$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353dd376-a983-3029-a9a9-3c4d4849db8a.roa File: 353dd376-a983-3029-a9a9-3c4d4849db8a.roa (raw, json) Hash identifier: n2fCTQUQe82bM4QKYghaoMOqphFpPxyJZE6w7rEwsXU= Subject key identifier: 0C:9F:4D:0F:63:45:32:7D:C3:1F:80:59:41:7C:E5:13:F9:68:F9:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F1E51B64EF53A4039980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353dd376-a983-3029-a9a9-3c4d4849db8a.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.39.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f1:e5:1b:64:ef:53:a4:03:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=b70e75b5-19de-43a5-809f-d478c22afe1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f5:7a:2b:85:b6:3e:a3:a0:cf:c8:de:bc:1d: 75:cc:c3:2e:9a:0b:1b:ce:c2:2d:da:75:88:ef:09: 83:ef:04:b7:0e:c7:2e:74:1d:91:11:02:8c:08:b2: ed:c8:59:55:ca:f2:e1:ed:8d:ab:24:76:78:7d:9b: ee:22:c0:6f:ed:d0:bc:3e:94:b1:69:f0:40:79:9d: b8:50:93:31:92:6c:09:bc:3b:b5:af:a2:4b:ec:95: f5:65:2b:7c:c4:92:10:33:89:90:03:d9:46:c0:f5: dd:17:dc:6e:a4:a6:6b:3b:7a:99:d9:67:35:b2:f8: 49:33:40:16:01:ce:22:2a:0c:a2:5b:4c:18:00:df: df:f8:8c:92:5f:b4:ab:99:59:38:64:11:3f:ec:46: 4a:55:1a:dd:42:e8:24:93:bd:9f:ab:3c:e0:ce:41: 14:f6:df:ba:4d:6b:40:2b:4a:61:1a:1a:e6:9e:0b: 5c:fb:86:ee:83:20:19:e7:7f:5e:05:f7:96:ac:10: 28:dc:82:51:43:2a:64:31:ea:a2:01:0d:ff:8f:f4: 73:0d:7a:10:50:bb:77:f6:cf:40:47:05:7d:07:15: d7:22:38:ac:35:eb:c3:17:fc:d1:21:0a:8b:43:9b: 19:08:cf:39:41:36:00:ab:cd:9d:85:4e:48:21:8a: de:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9F:4D:0F:63:45:32:7D:C3:1F:80:59:41:7C:E5:13:F9:68:F9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/353dd376-a983-3029-a9a9-3c4d4849db8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7d:be:ce:19:81:84:f2:ec:25:5b:47:93:8a:1b:6e:28:77: 64:a5:6b:f0:d5:84:c2:9c:02:a5:87:18:73:af:c5:c3:bd:89: 54:27:52:00:78:37:16:4c:74:1a:22:48:9a:b3:29:bc:a9:83: ea:90:52:7b:1c:3d:31:d5:7f:ff:f8:0a:d6:ec:05:de:81:95: 61:1a:5f:25:35:db:ef:89:25:a8:ae:37:1d:12:48:be:53:35: 94:c2:e8:08:42:91:df:76:a5:5d:d6:33:1e:b0:a2:7f:35:ff: 22:2f:ce:4d:99:89:ca:e9:a7:7e:be:c3:0f:8a:8a:a2:08:31: 4c:85:1b:bc:f5:3d:a5:cf:f7:38:06:87:ac:2a:65:61:ab:24: a4:13:bf:0b:61:d6:40:4e:f9:c9:b9:3b:58:21:5b:c8:14:32: 3f:12:72:ee:60:42:d8:15:99:f6:3d:30:54:8e:cb:38:da:53: 69:a6:04:b5:56:52:95:f5:e1:46:04:b8:91:34:72:71:e4:e0: 43:7e:55:46:5a:01:b5:8f:e1:8a:33:d7:b4:00:72:94:7d:32: 19:d3:9b:79:96:b6:d2:de:1b:d0:e7:c8:2a:91:70:9d:8d:8e: bf:58:1f:23:de:b9:df:55:1a:08:90:a8:3e:d9:c4:8e:33:2f: 00:df:d5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/HlG2TvU6QDmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YjcwZTc1YjUtMTlkZS00M2E1LTgwOWYtZDQ3OGMyMmFmZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fV6K4W2PqOgz8jevB11zMMumgsbzsIt2nWI 7wmD7wS3DscudB2REQKMCLLtyFlVyvLh7Y2rJHZ4fZvuIsBv7dC8PpSxafBAeZ24 UJMxkmwJvDu1r6JL7JX1ZSt8xJIQM4mQA9lGwPXdF9xupKZrO3qZ2Wc1svhJM0AW Ac4iKgyiW0wYAN/f+IySX7SrmVk4ZBE/7EZKVRrdQugkk72fqzzgzkEU9t+6TWtA K0phGhrmngtc+4bugyAZ539eBfeWrBAo3IJRQypkMeqiAQ3/j/RzDXoQULt39s9A RwV9BxXXIjisNevDF/zRIQqLQ5sZCM85QTYAq82dhU5IIYrexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyfTQ9jRTJ9wx+AWUF85RP5aPkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzUzZGQzNzYtYTk4My0z MDI5LWE5YTktM2M0ZDQ4NDlkYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp9vs4ZgYTy7CVbR5OKG24od2Sla/DVhMKcAqWHGHOvxcO9iVQnUgB4 NxZMdBoiSJqzKbypg+qQUnscPTHVf//4CtbsBd6BlWEaXyU12++JJaiuNx0SSL5T NZTC6AhCkd92pV3WMx6won81/yIvzk2Zicrpp36+ww+KiqIIMUyFG7z1PaXP9zgG h6wqZWGrJKQTvwth1kBO+cm5O1ghW8gUMj8Scu5gQtgVmfY9MFSOyzjaU2mmBLVW UpX14UYEuJE0cnHk4EN+VUZaAbWP4Yoz17QAcpR9MhnTm3mWttLeG9DnyCqRcJ2N jr9YHyPeud9VGgiQqD7ZxI4zLwDf1fY= -----END CERTIFICATE-----Generated at Sat Sep 26 12:51:42 2026 by rpki-client