$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a09240b-adb1-37ba-9cd5-cdc1d3d2a57f.roa File: 0a09240b-adb1-37ba-9cd5-cdc1d3d2a57f.roa (raw, json) Hash identifier: 3Ljjd+36tjf6Iqq6y59wOuBeSG57a4poKjWCziDZxI4= Subject key identifier: 4E:C9:37:B5:D3:47:28:A7:FA:8F:25:02:3D:28:36:90:59:93:BE:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C9708A848F24FB2CB520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a09240b-adb1-37ba-9cd5-cdc1d3d2a57f.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.33.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c9:70:8a:84:8f:24:fb:2c:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=04303852-e85b-4014-85ea-7974d1dcf7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:e4:d2:0a:4d:da:75:50:5f:4c:07:72:2f: 58:b6:d0:56:fa:4b:6a:8f:20:54:8a:b5:f0:47:48: 65:9e:26:84:9d:99:1a:cb:e3:7b:d2:09:b3:dc:61: 7d:98:d4:aa:37:fd:86:49:75:64:38:87:f4:e5:26: a6:44:34:66:73:05:69:96:b6:20:21:3f:c9:bf:78: 60:45:08:c2:15:1a:b5:1d:5a:2e:10:ec:11:81:ab: bd:19:a6:9a:ef:bb:91:36:91:e6:bc:b8:b1:0b:17: 30:bc:ab:02:64:72:69:6d:d1:99:76:49:f5:c6:11: c3:f2:2a:e7:d7:97:78:be:59:46:9e:6c:48:9b:41: 97:c2:94:b2:f6:95:2c:9f:ee:12:2d:88:d6:04:9e: 27:06:3a:33:7e:20:ab:19:dc:9d:4b:58:4a:50:42: f4:76:51:99:67:4a:76:22:de:4b:7c:f4:95:a2:49: aa:9a:20:ce:ab:f1:d1:11:db:14:f2:4e:3d:f5:ad: ed:8b:3b:52:db:54:d5:65:1a:45:29:ad:94:30:f4: cd:74:2c:b9:34:05:01:33:39:21:ba:25:8d:7d:c0: 81:11:b2:a2:e2:e7:a2:c9:da:4a:1a:da:dd:54:46: e6:4e:fa:ca:d7:6c:d6:34:34:1d:00:6b:82:52:d4: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C9:37:B5:D3:47:28:A7:FA:8F:25:02:3D:28:36:90:59:93:BE:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a09240b-adb1-37ba-9cd5-cdc1d3d2a57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:87:5b:4d:8c:44:24:be:a1:e6:33:ff:0d:34:a4:c4:16:8a: 8f:31:91:9a:f9:6f:a1:51:c2:9d:5a:c4:30:37:e7:c0:ae:83: d5:4f:22:34:21:ec:1e:c3:81:0b:38:6b:2d:93:8d:08:cd:b7: 63:b4:18:f1:86:70:8a:64:67:7f:e5:50:c0:9d:b6:a3:4d:a5: db:ab:50:f5:f9:a4:d2:5a:ff:b3:02:5a:7c:13:d5:9f:5e:08: d3:2d:5a:99:92:92:07:05:d0:16:2e:cf:11:0c:11:2b:ce:34: 56:ed:37:84:3e:db:11:2c:2e:04:b0:12:3e:ce:4b:b4:f7:49: f8:3a:cd:39:ce:11:e9:e4:b3:ab:90:38:d4:93:5b:8a:eb:ff: 3c:f2:e8:70:c7:53:02:51:33:69:54:b1:c7:67:04:13:31:81: 40:4a:86:fa:9c:d3:18:b0:5e:a1:8f:52:da:e0:67:20:76:80: 64:c9:75:38:3a:54:05:2c:a2:50:b6:77:14:68:1b:21:f8:9d: d7:a6:03:01:f7:96:fe:84:96:cb:a9:23:ff:5e:a0:31:3b:3d: b3:47:87:e7:b4:7d:44:3f:8c:93:3f:40:45:af:a0:f7:be:cf: 93:44:2c:6c:51:ec:2f:eb:b3:f2:a3:98:28:60:31:94:a8:b2: 8e:b5:8c:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8lwioSPJPsstSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MDQzMDM4NTItZTg1Yi00MDE0LTg1ZWEtNzk3NGQxZGNmN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zrk0gpN2nVQX0wHci9YttBW+ktqjyBUirXw R0hlniaEnZkay+N70gmz3GF9mNSqN/2GSXVkOIf05SamRDRmcwVplrYgIT/Jv3hg RQjCFRq1HVouEOwRgau9Gaaa77uRNpHmvLixCxcwvKsCZHJpbdGZdkn1xhHD8irn 15d4vllGnmxIm0GXwpSy9pUsn+4SLYjWBJ4nBjozfiCrGdydS1hKUEL0dlGZZ0p2 It5LfPSVokmqmiDOq/HREdsU8k499a3tiztS21TVZRpFKa2UMPTNdCy5NAUBMzkh uiWNfcCBEbKi4ueiydpKGtrdVEbmTvrK12zWNDQdAGuCUtSqcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7JN7XTRyin+o8lAj0oNpBZk77uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGEwOTI0MGItYWRiMS0z N2JhLTljZDUtY2RjMWQzZDJhNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+HW02MRCS+oeYz/w00pMQWio8xkZr5b6FRwp1axDA358Cug9VPIjQh 7B7DgQs4ay2TjQjNt2O0GPGGcIpkZ3/lUMCdtqNNpdurUPX5pNJa/7MCWnwT1Z9e CNMtWpmSkgcF0BYuzxEMESvONFbtN4Q+2xEsLgSwEj7OS7T3Sfg6zTnOEenks6uQ ONSTW4rr/zzy6HDHUwJRM2lUscdnBBMxgUBKhvqc0xiwXqGPUtrgZyB2gGTJdTg6 VAUsolC2dxRoGyH4ndemAwH3lv6ElsupI/9eoDE7PbNHh+e0fUQ/jJM/QEWvoPe+ z5NELGxR7C/rs/KjmChgMZSoso61jF8= -----END CERTIFICATE-----Generated at Wed Sep 23 04:40:44 2026 by rpki-client