$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa File: 29d89bdd-91a3-3b50-a2a1-064367986503.roa (raw, json) Hash identifier: bt81I6akWDoM5w/sG4oHXxEntxU6xHuUMJklUiAWQhA= Subject key identifier: 10:3F:05:D4:68:9C:48:FC:33:8C:2F:21:FE:37:D5:C7:01:D2:21:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F6E83C5F86ED744CE700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.36.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f6:e8:3c:5f:86:ed:74:4c:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=6e20b77d-27e6-4a82-bbe2-bfa184e171f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:91:3c:15:09:8b:c2:76:ac:35:70:2b:cf: 89:ff:21:2f:28:a9:5c:93:15:aa:96:9c:99:7e:ae: 04:8e:2b:07:f2:96:08:79:5c:15:69:df:cc:f4:fe: 6c:ff:76:ca:31:c4:b8:66:21:f6:4e:9c:cc:7a:78: 70:cd:55:f5:e0:29:a1:52:a9:92:36:56:50:15:77: f2:3c:64:5f:51:16:72:f9:95:f2:db:85:05:55:7b: ed:09:f3:89:14:6c:30:df:44:1c:71:4d:69:91:3f: 3d:a4:35:d5:0e:77:e0:66:af:23:aa:94:0b:28:7b: a9:1e:b5:26:ef:6a:a6:21:f4:fa:48:97:75:3e:39: 6e:5e:2e:e5:1e:cf:1b:5c:26:03:04:f5:07:89:37: 9c:93:2b:b8:b0:b8:ca:3e:76:35:00:50:72:c1:1d: af:60:f9:e7:66:ae:32:c5:e4:74:bc:d8:78:64:ae: 69:ee:57:71:2f:f1:9c:47:a1:12:17:73:00:16:f3: 81:94:07:21:57:4f:be:a6:06:ac:d8:b0:5b:c7:51: 63:9c:24:70:c1:0f:bc:5f:b2:c5:fe:e7:91:67:15: 45:4c:40:88:0f:75:76:2d:33:6f:71:a5:25:a3:e1: ea:42:2b:a1:91:9e:a8:14:85:b0:5c:6c:b0:c0:f6: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:05:D4:68:9C:48:FC:33:8C:2F:21:FE:37:D5:C7:01:D2:21:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29d89bdd-91a3-3b50-a2a1-064367986503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:28:96:a8:b2:38:aa:26:be:b1:02:91:a9:75:44:0a:52:c6: 1a:16:ca:ec:08:f2:ed:07:5a:02:cd:d9:68:69:83:1a:da:f0: c8:6d:83:f4:bc:d7:13:2d:70:9a:f9:2f:98:fd:69:bb:da:57: 52:bd:d8:6a:cd:ef:e1:66:63:85:46:1d:be:90:65:77:e1:b1: 7d:52:1b:15:bc:e3:88:93:d3:86:99:e2:14:50:17:d6:ec:87: ca:42:55:8b:59:47:c1:bf:0e:10:88:a9:2f:02:09:3f:d6:69: 66:4a:e1:fd:18:aa:a9:b0:63:74:e4:fb:c2:1a:ab:b1:8c:fe: 46:e4:96:9d:52:61:81:30:28:41:81:bf:5e:f9:b4:c9:83:dd: 5a:14:ff:af:12:c4:68:ed:62:76:f5:23:50:17:7f:94:9e:5d: 97:56:6d:0a:50:60:7e:6f:b2:6f:17:32:f3:db:d5:ef:9c:a4: c9:e6:b0:e3:81:2a:d1:65:3e:44:05:bb:53:55:11:7e:79:22: 6f:a9:92:d7:8c:8c:8f:01:f9:8a:fa:1f:20:dc:93:3a:94:d5: b1:57:ac:0c:3b:5a:42:a9:5c:9a:ad:25:20:ff:fc:e5:fa:7d: 19:91:62:0d:5c:8e:8d:e2:6b:3d:18:14:b2:23:5b:6f:b6:27: 6b:d5:89:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/boPF+G7XRM5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NmUyMGI3N2QtMjdlNi00YTgyLWJiZTItYmZhMTg0ZTE3MWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmCRPBUJi8J2rDVwK8+J/yEvKKlckxWqlpyZ fq4EjisH8pYIeVwVad/M9P5s/3bKMcS4ZiH2TpzMenhwzVX14CmhUqmSNlZQFXfy PGRfURZy+ZXy24UFVXvtCfOJFGww30QccU1pkT89pDXVDnfgZq8jqpQLKHupHrUm 72qmIfT6SJd1PjluXi7lHs8bXCYDBPUHiTeckyu4sLjKPnY1AFBywR2vYPnnZq4y xeR0vNh4ZK5p7ldxL/GcR6ESF3MAFvOBlAchV0++pgas2LBbx1FjnCRwwQ+8X7LF /ueRZxVFTECID3V2LTNvcaUlo+HqQiuhkZ6oFIWwXGywwPaf3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA/BdRonEj8M4wvIf431ccB0iGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjlkODliZGQtOTFhMy0z YjUwLWEyYTEtMDY0MzY3OTg2NTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyRMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgolqiyOKomvrECkal1RApSxhoWyuwI8u0HWgLN2Whpgxra8Mhtg/S8 1xMtcJr5L5j9abvaV1K92GrN7+FmY4VGHb6QZXfhsX1SGxW844iT04aZ4hRQF9bs h8pCVYtZR8G/DhCIqS8CCT/WaWZK4f0YqqmwY3Tk+8Iaq7GM/kbklp1SYYEwKEGB v175tMmD3VoU/68SxGjtYnb1I1AXf5SeXZdWbQpQYH5vsm8XMvPb1e+cpMnmsOOB KtFlPkQFu1NVEX55Im+pkteMjI8B+Yr6HyDckzqU1bFXrAw7WkKpXJqtJSD//OX6 fRmRYg1cjo3iaz0YFLIjW2+2J2vViVQ= -----END CERTIFICATE-----Generated at Tue Sep 29 16:53:38 2026 by rpki-client