$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a10ec2-1278-3171-8860-671f9b9295b8.roa File: 16a10ec2-1278-3171-8860-671f9b9295b8.roa (raw, json) Hash identifier: 8729hUQvYRdBsJN/krG5GTaWUgEaKAfILzOrPXWnPZs= Subject key identifier: A8:84:96:D8:3C:61:33:4D:F4:D8:4A:31:4A:B2:4E:C5:48:08:BA:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4112BBCEA862847B403C4EE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a10ec2-1278-3171-8860-671f9b9295b8.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.46.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:bb:ce:a8:62:84:7b:40:3c:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=203a2085-faaf-47b4-bbdb-f96862b202b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:83:c6:c3:58:ca:e8:83:13:60:46:9a:db: 4d:fa:e0:e6:d3:5e:ed:43:30:41:61:9a:20:d0:da: 71:b4:9e:b8:16:51:77:91:64:d6:36:97:e2:31:e2: 4d:82:d4:4b:57:18:32:6b:b5:c9:a5:9e:a1:27:6f: 04:8a:ca:a5:0b:23:87:a7:d2:6d:30:0b:ab:a8:6d: 68:c3:ca:d1:fd:92:5d:1f:0f:da:3a:3c:26:40:ad: 87:a1:b6:a2:53:1f:f3:07:e8:38:77:06:3d:f1:3e: 8f:0c:3c:09:7e:f8:7f:80:d9:d6:73:cd:15:c1:ae: 37:d3:8d:c1:92:e0:ef:c6:a8:1f:62:ab:d6:6b:78: 3c:ce:c8:69:30:41:e2:f5:44:48:3d:62:85:b5:20: eb:76:81:f7:b0:6b:a8:aa:36:93:7c:8c:ff:37:4a: 0d:a0:f3:a7:5c:1f:f0:0c:52:c4:28:d1:a2:80:09: 2f:24:38:66:3c:6a:e4:5b:8d:ac:70:74:72:10:5a: 1f:82:31:f8:93:d9:71:40:dc:c5:fa:b3:bf:7b:9e: 18:a0:12:ed:57:f4:b2:65:f4:70:8d:ca:b8:52:a0: fe:b5:eb:76:94:f3:36:56:2c:58:4b:d1:4e:6d:ca: e0:87:c8:ce:2f:52:d4:b8:e9:4f:88:62:c8:11:08: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:84:96:D8:3C:61:33:4D:F4:D8:4A:31:4A:B2:4E:C5:48:08:BA:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a10ec2-1278-3171-8860-671f9b9295b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.46.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a8:a4:14:6c:2d:68:b5:da:b3:6d:2f:cb:35:66:f0:f8:c1: 26:d9:d0:63:01:ec:01:62:9a:58:e9:58:97:92:39:fe:d2:06: e9:b1:46:2a:87:43:01:61:8f:00:b9:44:a9:31:db:a2:e8:71: 40:e3:18:76:ef:f3:d5:43:65:87:85:ee:0d:ba:d0:6e:da:36: 97:5a:19:bd:18:c9:8f:97:16:9b:40:be:a5:88:18:8b:25:eb: 52:ab:42:8f:bd:00:75:ae:23:f4:05:f4:b7:71:c8:41:08:09: d9:2d:3f:db:16:77:97:c1:aa:98:03:b0:d9:05:8c:9f:e2:00: 22:a0:5e:4b:c6:12:cf:23:5a:85:70:03:27:8d:ab:2d:51:44: 56:7c:8c:5f:c2:d0:95:b0:3b:87:f9:22:9a:78:12:be:bd:f2: 0a:10:1d:77:67:9a:b9:f0:09:67:d3:fa:9e:5d:3b:28:d5:f8: 95:30:5a:c7:06:7a:ed:a8:1d:61:2f:92:e4:d8:4d:b1:54:b0: a6:46:6a:0c:24:80:53:2a:c2:ab:e6:cd:4d:b5:a8:1d:bb:5b: 38:1b:7b:31:c4:0a:62:e5:24:68:49:bb:6c:c0:45:0e:a2:60: e8:0c:02:54:08:78:ac:d6:9d:77:f9:29:39:59:de:16:82:76: dc:a7:31:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErvOqGKEe0A8TuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MjAzYTIwODUtZmFhZi00N2I0LWJiZGItZjk2ODYyYjIwMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQyDxsNYyuiDE2BGmttN+uDm017tQzBBYZog 0NpxtJ64FlF3kWTWNpfiMeJNgtRLVxgya7XJpZ6hJ28EisqlCyOHp9JtMAurqG1o w8rR/ZJdHw/aOjwmQK2HobaiUx/zB+g4dwY98T6PDDwJfvh/gNnWc80Vwa43043B kuDvxqgfYqvWa3g8zshpMEHi9URIPWKFtSDrdoH3sGuoqjaTfIz/N0oNoPOnXB/w DFLEKNGigAkvJDhmPGrkW42scHRyEFofgjH4k9lxQNzF+rO/e54YoBLtV/SyZfRw jcq4UqD+tet2lPM2VixYS9FObcrgh8jOL1LUuOlPiGLIEQg5jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiEltg8YTNN9NhKMUqyTsVICLqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTZhMTBlYzItMTI3OC0z MTcxLTg4NjAtNjcxZjliOTI5NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWopBRsLWi12rNtL8s1ZvD4wSbZ0GMB7AFimljpWJeSOf7SBumxRiqH QwFhjwC5RKkx26LocUDjGHbv89VDZYeF7g260G7aNpdaGb0YyY+XFptAvqWIGIsl 61KrQo+9AHWuI/QF9LdxyEEICdktP9sWd5fBqpgDsNkFjJ/iACKgXkvGEs8jWoVw AyeNqy1RRFZ8jF/C0JWwO4f5Ipp4Er698goQHXdnmrnwCWfT+p5dOyjV+JUwWscG eu2oHWEvkuTYTbFUsKZGagwkgFMqwqvmzU21qB27WzgbezHECmLlJGhJu2zARQ6i YOgMAlQIeKzWnXf5KTlZ3haCdtynMQE= -----END CERTIFICATE-----Generated at Sun Oct 4 21:27:22 2026 by rpki-client