$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08f837f3-b33c-3641-8c18-c88879acca60.roa File: 08f837f3-b33c-3641-8c18-c88879acca60.roa (raw, json) Hash identifier: nU3emiJEdEps8KNkXJwCOE//lzzUjWQAnf4KfypJmOU= Subject key identifier: 61:C1:F3:82:B5:54:03:26:C9:1D:30:48:3A:2E:62:70:B8:41:89:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD6FF2D6875E5D6ABE1470 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08f837f3-b33c-3641-8c18-c88879acca60.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.44.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:6f:f2:d6:87:5e:5d:6a:be:14:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=af1bf407-d824-45e6-a919-b113a75b5546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c0:0a:54:b4:67:6c:4c:1d:17:52:f5:a3:03: 21:c5:94:65:df:6e:83:4b:5e:d2:60:a9:d9:5e:09: a5:e5:ea:f4:77:c1:b1:3a:2b:c6:d7:09:ec:db:d7: 4f:a0:39:95:08:42:32:8c:1f:ff:26:dd:c8:05:7e: c9:5e:6c:b1:85:25:92:b5:aa:51:c2:83:c3:92:23: 3c:3b:ed:1e:d8:fa:ff:af:5b:e8:93:84:b2:41:9a: a7:7b:26:7e:ea:96:5d:74:7f:89:1a:83:f8:90:a1: db:f3:34:69:6d:8c:b8:75:8c:be:ce:e7:ef:e8:64: 4c:d2:47:61:b7:ca:a0:20:7b:bc:0f:06:b4:2c:cb: a7:b5:47:07:d4:d3:af:7f:3c:bb:ec:45:f1:20:68: 75:aa:99:85:3c:ef:f5:ab:3b:5e:87:64:de:2d:c5: 64:70:ed:de:44:c6:9c:21:c4:37:7e:f6:62:ad:4a: 01:a1:85:b1:28:1e:f1:1d:dd:26:e4:dd:7f:04:90: 36:ea:cf:f6:40:55:44:c4:03:1c:04:59:33:a4:1b: 6e:eb:f7:39:22:ef:de:22:e8:56:a0:58:1c:5c:93: 6b:39:34:7e:85:5a:4b:6c:38:95:75:69:63:da:7c: 9b:7e:1c:16:74:82:0e:7a:2c:f4:fc:96:3c:b9:ba: c7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C1:F3:82:B5:54:03:26:C9:1D:30:48:3A:2E:62:70:B8:41:89:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08f837f3-b33c-3641-8c18-c88879acca60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:de:d4:3f:08:a5:06:3a:19:14:5d:50:f5:bc:a6:48:d9:18: 3f:f2:a4:a8:57:e6:63:96:1a:2c:e2:36:bd:56:68:6c:38:c3: ef:f9:9f:4b:5a:25:29:c0:a0:8b:20:c1:9f:07:98:61:cb:ee: 25:41:4b:77:5f:de:b9:df:23:71:f9:2d:23:52:d9:12:31:5e: 4b:b8:67:32:09:1b:74:b0:3d:a7:86:05:6b:f5:86:38:9d:11: 8c:c8:df:15:56:10:44:80:3d:c5:52:56:21:e0:07:d1:44:2f: 9a:e4:f8:04:40:ff:d2:dd:e1:cd:2a:69:dd:01:9b:1c:cf:3b: 25:8d:e4:e1:c3:61:78:96:b1:6e:c2:27:22:6d:b8:c0:cb:29: 1d:a2:23:6e:89:05:ff:03:7b:85:9f:f7:07:8e:81:e7:bc:43: 00:73:27:b8:2d:51:49:f7:73:5d:ba:57:7e:19:65:78:7f:9e: f3:14:43:ea:bb:0e:d6:9d:e3:bf:9f:82:6d:97:52:dd:88:a5: da:f9:62:d1:4f:54:bb:7c:2e:16:52:74:0f:c8:e2:70:c4:c3: 61:0b:ff:b2:a6:73:7e:7e:6d:9c:49:5c:79:6e:42:b1:39:b9: 3e:ff:cc:16:d2:ab:b5:8c:25:cd:eb:c1:2e:85:a8:b6:ce:d4: ad:c8:c3:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rW/y1odeXWq+FHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YWYxYmY0MDctZDgyNC00NWU2LWE5MTktYjExM2E3NWI1NTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MAKVLRnbEwdF1L1owMhxZRl326DS17SYKnZ Xgml5er0d8GxOivG1wns29dPoDmVCEIyjB//Jt3IBX7JXmyxhSWStapRwoPDkiM8 O+0e2Pr/r1vok4SyQZqneyZ+6pZddH+JGoP4kKHb8zRpbYy4dYy+zufv6GRM0kdh t8qgIHu8Dwa0LMuntUcH1NOvfzy77EXxIGh1qpmFPO/1qzteh2TeLcVkcO3eRMac IcQ3fvZirUoBoYWxKB7xHd0m5N1/BJA26s/2QFVExAMcBFkzpBtu6/c5Iu/eIuhW oFgcXJNrOTR+hVpLbDiVdWlj2nybfhwWdIIOeiz0/JY8ubrH9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHB84K1VAMmyR0wSDouYnC4QYmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDhmODM3ZjMtYjMzYy0z NjQxLThjMTgtYzg4ODc5YWNjYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLe1D8IpQY6GRRdUPW8pkjZGD/ypKhX5mOWGiziNr1WaGw4w+/5n0ta JSnAoIsgwZ8HmGHL7iVBS3df3rnfI3H5LSNS2RIxXku4ZzIJG3SwPaeGBWv1hjid EYzI3xVWEESAPcVSViHgB9FEL5rk+ARA/9Ld4c0qad0BmxzPOyWN5OHDYXiWsW7C JyJtuMDLKR2iI26JBf8De4Wf9weOgee8QwBzJ7gtUUn3c126V34ZZXh/nvMUQ+q7 Dtad47+fgm2XUt2Ipdr5YtFPVLt8LhZSdA/I4nDEw2EL/7Kmc35+bZxJXHluQrE5 uT7/zBbSq7WMJc3rwS6FqLbO1K3Iwxw= -----END CERTIFICATE-----Generated at Sun Sep 27 11:37:54 2026 by rpki-client