$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa File: 0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa (raw, json) Hash identifier: 3ZmSYha6/swMsYW/Xx5LWyb4m4mGk3ap4wrLh4ZGYb0= Subject key identifier: 06:3E:95:67:CB:3D:E9:A9:BC:30:02:45:85:F5:94:EE:9F:63:E2:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47EEF0DC3E4EB7A5F6F700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.36.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ee:f0:dc:3e:4e:b7:a5:f6:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=8bae06d6-44c2-4838-8229-7d552ba8d1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:66:2f:35:31:e9:47:ab:19:ca:1e:da:6c: bf:b3:09:59:7d:83:19:c1:6b:4a:eb:dd:53:93:3e: d9:b0:d8:e6:44:bb:28:44:26:d3:5e:c8:b0:79:e9: 53:2c:20:03:93:20:11:e7:c5:83:b5:1b:9b:0c:18: 58:0b:c9:59:9d:2c:96:53:56:2a:a1:ac:68:5d:15: 58:8b:f8:ae:18:4c:aa:9a:a6:ee:0e:93:1d:03:8a: 14:0b:9d:69:7d:fd:1e:7a:83:08:fe:d7:a9:11:44: 26:3b:0c:4a:00:31:31:8f:ee:d7:e6:00:85:07:49: 2c:6a:d1:6b:39:14:0d:06:f6:4e:77:dd:99:ae:94: bf:0e:f8:f7:09:cc:2c:33:31:46:47:b8:61:94:f7: 7f:0b:69:18:b8:a8:77:86:d4:c3:81:a6:83:da:d4: fe:bf:18:64:ba:39:25:2f:bc:38:65:62:61:d6:5a: 6d:d2:d7:c6:cb:3f:26:bb:6d:1a:4a:5c:60:5d:10: d2:83:21:92:0d:c4:a8:f3:f5:ab:7b:b1:a1:a5:54: 43:63:54:75:b5:1a:cf:e5:89:ff:a6:66:0d:c0:c0: db:e4:78:bc:be:60:9c:69:a1:12:ec:25:cc:17:2b: 39:69:cb:18:15:11:4e:3e:2b:9e:bb:d4:d9:2e:39: da:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3E:95:67:CB:3D:E9:A9:BC:30:02:45:85:F5:94:EE:9F:63:E2:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0849e1c4-f9cc-3836-8b2a-5e867c295f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:46:f8:3a:c0:0b:3b:d2:18:73:a7:92:d5:5b:ba:78:cd:1d: 29:b5:56:72:9e:32:0c:57:b1:fa:22:81:a4:08:94:24:4e:9e: cb:28:e3:33:76:bb:5a:b8:e2:d9:cc:7c:5c:5b:fa:51:42:dc: b6:99:14:97:9a:ba:18:f1:94:92:76:b5:c8:20:88:df:4f:ea: ab:d0:d5:b9:2a:4c:b2:79:c1:a4:5b:be:31:f4:99:16:d5:e1: c7:ab:7f:20:46:6f:61:38:84:a2:b8:4e:53:46:91:7e:ed:c7: 68:ce:59:e9:be:69:d7:ef:69:b4:2b:30:42:38:e5:d9:a2:61: 0e:fe:46:ef:d7:63:53:9a:8a:b1:99:11:39:17:6d:63:6e:2d: 62:74:c9:6e:d7:94:7f:85:44:28:2e:c4:0a:90:b2:e3:e7:ce: 43:af:12:45:fc:94:75:d5:63:6b:eb:01:7f:1c:e3:54:1f:8c: 6c:1f:ef:ac:47:e6:8f:99:22:8d:7b:33:19:9a:eb:64:dc:1b: 0a:b1:8e:db:bd:4b:05:e5:bf:7a:9e:ec:bc:0f:8d:3f:af:2a: bd:50:c5:9f:c2:f9:51:94:90:3b:b7:1e:05:44:f3:b7:da:13: 52:97:a3:a8:e4:7a:43:c0:36:6e:65:f3:52:41:9b:50:19:09: 3d:43:ee:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+7w3D5Ot6X29wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk OGJhZTA2ZDYtNDRjMi00ODM4LTgyMjktN2Q1NTJiYThkMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQhmLzUx6UerGcoe2my/swlZfYMZwWtK691T kz7ZsNjmRLsoRCbTXsiweelTLCADkyAR58WDtRubDBhYC8lZnSyWU1YqoaxoXRVY i/iuGEyqmqbuDpMdA4oUC51pff0eeoMI/tepEUQmOwxKADExj+7X5gCFB0ksatFr ORQNBvZOd92ZrpS/Dvj3CcwsMzFGR7hhlPd/C2kYuKh3htTDgaaD2tT+vxhkujkl L7w4ZWJh1lpt0tfGyz8mu20aSlxgXRDSgyGSDcSo8/Wre7GhpVRDY1R1tRrP5Yn/ pmYNwMDb5Hi8vmCcaaES7CXMFys5acsYFRFOPiueu9TZLjnaXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY+lWfLPempvDACRYX1lO6fY+JAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDg0OWUxYzQtZjljYy0z ODM2LThiMmEtNWU4NjdjMjk1ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1G+DrACzvSGHOnktVbunjNHSm1VnKeMgxXsfoigaQIlCROnsso4zN2 u1q44tnMfFxb+lFC3LaZFJeauhjxlJJ2tcggiN9P6qvQ1bkqTLJ5waRbvjH0mRbV 4cerfyBGb2E4hKK4TlNGkX7tx2jOWem+adfvabQrMEI45dmiYQ7+Ru/XY1OairGZ ETkXbWNuLWJ0yW7XlH+FRCguxAqQsuPnzkOvEkX8lHXVY2vrAX8c41QfjGwf76xH 5o+ZIo17Mxma62TcGwqxjtu9SwXlv3qe7LwPjT+vKr1QxZ/C+VGUkDu3HgVE87fa E1KXo6jkekPANm5l81JBm1AZCT1D7uc= -----END CERTIFICATE-----Generated at Sun Sep 27 06:43:13 2026 by rpki-client