$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa File: 03d43504-6de6-33b2-a607-18ad4ab1c63a.roa (raw, json) Hash identifier: ex2hhTqat75ka/vgPw0rsM8qwsjBh7bAry1jFEI00wo= Subject key identifier: AF:62:C3:57:81:E4:33:F8:8C:5A:0D:7E:6C:BC:E0:A1:78:E5:7B:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F14B20F4E6FE986FE900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.38.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f1:4b:20:f4:e6:fe:98:6f:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=240334d3-6e7d-4bb5-8a77-78017e396da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:13:ba:09:5f:33:c6:7f:30:f2:c7:26:b9:eb: cc:6f:3c:ed:94:f4:42:db:3b:95:23:5a:b4:e2:c7: 11:e2:f9:b5:3c:a6:fa:b5:e3:5e:73:e7:d4:58:84: f5:38:20:9b:e9:77:98:8d:5d:e7:9d:bf:c0:82:4b: 91:34:8b:73:83:89:d6:3b:7c:3c:05:8f:68:a6:4a: 86:53:c2:91:18:cd:e0:77:81:04:ed:ed:0d:0e:00: 2e:2d:58:37:98:b0:6f:6b:06:f6:1b:b5:e2:69:8e: 9f:46:94:93:ec:60:1a:ea:e8:4d:7c:96:ce:32:75: 20:f3:13:34:7a:39:bb:e9:72:bd:bf:b0:c1:d2:54: 8d:cb:b7:e9:43:65:10:03:6d:3a:f1:95:a3:3f:ef: 60:11:9a:b4:25:ed:10:5d:c1:43:fd:d7:36:f1:c3: ec:8d:75:e9:8e:60:e5:5c:49:b9:94:4e:02:82:75: 21:9d:56:cd:6d:a2:57:2d:80:ef:41:7f:96:f9:bb: c4:e2:f5:7c:92:43:3d:24:c9:09:7b:e5:6d:f6:c4: 8e:56:48:d3:17:1d:25:ba:58:b5:2f:cd:36:58:9a: c6:2c:92:40:24:50:f7:70:20:cd:b3:18:e7:26:ab: b3:6d:a3:38:1a:c0:30:7c:56:dc:4d:16:e5:f9:e4: 91:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:62:C3:57:81:E4:33:F8:8C:5A:0D:7E:6C:BC:E0:A1:78:E5:7B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6f:27:27:bc:0c:04:d3:24:e3:f9:8e:fe:6c:4c:af:c1:1d: 56:c5:8d:a9:2a:9c:63:2b:20:35:66:4d:44:4b:ac:eb:c8:60: df:ec:7c:8f:00:76:db:50:a0:fe:8d:18:af:e0:a2:f9:6c:21: 23:6e:44:2d:76:8b:1f:a8:af:94:f8:62:4c:88:99:d1:24:f4: 69:9f:9f:8a:09:93:11:11:15:5d:72:d5:47:6e:0d:20:3a:07: 00:a0:d9:5e:3d:b4:1f:77:79:d5:23:b8:92:86:e9:4b:15:48: bc:9e:89:cd:4e:f7:75:2b:ec:2e:df:5f:b9:8a:90:59:83:d1: 9c:19:ec:34:2f:24:90:e2:17:41:62:be:88:8f:b0:d4:9f:be: 79:c9:83:bb:75:fb:50:c1:48:0c:77:95:65:fc:d0:6c:8e:e1: f6:66:6c:41:1f:4c:94:34:d3:1b:95:88:89:bb:0d:97:12:a7: 5b:b3:71:46:d4:29:12:22:b0:1a:6f:36:a1:b0:31:25:bf:4e: 47:a4:bb:bb:95:18:10:d2:30:98:b9:48:b0:78:b4:ea:e5:47: ae:25:a3:07:ae:65:cd:3b:57:03:47:32:28:3c:bc:23:47:e3: 9b:22:2d:9f:81:0a:9b:77:6e:15:ab:44:9c:06:67:b9:ee:d7: e8:97:63:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/FLIPTm/phv6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MjQwMzM0ZDMtNmU3ZC00YmI1LThhNzctNzgwMTdlMzk2ZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhO6CV8zxn8w8scmuevMbzztlPRC2zuVI1q0 4scR4vm1PKb6teNec+fUWIT1OCCb6XeYjV3nnb/AgkuRNItzg4nWO3w8BY9opkqG U8KRGM3gd4EE7e0NDgAuLVg3mLBvawb2G7XiaY6fRpST7GAa6uhNfJbOMnUg8xM0 ejm76XK9v7DB0lSNy7fpQ2UQA2068ZWjP+9gEZq0Je0QXcFD/dc28cPsjXXpjmDl XEm5lE4CgnUhnVbNbaJXLYDvQX+W+bvE4vV8kkM9JMkJe+Vt9sSOVkjTFx0luli1 L802WJrGLJJAJFD3cCDNsxjnJquzbaM4GsAwfFbcTRbl+eSRvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9iw1eB5DP4jFoNfmy84KF45XtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNkNDM1MDQtNmRlNi0z M2IyLWE2MDctMThhZDRhYjFjNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1vJye8DATTJOP5jv5sTK/BHVbFjakqnGMrIDVmTURLrOvIYN/sfI8A dttQoP6NGK/govlsISNuRC12ix+or5T4YkyImdEk9Gmfn4oJkxERFV1y1UduDSA6 BwCg2V49tB93edUjuJKG6UsVSLyeic1O93Ur7C7fX7mKkFmD0ZwZ7DQvJJDiF0Fi voiPsNSfvnnJg7t1+1DBSAx3lWX80GyO4fZmbEEfTJQ00xuViIm7DZcSp1uzcUbU KRIisBpvNqGwMSW/Tkeku7uVGBDSMJi5SLB4tOrlR64loweuZc07VwNHMig8vCNH 45siLZ+BCpt3bhWrRJwGZ7nu1+iXY9M= -----END CERTIFICATE-----Generated at Wed Sep 23 00:18:59 2026 by rpki-client