$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1795594a-f4e2-3646-8a29-d117eb50f6b6.roa File: 1795594a-f4e2-3646-8a29-d117eb50f6b6.roa (raw, json) Hash identifier: OZnjRP0tAUoHZcZHZeVLXi+DxN9DkQ7cC3kHOUSw9jg= Subject key identifier: 01:41:99:C5:E2:83:CF:74:5E:DA:E6:30:E5:E4:67:AE:08:24:7B:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F8C6593FD017F133ED80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1795594a-f4e2-3646-8a29-d117eb50f6b6.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.37.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f8:c6:59:3f:d0:17:f1:33:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=04be6ef0-36a1-451a-8b22-0f4abc460622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:26:4a:d9:c2:34:41:27:24:56:82:ff:de: 35:e9:82:92:da:6b:3b:92:a7:fe:79:01:37:b4:89: e8:03:f6:74:3c:38:54:6d:db:47:db:f2:33:65:71: 55:b2:58:c9:d4:26:4d:78:8f:fd:f2:5b:48:95:06: 3b:84:f9:56:9c:4a:c1:26:e3:81:6f:f8:c3:44:80: 66:7b:8f:c3:7c:5d:e8:2c:a5:ba:08:12:12:a7:7d: 61:f8:99:37:b6:70:c8:77:a3:ad:c8:be:d4:8e:b4: 67:c7:d4:66:f0:35:8f:a5:5e:4d:ba:f9:f3:ae:06: 94:d7:d8:04:d3:8b:de:f7:49:52:cf:e9:0a:17:48: 1d:27:87:a9:17:c0:0c:c9:f7:79:60:23:f4:bc:58: cd:8b:02:d3:8e:8c:28:b4:f4:13:3c:59:2d:dd:91: e0:28:a7:a4:a7:6d:55:0a:52:47:d9:90:ac:72:94: 33:34:fd:97:a6:7f:27:22:cf:c2:73:7e:6c:a6:9f: 2e:a4:6f:2a:84:94:03:e1:75:63:75:e0:f5:b8:6a: b3:e5:bd:73:5c:60:34:3a:a8:4f:d5:71:16:86:62: 95:41:32:6a:00:3a:5c:1a:fe:30:53:26:28:e1:32: 9b:41:0e:00:e1:90:84:c1:58:49:31:05:46:2a:31: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:41:99:C5:E2:83:CF:74:5E:DA:E6:30:E5:E4:67:AE:08:24:7B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1795594a-f4e2-3646-8a29-d117eb50f6b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a3:0a:49:ce:33:b9:ca:df:f2:e1:5c:71:0c:bb:5c:bb:f7: fc:54:97:b1:af:38:88:3f:9e:58:75:e8:45:74:95:e4:f0:e3: 98:8d:c9:9a:1f:9a:a4:cb:12:77:3d:e5:01:ed:31:eb:e9:67: c9:58:22:fc:e3:bd:b6:81:73:27:84:2a:25:39:86:7d:fc:a1: 40:85:5a:af:fb:85:f8:96:3a:5a:30:86:18:3d:f9:c1:30:fc: 86:1a:4b:f5:20:0b:0d:77:ed:31:3c:1b:c4:c6:15:85:bf:ec: b5:6f:53:cc:86:b7:9f:0e:86:bc:5d:ff:f5:a1:bf:eb:08:0c: 36:50:ab:87:f2:bc:67:c1:10:43:d5:d9:c0:31:97:70:8b:e0: 83:a7:fb:91:ed:cc:40:5a:13:d3:08:cf:c3:ec:0f:20:a6:10: ee:b6:a3:f7:56:e1:09:60:71:19:6e:b8:56:26:ef:6f:1b:db: 39:9f:3b:ff:ef:e6:a2:41:93:13:42:0e:2b:f0:20:ea:53:1f: 55:f6:db:15:48:8a:60:f5:b9:d7:19:d4:7d:53:58:c2:a5:89: cb:3b:d3:f9:34:8c:55:33:21:36:9a:a5:86:52:c2:f0:18:91: 8c:9c:01:4a:67:03:93:d6:7e:5b:07:71:b5:75:85:65:32:0a: f0:de:fc:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/jGWT/QF/Ez7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MDRiZTZlZjAtMzZhMS00NTFhLThiMjItMGY0YWJjNDYwNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaAmStnCNEEnJFaC/9416YKS2ms7kqf+eQE3 tInoA/Z0PDhUbdtH2/IzZXFVsljJ1CZNeI/98ltIlQY7hPlWnErBJuOBb/jDRIBm e4/DfF3oLKW6CBISp31h+Jk3tnDId6OtyL7UjrRnx9Rm8DWPpV5NuvnzrgaU19gE 04ve90lSz+kKF0gdJ4epF8AMyfd5YCP0vFjNiwLTjowotPQTPFkt3ZHgKKekp21V ClJH2ZCscpQzNP2Xpn8nIs/Cc35spp8upG8qhJQD4XVjdeD1uGqz5b1zXGA0OqhP 1XEWhmKVQTJqADpcGv4wUyYo4TKbQQ4A4ZCEwVhJMQVGKjHZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFBmcXig890XtrmMOXkZ64IJHuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTc5NTU5NGEtZjRlMi0z NjQ2LThhMjktZDExN2ViNTBmNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWjCknOM7nK3/LhXHEMu1y79/xUl7GvOIg/nlh16EV0leTw45iNyZof mqTLEnc95QHtMevpZ8lYIvzjvbaBcyeEKiU5hn38oUCFWq/7hfiWOlowhhg9+cEw /IYaS/UgCw137TE8G8TGFYW/7LVvU8yGt58Ohrxd//Whv+sIDDZQq4fyvGfBEEPV 2cAxl3CL4IOn+5HtzEBaE9MIz8PsDyCmEO62o/dW4QlgcRluuFYm728b2zmfO//v 5qJBkxNCDivwIOpTH1X22xVIimD1udcZ1H1TWMKlics70/k0jFUzITaapYZSwvAY kYycAUpnA5PWflsHcbV1hWUyCvDe/BE= -----END CERTIFICATE-----Generated at Thu Sep 24 13:45:43 2026 by rpki-client