$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f69a741-6e96-3761-aea8-14609458ccb2.roa File: 2f69a741-6e96-3761-aea8-14609458ccb2.roa (raw, json) Hash identifier: JDUjdkWtHIl1AizDfSsQv2itnn0TCZZH21X/i2Msy3I= Subject key identifier: 29:29:A6:C4:C5:F1:31:8E:C0:C2:17:2B:2C:65:B5:FF:21:D4:BB:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F30D10256068A9DE5000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f69a741-6e96-3761-aea8-14609458ccb2.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.40.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f3:0d:10:25:60:68:a9:de:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=2892b3fe-97a0-44a1-843d-bebeff7ad793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ac:00:e2:24:09:92:e4:f9:d1:a0:75:7d:e1: ba:3f:61:37:b8:e9:c5:39:2e:80:b1:dd:4f:f4:a5: 12:74:44:80:da:92:6f:ab:e5:c6:a5:89:4a:50:07: 6f:c8:ce:61:be:24:56:0c:08:49:2a:9e:bc:c8:10: 4a:f1:23:19:57:3a:8f:23:52:a5:5c:29:ba:02:27: a6:9f:b3:6c:36:de:18:4f:bb:2b:33:99:83:7a:56: 27:07:68:8c:43:b4:0c:1e:b6:f0:e3:7f:c3:de:28: 6a:31:6d:df:1d:33:97:3c:cb:1b:93:73:1f:9b:0f: b0:df:06:f3:d5:a3:e2:f0:41:e0:18:a8:3e:dc:34: 8c:7d:9e:dc:a8:92:bc:38:ff:c7:e8:09:b2:d5:dc: d7:7f:4a:21:d0:a8:c4:bf:fc:62:f5:5f:af:9f:95: 98:56:9e:3b:d2:36:ca:6e:76:ac:3f:ba:c7:03:2f: ee:93:c9:db:5f:d9:f1:f4:5f:db:99:65:d6:91:45: 50:83:04:a0:4c:c3:09:af:5f:a3:39:10:e6:00:9b: ee:cf:47:8a:ef:90:c6:e0:d1:02:61:bb:69:4b:f3: e4:fd:02:81:9f:5d:b5:83:01:f3:0e:a0:94:f7:7b: 81:a2:5f:9a:63:25:43:0f:25:53:5e:9b:fd:fb:3a: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:29:A6:C4:C5:F1:31:8E:C0:C2:17:2B:2C:65:B5:FF:21:D4:BB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f69a741-6e96-3761-aea8-14609458ccb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5a:ab:f3:5c:b8:54:ab:08:87:f0:19:5b:2f:23:35:83:28: a2:0a:39:54:99:5b:fb:ea:2a:19:94:bd:e9:11:cf:d1:47:df: 85:1d:8c:67:a8:d5:11:51:8f:56:d9:e7:93:76:10:8c:7d:2e: 5a:05:7d:6b:72:d4:29:7e:62:fe:fb:b8:7f:d4:e4:27:0e:19: 81:eb:c9:54:db:2e:05:12:47:a6:cd:7f:a2:e6:08:df:f7:ea: f9:70:82:cc:68:b4:5f:7c:e4:be:43:95:59:7a:ef:2a:4e:a8: 54:21:a3:99:0f:a4:cb:fc:91:44:01:65:7e:66:51:e5:c0:06: 67:b2:dd:1b:45:af:b1:52:14:b8:fe:5f:7c:34:ac:9f:b1:58: a2:bb:c5:cd:79:24:c3:22:53:36:b2:c9:4c:e9:46:33:f2:fa: 28:64:16:49:f8:0f:a5:d3:d1:14:07:21:16:5e:1e:2d:36:37: cb:ef:4b:c9:e4:22:49:48:f8:0a:ed:b5:3c:89:6d:e4:50:18: 5f:6c:97:be:a6:58:54:31:b6:69:66:d3:5b:21:d1:a1:a0:88: 4c:a7:27:76:14:6a:fd:d3:db:36:c4:d7:be:c3:97:53:6b:b5: 20:48:63:de:1e:2e:8a:81:9b:57:77:19:c0:a9:ce:2f:e7:30: 73:4b:31:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/MNECVgaKneUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Mjg5MmIzZmUtOTdhMC00NGExLTg0M2QtYmViZWZmN2FkNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqwA4iQJkuT50aB1feG6P2E3uOnFOS6Asd1P 9KUSdESA2pJvq+XGpYlKUAdvyM5hviRWDAhJKp68yBBK8SMZVzqPI1KlXCm6Aiem n7NsNt4YT7srM5mDelYnB2iMQ7QMHrbw43/D3ihqMW3fHTOXPMsbk3Mfmw+w3wbz 1aPi8EHgGKg+3DSMfZ7cqJK8OP/H6Amy1dzXf0oh0KjEv/xi9V+vn5WYVp470jbK bnasP7rHAy/uk8nbX9nx9F/bmWXWkUVQgwSgTMMJr1+jORDmAJvuz0eK75DG4NEC YbtpS/Pk/QKBn121gwHzDqCU93uBol+aYyVDDyVTXpv9+zrlgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkppsTF8TGOwMIXKyxltf8h1Ls6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmY2OWE3NDEtNmU5Ni0z NzYxLWFlYTgtMTQ2MDk0NThjY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJaq/NcuFSrCIfwGVsvIzWDKKIKOVSZW/vqKhmUvekRz9FH34UdjGeo 1RFRj1bZ55N2EIx9LloFfWty1Cl+Yv77uH/U5CcOGYHryVTbLgUSR6bNf6LmCN/3 6vlwgsxotF985L5DlVl67ypOqFQho5kPpMv8kUQBZX5mUeXABmey3RtFr7FSFLj+ X3w0rJ+xWKK7xc15JMMiUzayyUzpRjPy+ihkFkn4D6XT0RQHIRZeHi02N8vvS8nk IklI+ArttTyJbeRQGF9sl76mWFQxtmlm01sh0aGgiEynJ3YUav3T2zbE177Dl1Nr tSBIY94eLoqBm1d3GcCpzi/nMHNLMVo= -----END CERTIFICATE-----Generated at Wed Sep 23 01:50:02 2026 by rpki-client