$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa File: 28464964-e18a-34dc-b99b-717ba0d7c5e6.roa (raw, json) Hash identifier: rp8dx1K7NaP1uGmDi7e9/V2fxgaugRI83V9AsHZ7w1A= Subject key identifier: DE:56:E7:96:42:BE:DF:2A:89:90:00:6C:BF:60:50:5D:51:48:17:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C8A9A036D4F22BC57900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.35.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c8:a9:a0:36:d4:f2:2b:c5:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=ae14d966-0587-41dd-8460-7cb0592b64be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a7:0c:ef:75:ce:93:9a:f0:1b:31:ab:bc:2a: 18:88:0e:e7:e5:32:29:c7:5e:f2:f5:98:f5:61:6b: 90:5f:ce:27:ba:64:52:e8:ac:9a:d3:79:c3:16:88: 01:a8:22:dd:2c:7b:2d:a9:eb:2b:12:bd:a3:51:3c: fe:8f:14:eb:28:95:bc:fe:34:08:9d:6d:d3:2d:69: 63:8f:f7:0a:7b:76:55:5b:d7:74:20:ac:db:14:77: 1b:0e:aa:be:b4:01:74:f5:67:4a:b4:b9:ca:87:a9: a6:e5:ad:16:e7:99:71:ab:4f:8a:25:0f:92:e7:07: 71:ba:fc:14:bc:ae:f3:e1:95:67:3d:99:08:b4:7b: a1:cb:f4:5a:66:bc:42:bb:19:c8:36:66:ee:d5:67: ce:0d:ea:eb:59:df:89:e1:bf:be:90:58:77:c5:83: ee:2a:aa:82:a3:0c:54:53:76:8a:36:7d:7b:4d:6f: b8:f5:5d:30:24:09:08:6b:1d:67:e8:d6:72:ef:5d: 8e:45:6a:60:66:cb:52:7f:6d:c5:4a:2c:65:8c:74: 55:a1:77:ae:fd:9b:2b:75:85:f2:6c:47:22:98:11: 29:82:85:b8:65:a6:31:39:4a:60:98:5e:3a:7c:37: d2:ea:c6:a4:1a:3d:de:1f:3d:9a:07:5e:1d:59:2b: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:56:E7:96:42:BE:DF:2A:89:90:00:6C:BF:60:50:5D:51:48:17:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28464964-e18a-34dc-b99b-717ba0d7c5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:8f:65:00:9f:f2:07:fb:41:c6:a5:04:ca:61:e2:17:10:9d: 36:e8:36:ca:39:44:84:2f:8a:6f:44:51:4a:2f:b4:e9:93:13: 05:81:9e:a3:80:23:29:f3:2a:fc:8f:78:a3:a1:64:4f:df:00: f4:e7:c8:a3:65:ad:86:be:87:f6:5f:a1:5e:ea:bb:72:ee:8a: f9:7b:61:c9:f6:46:8b:f5:db:1a:96:8d:bd:31:3e:09:a5:47: 50:8c:9e:80:99:70:d2:52:b3:b0:d5:b2:b2:06:8f:ce:91:7b: 97:a8:28:25:16:64:dd:f5:15:45:55:81:08:a3:44:34:7b:08: 4f:ba:4b:1a:51:ad:84:aa:51:0a:41:44:7c:53:0d:09:da:0b: 77:9a:fd:8c:f8:4c:14:2d:c3:fa:f9:f1:dd:9c:56:1b:2f:2f: 06:db:8f:be:59:03:65:36:45:b2:dc:f7:64:8d:10:92:d8:0d: eb:39:24:b7:c9:08:fa:b7:f6:70:76:6a:e3:f3:b1:89:04:74: 8e:01:22:32:3b:ea:8f:fc:d3:fe:5f:1f:d0:6d:33:ca:f4:c3: 7b:f5:7d:f5:6c:d5:6d:aa:ef:1b:be:16:8c:6b:e6:42:d1:bf: 8b:69:71:b3:56:21:ff:a2:42:3b:a8:93:4e:5e:78:27:94:1b: a9:94:27:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8ipoDbU8ivFeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk YWUxNGQ5NjYtMDU4Ny00MWRkLTg0NjAtN2NiMDU5MmI2NGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgacM73XOk5rwGzGrvCoYiA7n5TIpx17y9Zj1 YWuQX84numRS6Kya03nDFogBqCLdLHstqesrEr2jUTz+jxTrKJW8/jQInW3TLWlj j/cKe3ZVW9d0IKzbFHcbDqq+tAF09WdKtLnKh6mm5a0W55lxq0+KJQ+S5wdxuvwU vK7z4ZVnPZkItHuhy/RaZrxCuxnINmbu1WfODerrWd+J4b++kFh3xYPuKqqCowxU U3aKNn17TW+49V0wJAkIax1n6NZy712ORWpgZstSf23FSixljHRVoXeu/ZsrdYXy bEcimBEpgoW4ZaYxOUpgmF46fDfS6sakGj3eHz2aB14dWSu45wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5W55ZCvt8qiZAAbL9gUF1RSBfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg0NjQ5NjQtZTE4YS0z NGRjLWI5OWItNzE3YmEwZDdjNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqPZQCf8gf7QcalBMph4hcQnTboNso5RIQvim9EUUovtOmTEwWBnqOA IynzKvyPeKOhZE/fAPTnyKNlrYa+h/ZfoV7qu3Luivl7Ycn2Rov12xqWjb0xPgml R1CMnoCZcNJSs7DVsrIGj86Re5eoKCUWZN31FUVVgQijRDR7CE+6SxpRrYSqUQpB RHxTDQnaC3ea/Yz4TBQtw/r58d2cVhsvLwbbj75ZA2U2RbLc92SNEJLYDes5JLfJ CPq39nB2auPzsYkEdI4BIjI76o/80/5fH9BtM8r0w3v1ffVs1W2q7xu+Foxr5kLR v4tpcbNWIf+iQjuok05eeCeUG6mUJ9Y= -----END CERTIFICATE-----Generated at Fri Sep 25 06:48:33 2026 by rpki-client