac:36:4a:3a:62:8b:2d:fa:ab:b3:41: 94:21:c7:8f:2b:c2:a9:b7:21:0b:9c:29:d2:f2:69:00:38:a8: 21:55:85:71:b1:1b:90:5b:27:6b:2f:79:b4:83:ba:d8:b1:50: 8b:dc:ad:e2:3e:d9:a7:da:0f:b7:ad:93:26:5c:82:bf:02:21: dc:f8:44:46:32:96:28:f9:72:07:23:d3:3c:18:64:7f:44:7e: 47:fa:36:f1:87:13:e5:ee:53:c7:49:82:24:be:cc:3c:ca:da: 31:b1:26:c6:d7:4c:2e:08:00:3a:4e:5a:86:48:0a:43:cc:96: 70:e9:80:a9:a4:0f:fa:2d:19:3b:00:1b:0c:c5:b2:d1:37:e8: 61:d0:5e:99:f9:7a:da:51:39:5d:dd:9a:e1:19:50:71:4a:0d: f7:0f:06:d6:e7:73:f4:57:ff:64:f9:00:81:44:22:ab:f1:a9: ed:d8:fe:44:45:2e:b2:d3:3c:e4:1f:b6:fc:1a:39:6b:8a:4d: 3d:22:d8:be:6d:89:00:5d:0d:32:f4:74:57:7e:b8:95:cd:a4: 1f:3a:1d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhbpqEoIg2WX51wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjk3ZTM4YjItMDkxZi00NWU3LWE0MmYtNDYwNTdkMjhiZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon93SCZiyc9DS7WBRkQjXefs0JGhTGRwisS0 POrCaZqwBL+hiTxd8L6bT6dve4a912qSzUrn/of3h9mlaRs5MKQyZUdVW4rY4qju D08gDA+mOXWAvaJn8qfIN8yiHS/xvBvA1Kz7FB0Ht9ZQdbmNybo8x9nCf4xW+Mhi KYEgADffTs3IzUTt9WaXzgHFn6fl8shO8y2G6zAMrvMBllZS7Iba1uYaDr9auWsR LyhRcua/CrfgBYs0bpSvB2+LKsl9jtlkDI3y17Iw6qw4jhWbkE7CQ9Rp3viDGAGF BiFCQaxFkZunZwQUIynfMcjRshObWQYQtOs5Ng4XDsQnT7H5PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjpcfh/5h0M2rvvbs1OtxdluTTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjE4YTMwNDQtZWYzMC0z Y2U1LWEzNWQtOGUyMzA4ZThhZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFqcTCMZD6eLm54Cf0Yqm1Lytk0s/fHi5T0CG5yAf9LoixYXl8clU98 DCmsNko6Yost+quzQZQhx48rwqm3IQucKdLyaQA4qCFVhXGxG5BbJ2svebSDutix UIvcreI+2afaD7etkyZcgr8CIdz4REYylij5cgcj0zwYZH9Efkf6NvGHE+XuU8dJ giS+zDzK2jGxJsbXTC4IADpOWoZICkPMlnDpgKmkD/otGTsAGwzFstE36GHQXpn5 etpROV3dmuEZUHFKDfcPBtbnc/RX/2T5AIFEIqvxqe3Y/kRFLrLTPOQftvwaOWuK TT0i2L5tiQBdDTL0dFd+uJXNpB86Hco= -----END CERTIFICATE-----Generated at Tue Oct 20 23:53:12 2026 by rpki-client