$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa File: 1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa (raw, json) Hash identifier: T+vUQEQIdxC5HQ5j1Vvz7tEecq89UFDnYBax0Wz4qGY= Subject key identifier: 97:32:22:FE:37:12:87:E1:CA:9E:D3:32:CA:51:29:86:72:F4:67:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD6EFDD029E8C45E3E10C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.43.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:6e:fd:d0:29:e8:c4:5e:3e:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=12e3a911-9d6f-4694-99ad-e3f016ca3324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:26:05:0b:2c:03:45:68:2b:7f:b7:91:8d:13: b6:f9:d5:35:66:5e:5d:50:c1:d3:d7:a3:9d:88:cd: c0:b3:86:75:3a:70:f2:ef:45:f1:8c:a1:89:dd:d3: fb:7f:23:08:78:dd:69:c7:c1:51:18:62:6d:85:d7: 7c:24:eb:1e:5b:8a:1e:4e:04:01:b8:e2:45:9e:b4: 70:18:62:98:ae:7f:85:42:b7:9b:ec:f3:d1:91:d8: f2:21:45:67:a0:d7:5a:26:11:f9:84:40:0a:c4:95: 69:5d:0d:ae:d7:83:12:f5:26:28:b2:2a:74:c4:91: 74:de:36:18:01:8b:66:2d:fe:58:c4:13:19:58:cc: 17:9f:75:9a:7a:07:91:f6:f4:66:e9:84:75:6b:56: 5a:2e:ce:2b:b6:05:cf:0c:f4:2f:d0:bc:98:e0:c4: ce:b9:04:10:bd:22:fd:9c:56:04:7e:54:db:ab:1a: 69:18:3a:5f:4d:06:6c:c3:c9:83:79:8a:66:77:4a: 5f:ab:10:74:7e:72:34:e6:8c:e6:6e:a8:8d:c0:ce: cf:99:7e:79:c2:46:45:33:19:6e:17:46:2f:f1:b4: 60:2f:8b:92:cb:aa:23:c8:d7:f4:6b:45:92:20:a9: d6:c0:55:a4:93:5f:9c:d9:e7:e9:92:c1:8f:0a:fd: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:32:22:FE:37:12:87:E1:CA:9E:D3:32:CA:51:29:86:72:F4:67:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1846216e-e6c6-33db-92dd-d823b2c4c9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:38:13:85:ac:8e:21:88:ad:6a:83:9e:f9:7e:f8:24:2b:d2: 7d:89:8c:68:00:d8:b3:2d:bb:b9:a3:c3:16:0b:b5:62:8c:6e: ec:c3:cd:4b:5c:3f:08:81:69:28:12:4f:c6:33:18:64:7a:5e: 77:b3:44:fc:71:e9:10:ac:86:bd:1d:85:c3:bf:52:91:50:48: 85:66:69:9e:06:1b:2c:ed:b6:bf:00:f0:a3:9c:55:fd:e8:f7: 72:5c:a2:a3:10:f3:b3:44:b9:a9:63:40:19:f7:a8:93:52:ee: 93:ae:6f:b3:ce:70:b7:98:0a:1a:66:d4:9e:6b:49:b6:a5:66: 6c:05:a7:60:c4:7c:15:8a:3a:70:20:f1:e0:57:93:d6:44:a5: 1e:d6:9c:15:94:53:62:53:90:22:55:7c:5f:8d:75:2a:04:7d: ac:16:01:37:cc:31:d4:d9:71:ae:d6:09:8c:d5:12:90:dd:dd: 9e:62:03:bd:00:ad:d9:6e:ad:4a:51:c3:22:a1:48:c6:28:a6: 7d:b4:e3:fc:5f:54:3f:ad:1c:03:ad:52:6b:47:3e:9b:aa:db: b1:53:2b:2b:08:7b:72:b1:61:1e:12:b4:78:d0:53:b8:b5:45: 7e:f6:91:15:6a:5a:68:68:86:be:0d:dc:02:cb:fb:39:2d:cc: b4:3b:df:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rW790CnoxF4+EMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MTJlM2E5MTEtOWQ2Zi00Njk0LTk5YWQtZTNmMDE2Y2EzMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCYFCywDRWgrf7eRjRO2+dU1Zl5dUMHT16Od iM3As4Z1OnDy70XxjKGJ3dP7fyMIeN1px8FRGGJthdd8JOseW4oeTgQBuOJFnrRw GGKYrn+FQreb7PPRkdjyIUVnoNdaJhH5hEAKxJVpXQ2u14MS9SYosip0xJF03jYY AYtmLf5YxBMZWMwXn3WaegeR9vRm6YR1a1ZaLs4rtgXPDPQv0LyY4MTOuQQQvSL9 nFYEflTbqxppGDpfTQZsw8mDeYpmd0pfqxB0fnI05ozmbqiNwM7PmX55wkZFMxlu F0Yv8bRgL4uSy6ojyNf0a0WSIKnWwFWkk1+c2efpksGPCv234wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcyIv43Eofhyp7TMspRKYZy9GcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTg0NjIxNmUtZTZjNi0z M2RiLTkyZGQtZDgyM2IyYzRjOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFytoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA4E4WsjiGIrWqDnvl++CQr0n2JjGgA2LMtu7mjwxYLtWKMbuzDzUtc PwiBaSgST8YzGGR6XnezRPxx6RCshr0dhcO/UpFQSIVmaZ4GGyzttr8A8KOcVf3o 93JcoqMQ87NEualjQBn3qJNS7pOub7POcLeYChpm1J5rSbalZmwFp2DEfBWKOnAg 8eBXk9ZEpR7WnBWUU2JTkCJVfF+NdSoEfawWATfMMdTZca7WCYzVEpDd3Z5iA70A rdlurUpRwyKhSMYopn204/xfVD+tHAOtUmtHPpuq27FTKysIe3KxYR4StHjQU7i1 RX72kRVqWmhohr4N3ALL+zktzLQ731w= -----END CERTIFICATE-----Generated at Wed Sep 23 11:38:21 2026 by rpki-client