$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3652813a-a892-3010-b000-d65c7c03786a.roa File: 3652813a-a892-3010-b000-d65c7c03786a.roa (raw, json) Hash identifier: d4CN6Ov3XWWUK3XukLrNmkYn+2cFwmvchnJVIHWlR9s= Subject key identifier: BF:2E:E3:1D:B8:A3:F8:12:07:BC:99:20:AB:F1:49:17:DB:B6:D5:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F9242205902CE1988A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3652813a-a892-3010-b000-d65c7c03786a.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.38.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f9:24:22:05:90:2c:e1:98:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=0ff7b029-d4e2-4136-bbb1-07a266974eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:d7:7e:90:49:7f:04:c0:0a:43:1e:e9:0c: 36:fc:41:1e:13:f8:7a:d5:a0:67:36:64:f5:cb:99: ae:6a:ce:a5:39:aa:00:a8:73:23:b1:d8:cb:79:9d: 14:96:a0:b6:d1:e0:cb:0a:73:51:4b:3e:fd:28:d6: fd:97:ab:71:07:00:e8:65:ac:96:9f:a2:f0:bd:d3: fb:9b:74:06:de:76:b3:a0:35:6d:62:63:6b:5d:16: 16:51:6a:31:60:4b:dc:5c:f8:48:54:b4:47:96:e7: 63:8b:6a:6a:20:02:cc:f5:60:a4:09:62:9e:1e:04: fb:09:27:08:4f:55:fc:bb:5c:86:ef:20:90:f5:4c: 42:a0:58:95:c0:88:95:60:55:18:73:3f:dd:52:46: ea:60:ec:0f:0f:59:ac:ed:94:16:c8:33:62:4c:4e: 26:69:89:2e:c4:54:4e:0f:b1:cc:95:d6:3f:39:6d: df:b4:e6:90:66:b6:11:a8:23:c2:3b:96:27:d9:fa: 21:dc:74:1c:78:e8:31:e1:ff:f6:a3:42:eb:72:73: 54:19:47:f1:44:52:b0:e2:1f:73:9a:74:26:d8:60: 9a:1a:17:d7:a1:e4:57:f5:4f:8e:bd:03:ee:83:19: 28:26:49:2d:a9:cc:5e:ea:ea:ca:2c:50:e6:ab:1b: bb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2E:E3:1D:B8:A3:F8:12:07:BC:99:20:AB:F1:49:17:DB:B6:D5:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3652813a-a892-3010-b000-d65c7c03786a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:26:85:f5:f5:0c:34:f5:f0:6e:55:fe:17:62:71:1e:18:31: cc:bb:0a:d9:1a:82:52:65:e8:49:b0:64:b7:d9:37:11:f6:7b: db:ac:b1:9e:4a:62:80:ea:57:0e:6d:dd:9b:c1:08:9f:c6:82: 5b:a4:c1:ca:d1:fa:b2:fd:07:85:66:78:2a:5e:7c:1f:c8:46: 49:a4:07:46:fc:72:67:62:fa:7d:fa:c0:9d:16:fa:da:de:f6: bc:6d:63:3e:d7:e7:a7:e8:9d:46:23:cb:31:d2:eb:01:39:49: 35:b1:52:a7:6a:59:7e:f6:ab:ce:36:71:4d:6a:66:04:76:a5: 4b:64:a8:c8:44:ae:26:73:dd:df:15:8f:5d:b4:88:af:9b:42: 10:f9:e5:0a:cf:ac:9d:a6:ef:bd:42:f4:a9:42:20:0b:5a:05: 54:10:05:3c:6c:83:0a:3e:1f:69:ad:92:07:29:e3:2d:73:d3: e5:7e:41:35:6a:a7:ee:e9:8b:3a:5d:8c:c2:92:cc:6d:e1:37: d2:f0:95:ca:f6:a7:3e:30:e6:74:dd:f8:15:e6:a8:ee:1e:92: 7e:89:06:35:13:54:b8:43:93:f6:2e:80:fc:b6:6b:02:c6:d7: 09:6a:23:8e:fe:20:77:1e:ee:28:56:75:02:78:f3:44:d2:7d: 9f:85:97:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/kkIgWQLOGYikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MGZmN2IwMjktZDRlMi00MTM2LWJiYjEtMDdhMjY2OTc0ZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E/XfpBJfwTACkMe6Qw2/EEeE/h61aBnNmT1 y5muas6lOaoAqHMjsdjLeZ0UlqC20eDLCnNRSz79KNb9l6txBwDoZayWn6LwvdP7 m3QG3nazoDVtYmNrXRYWUWoxYEvcXPhIVLRHludji2pqIALM9WCkCWKeHgT7CScI T1X8u1yG7yCQ9UxCoFiVwIiVYFUYcz/dUkbqYOwPD1ms7ZQWyDNiTE4maYkuxFRO D7HMldY/OW3ftOaQZrYRqCPCO5Yn2foh3HQceOgx4f/2o0LrcnNUGUfxRFKw4h9z mnQm2GCaGhfXoeRX9U+OvQPugxkoJkktqcxe6urKLFDmqxu7PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8u4x24o/gSB7yZIKvxSRfbttUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY1MjgxM2EtYTg5Mi0z MDEwLWIwMDAtZDY1YzdjMDM3ODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUmhfX1DDT18G5V/hdicR4YMcy7CtkaglJl6EmwZLfZNxH2e9ussZ5K YoDqVw5t3ZvBCJ/GglukwcrR+rL9B4VmeCpefB/IRkmkB0b8cmdi+n36wJ0W+tre 9rxtYz7X56fonUYjyzHS6wE5STWxUqdqWX72q842cU1qZgR2pUtkqMhEriZz3d8V j120iK+bQhD55QrPrJ2m771C9KlCIAtaBVQQBTxsgwo+H2mtkgcp4y1z0+V+QTVq p+7pizpdjMKSzG3hN9Lwlcr2pz4w5nTd+BXmqO4ekn6JBjUTVLhDk/YugPy2awLG 1wlqI47+IHce7ihWdQJ480TSfZ+Fly0= -----END CERTIFICATE-----Generated at Sun Oct 4 12:20:27 2026 by rpki-client