$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f361939-1630-3f74-a1fe-3b3232d7a216.roa File: 0f361939-1630-3f74-a1fe-3b3232d7a216.roa (raw, json) Hash identifier: y5HVJ8yrILKsBpkJ2efatx7r8s44T4GSfNc4eynKhKI= Subject key identifier: 9E:FE:E1:54:6C:E5:7D:DC:5A:4F:0A:0C:3D:E2:77:7A:77:02:EF:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD4C39A417F9D4A68AC380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f361939-1630-3f74-a1fe-3b3232d7a216.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.44.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:4c:39:a4:17:f9:d4:a6:8a:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=c18813b8-6eba-419c-80d0-6049b5b347ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:92:e6:99:7f:78:c5:cf:ba:43:11:da:fa:f8: 61:6f:f9:41:2d:bb:2c:49:02:fe:c3:6a:83:77:a9: e5:d4:37:8a:01:94:d6:e8:9d:a9:f8:9c:8e:0d:3d: 38:f5:a6:c0:f4:30:39:c1:28:ca:83:08:cb:57:9e: 23:42:c2:f2:51:56:c5:93:4b:0f:82:9f:18:e7:90: 85:70:25:9d:ea:35:83:e0:06:4b:f8:95:f0:a1:39: b3:47:db:a4:9b:9f:d0:4b:ec:cb:51:4d:41:94:58: 27:93:2e:43:e7:a8:9e:d8:c2:9a:12:cd:02:39:33: ed:f2:fc:6b:aa:47:1b:e0:c6:22:13:8a:64:63:ce: 53:5a:20:e4:ca:d7:af:6c:0f:2a:a6:29:c0:ad:01: a5:cb:1b:aa:0a:75:67:db:4e:ba:86:8c:69:5f:50: 26:4b:55:a3:96:62:48:ff:9c:0b:73:50:03:81:e9: 4f:d0:fd:c7:de:89:6c:92:3d:54:af:90:53:92:2d: 6d:7f:e6:b6:3c:4a:26:57:0b:c7:6e:9b:99:36:94: 80:7a:f8:05:d3:af:f9:4c:ba:ea:0c:78:34:cf:71: c9:62:c5:12:71:41:db:a4:85:7d:9b:ab:bb:a8:04: 10:d8:bc:36:b7:7a:1b:c7:14:d6:5f:c5:91:55:06: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FE:E1:54:6C:E5:7D:DC:5A:4F:0A:0C:3D:E2:77:7A:77:02:EF:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f361939-1630-3f74-a1fe-3b3232d7a216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1f:55:1d:a2:bc:e7:2e:9a:e7:dd:c0:d3:71:1e:b7:6e:f0: 87:be:33:82:31:ed:08:72:ed:48:39:d5:6b:d7:d7:36:d8:c5: 07:95:b7:45:5d:b7:49:91:6a:08:d5:4d:d6:40:c9:c8:87:e4: 91:37:57:98:57:ae:7e:33:9e:02:d6:ff:08:e9:83:7c:f6:43: a4:8a:d9:4b:4a:23:04:0d:b1:b5:15:92:4c:4b:08:98:0b:4a: 2c:7b:3d:f4:02:27:6d:9e:ab:07:0b:3d:4b:01:d9:9f:53:d3: b4:96:f3:7e:bf:3b:80:20:49:7d:4e:98:7d:cc:b9:aa:db:34: 19:b2:eb:6b:94:50:b0:ac:f0:f3:9f:d4:71:ed:fb:6d:41:cc: 19:b6:ec:49:5f:dd:e5:c3:c6:53:56:1b:86:f1:d4:8c:ae:e6: 34:ae:7e:3b:5e:8d:ef:32:39:18:53:61:86:c1:0b:26:9b:0e: 20:46:58:06:7d:14:2a:fc:f5:b7:2c:bf:85:bf:1b:b8:8c:96: a9:e5:1d:31:d5:0c:72:05:24:ce:7c:48:e5:80:6e:74:40:0c: e3:7e:b9:80:3d:fe:0a:ef:df:79:43:f8:d2:2b:a5:9d:e8:6a: ee:1c:25:39:7b:d8:ea:61:c9:72:7f:54:bf:e4:03:fd:e3:a9: 07:a7:02:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUw5pBf51KaKw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YzE4ODEzYjgtNmViYS00MTljLTgwZDAtNjA0OWI1YjM0N2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZLmmX94xc+6QxHa+vhhb/lBLbssSQL+w2qD d6nl1DeKAZTW6J2p+JyODT049abA9DA5wSjKgwjLV54jQsLyUVbFk0sPgp8Y55CF cCWd6jWD4AZL+JXwoTmzR9ukm5/QS+zLUU1BlFgnky5D56ie2MKaEs0COTPt8vxr qkcb4MYiE4pkY85TWiDkytevbA8qpinArQGlyxuqCnVn2066hoxpX1AmS1WjlmJI /5wLc1ADgelP0P3H3olskj1Ur5BTki1tf+a2PEomVwvHbpuZNpSAevgF06/5TLrq DHg0z3HJYsUScUHbpIV9m6u7qAQQ2Lw2t3obxxTWX8WRVQZO8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7+4VRs5X3cWk8KDD3id3p3Au90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGYzNjE5MzktMTYzMC0z Zjc0LWExZmUtM2IzMjMyZDdhMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyyHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgfVR2ivOcumufdwNNxHrdu8Ie+M4Ix7Qhy7Ug51WvX1zbYxQeVt0Vd t0mRagjVTdZAyciH5JE3V5hXrn4zngLW/wjpg3z2Q6SK2UtKIwQNsbUVkkxLCJgL Six7PfQCJ22eqwcLPUsB2Z9T07SW836/O4AgSX1OmH3MuarbNBmy62uUULCs8POf 1HHt+21BzBm27Elf3eXDxlNWG4bx1Iyu5jSufjteje8yORhTYYbBCyabDiBGWAZ9 FCr89bcsv4W/G7iMlqnlHTHVDHIFJM58SOWAbnRADON+uYA9/grv33lD+NIrpZ3o au4cJTl72OphyXJ/VL/kA/3jqQenAqU= -----END CERTIFICATE-----Generated at Mon Sep 28 12:49:05 2026 by rpki-client