$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06069c65-6665-3b99-bfd7-150c1baa88b4.roa File: 06069c65-6665-3b99-bfd7-150c1baa88b4.roa (raw, json) Hash identifier: ftc+BL/hw8lCcGTnxqeTLw/24brDerprM8dVWzmGg9k= Subject key identifier: 00:52:AA:81:C2:61:40:61:76:04:7F:7C:59:41:EE:9A:4A:39:45:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7CA1252AB5A1E53C4A738 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06069c65-6665-3b99-bfd7-150c1baa88b4.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 35994 IP address blocks: 23.43.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ca:12:52:ab:5a:1e:53:c4:a7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=28d65b05-6cd8-493f-9667-e47af04bd6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:b1:fd:f6:4d:a7:9c:e1:24:ea:d0:98:3a: 6e:6e:21:1e:a8:64:c1:0e:1a:6f:d7:bb:ec:a5:64: a6:da:90:fa:35:c5:f0:47:a4:89:5a:72:0f:d4:f5: 30:64:57:5a:c5:bf:06:27:54:07:87:9f:80:a7:2d: f7:09:32:ea:5f:16:1e:b1:5b:03:f6:ca:b5:85:b5: 95:be:13:83:5e:61:29:73:43:51:ca:ba:8d:51:2a: a8:40:6d:76:f8:b5:c6:46:9f:6c:68:65:1a:d6:af: 53:7e:93:df:a7:3c:f7:39:0d:51:bf:6e:b4:07:aa: e9:54:17:c1:66:a5:02:6a:f5:34:d3:06:51:36:1c: d0:5d:42:5a:6d:9d:16:43:23:a0:b9:b7:ef:41:ca: 65:31:4e:b8:51:ee:8e:49:1c:e7:67:cb:b4:9c:3e: 1f:14:36:61:a3:ea:e1:4a:bd:42:8f:89:df:10:43: d2:1d:45:e0:74:c6:58:ff:9f:be:36:21:55:ae:99: 2c:ac:57:b2:3b:8c:ba:b5:0a:42:9a:a4:bc:9c:9d: ef:8d:09:9b:9e:3b:21:90:c9:10:cf:e9:21:e0:8c: d6:0c:f6:55:d9:0f:37:2c:4d:24:32:f0:d5:4f:af: a8:72:1b:96:17:6d:d7:ed:8e:7d:8a:b7:f7:61:31: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:52:AA:81:C2:61:40:61:76:04:7F:7C:59:41:EE:9A:4A:39:45:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/06069c65-6665-3b99-bfd7-150c1baa88b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e2:ef:a4:fa:ab:8a:12:97:8d:70:f5:07:15:25:5d:4a:cb: 23:25:4c:3d:9b:fb:89:83:2a:fc:ab:6c:06:a5:75:ca:0d:4a: e5:bd:27:13:14:9f:bd:b7:0b:c5:76:29:9f:db:5c:d0:1d:6c: 97:9c:5f:a1:06:f6:f3:2c:23:70:68:c0:13:d8:d6:2d:a4:07: 7f:9e:f2:95:ac:fa:ec:f6:6e:05:b7:80:14:40:ef:86:ad:ab: c7:68:1e:94:26:56:bb:4e:3c:80:eb:42:cd:56:d9:4a:e8:d0: 28:b4:a9:9e:8c:18:b1:a3:d0:3d:83:95:83:90:62:d5:76:99: 47:57:94:88:14:07:34:1d:f0:54:29:ab:2b:6f:e2:95:23:c5: c8:74:ec:b3:a1:38:0d:28:19:7e:98:56:c2:8a:10:df:89:9e: 48:de:d3:d0:b6:5e:a0:00:59:b6:22:bd:3a:90:5f:27:87:e9: 66:c3:fd:b8:78:9b:34:25:ba:24:6d:2e:01:54:66:07:68:91: c7:fe:25:b3:01:00:1a:1a:65:9c:86:61:3e:3f:cf:2c:e0:08: 1c:62:49:15:93:85:79:aa:78:45:b7:e1:c3:77:20:0a:89:06: 5f:8e:96:c1:38:75:cf:e7:6d:a0:44:4e:27:0b:6b:ea:b0:68: 48:5e:99:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98oSUqtaHlPEpzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjhkNjViMDUtNmNkOC00OTNmLTk2NjctZTQ3YWYwNGJkNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuix/fZNp5zhJOrQmDpubiEeqGTBDhpv17vs pWSm2pD6NcXwR6SJWnIP1PUwZFdaxb8GJ1QHh5+Apy33CTLqXxYesVsD9sq1hbWV vhODXmEpc0NRyrqNUSqoQG12+LXGRp9saGUa1q9TfpPfpzz3OQ1Rv260B6rpVBfB ZqUCavU00wZRNhzQXUJabZ0WQyOgubfvQcplMU64Ue6OSRznZ8u0nD4fFDZho+rh Sr1Cj4nfEEPSHUXgdMZY/5++NiFVrpksrFeyO4y6tQpCmqS8nJ3vjQmbnjshkMkQ z+kh4IzWDPZV2Q83LE0kMvDVT6+ochuWF23X7Y59irf3YTEzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABSqoHCYUBhdgR/fFlB7ppKOUXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDYwNjljNjUtNjY2NS0z Yjk5LWJmZDctMTUwYzFiYWE4OGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFytTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzi76T6q4oSl41w9QcVJV1KyyMlTD2b+4mDKvyrbAaldcoNSuW9JxMU n723C8V2KZ/bXNAdbJecX6EG9vMsI3BowBPY1i2kB3+e8pWs+uz2bgW3gBRA74at q8doHpQmVrtOPIDrQs1W2Uro0Ci0qZ6MGLGj0D2DlYOQYtV2mUdXlIgUBzQd8FQp qytv4pUjxch07LOhOA0oGX6YVsKKEN+Jnkje09C2XqAAWbYivTqQXyeH6WbD/bh4 mzQluiRtLgFUZgdokcf+JbMBABoaZZyGYT4/zyzgCBxiSRWThXmqeEW34cN3IAqJ Bl+OlsE4dc/nbaBETicLa+qwaEhemSg= -----END CERTIFICATE-----Generated at Thu Sep 24 23:22:32 2026 by rpki-client