$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2890328a-9892-3685-b28c-827caeabce8e.roa File: 2890328a-9892-3685-b28c-827caeabce8e.roa (raw, json) Hash identifier: LYVi93ztnWh2+2GeAaJk7uu+GS22mRHKQbBC5q8y1VQ= Subject key identifier: 4A:F6:C1:4A:BD:45:4A:75:42:D9:CF:3A:11:EB:65:82:02:E8:21:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7CB66CF77A4ABBDF34B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2890328a-9892-3685-b28c-827caeabce8e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.39.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:cb:66:cf:77:a4:ab:bd:f3:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=6bfabca0-1b41-4ac2-a264-7e3c7792e895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:77:11:d4:7e:56:f5:50:d6:a4:ef:b0:06: 36:19:5f:32:77:6c:97:01:a3:00:59:cd:67:b5:cf: f5:c5:2d:35:f9:4b:1c:10:5a:91:1f:63:88:13:85: c7:f0:eb:04:e5:b5:0f:73:87:a5:b7:72:8b:70:b9: d5:a5:be:8e:47:c5:7f:67:01:3e:2a:1e:0d:c8:22: f2:a7:f8:01:af:84:4b:39:63:54:60:c5:40:f1:ed: 50:ff:8a:6b:9c:87:fb:c0:ab:40:31:10:e0:43:a3: f1:42:94:9c:3b:41:68:66:77:46:39:cd:fe:bf:d3: c7:39:5a:3b:f2:aa:54:a7:53:46:7f:79:d3:f9:d2: 77:2a:b7:2c:e7:21:9d:19:91:de:b3:64:69:c3:88: 8c:3f:e0:26:d0:b8:ea:ed:0f:bc:da:ba:b9:a5:49: be:11:86:12:2f:8e:a5:2a:5d:33:e4:ca:48:9a:70: cf:76:c5:f6:58:29:2f:d3:11:da:73:1a:42:dc:83: ec:29:53:31:e1:15:d9:bf:a5:53:c0:48:97:63:d8: a4:e5:62:9d:45:26:7d:c1:60:b7:0b:26:cd:ec:7a: a1:6f:0d:c3:30:08:19:c3:06:32:fa:6c:c1:20:84: 55:47:9a:84:f8:6b:ba:00:06:e5:4e:c2:30:e1:ed: bf:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F6:C1:4A:BD:45:4A:75:42:D9:CF:3A:11:EB:65:82:02:E8:21:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2890328a-9892-3685-b28c-827caeabce8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:63:e0:c3:4a:05:43:80:d4:98:48:7d:ea:bc:ba:16:25:c0: 6d:4d:76:40:75:94:be:5b:8b:fb:da:62:73:16:dc:c1:08:1c: da:0f:7a:28:40:41:f2:4a:ed:58:34:70:60:70:0d:4b:45:94: 40:80:d4:60:3e:1c:33:0d:56:fe:cc:19:8b:4e:77:8d:ec:66: ec:2c:5e:f2:95:39:53:25:f0:3c:a7:11:86:fd:a5:c3:48:77: b3:74:f8:ba:e3:05:8e:24:7c:e5:bf:af:05:66:de:08:cd:a4: 6c:1c:8d:81:ff:af:2f:e0:09:4d:04:b7:3a:42:d8:d6:24:42: 6a:78:5d:3b:c1:40:0b:e3:c2:a6:44:9a:c2:6f:12:31:19:48: 44:ed:a7:69:71:41:8f:4f:29:94:fc:e1:14:ca:62:3e:4f:46: 75:73:50:a5:b7:5b:03:28:d1:30:f4:bd:e5:34:d5:65:2f:29: 96:07:a4:b0:bc:cc:97:63:88:aa:0e:ea:ff:13:aa:6c:dc:71: 25:53:44:8d:bb:98:9d:97:2f:0b:52:00:f1:41:db:71:09:84: 9d:3b:f1:5c:e0:9c:21:24:40:4d:7e:e8:a5:92:04:b1:94:55: a8:c8:3a:d0:57:9e:27:f9:7e:cf:19:cd:96:a3:94:d4:77:28: 85:6d:c9:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98tmz3ekq73zSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NmJmYWJjYTAtMWI0MS00YWMyLWEyNjQtN2UzYzc3OTJlODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXJ3EdR+VvVQ1qTvsAY2GV8yd2yXAaMAWc1n tc/1xS01+UscEFqRH2OIE4XH8OsE5bUPc4elt3KLcLnVpb6OR8V/ZwE+Kh4NyCLy p/gBr4RLOWNUYMVA8e1Q/4prnIf7wKtAMRDgQ6PxQpScO0FoZndGOc3+v9PHOVo7 8qpUp1NGf3nT+dJ3Krcs5yGdGZHes2Rpw4iMP+Am0Ljq7Q+82rq5pUm+EYYSL46l Kl0z5MpImnDPdsX2WCkv0xHacxpC3IPsKVMx4RXZv6VTwEiXY9ik5WKdRSZ9wWC3 CybN7Hqhbw3DMAgZwwYy+mzBIIRVR5qE+Gu6AAblTsIw4e2/pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr2wUq9RUp1QtnPOhHrZYIC6CFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg5MDMyOGEtOTg5Mi0z Njg1LWIyOGMtODI3Y2FlYWJjZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFj4MNKBUOA1JhIfeq8uhYlwG1NdkB1lL5bi/vaYnMW3MEIHNoPeihA QfJK7Vg0cGBwDUtFlECA1GA+HDMNVv7MGYtOd43sZuwsXvKVOVMl8DynEYb9pcNI d7N0+LrjBY4kfOW/rwVm3gjNpGwcjYH/ry/gCU0EtzpC2NYkQmp4XTvBQAvjwqZE msJvEjEZSETtp2lxQY9PKZT84RTKYj5PRnVzUKW3WwMo0TD0veU01WUvKZYHpLC8 zJdjiKoO6v8TqmzccSVTRI27mJ2XLwtSAPFB23EJhJ078VzgnCEkQE1+6KWSBLGU VajIOtBXnif5fs8ZzZajlNR3KIVtyQQ= -----END CERTIFICATE-----Generated at Tue Sep 29 14:00:23 2026 by rpki-client