$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3688060c-720d-3110-9863-b594ca38628a.roa File: 3688060c-720d-3110-9863-b594ca38628a.roa (raw, json) Hash identifier: aO6pIs/8MZSJdhurHqqc9ma75tSRjOZDzgKmoFEag0M= Subject key identifier: 94:92:00:F7:E7:72:1F:E9:3D:B5:2E:1E:63:99:79:40:C0:E2:94:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7CC1F662C320693E68080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3688060c-720d-3110-9863-b594ca38628a.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.35.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:cc:1f:66:2c:32:06:93:e6:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=b7f12ec2-7c61-4aae-92dd-878f7ff63723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:ea:e5:9d:d0:21:d5:f8:dc:89:fa:13:e0: c0:7b:77:91:1e:f6:5f:64:bc:dc:4d:fc:cb:52:20: be:39:2c:1b:76:37:23:a7:a3:db:22:5f:da:58:73: b6:6f:52:3a:16:9b:99:46:eb:e4:2b:d1:39:c6:ce: 33:eb:19:c1:49:19:52:13:cc:6b:bd:c7:c4:72:4e: 9b:92:76:4c:5b:c5:bf:f7:0a:13:bd:eb:9d:57:7e: f6:5e:e0:c0:0e:4b:6d:ac:29:4c:b0:c4:f0:41:6f: 3f:58:50:e4:c0:8e:ec:45:55:c6:67:1c:0e:41:87: 19:20:c3:f9:f7:6b:ba:77:d3:21:a2:96:af:95:2a: 0e:da:72:54:d2:7d:4d:40:d1:f1:78:eb:3f:bd:bb: 08:bb:12:83:9d:24:9f:df:2f:44:54:c7:a8:d8:64: 04:58:da:24:a1:79:b4:f8:8d:cb:66:e2:01:49:e1: 2e:8c:31:7f:2b:e7:df:79:fc:a6:35:3f:e1:04:78: 7f:bc:71:ab:c9:80:e9:47:13:a4:20:a9:96:69:9d: 71:ff:20:9b:92:91:f8:cc:c1:7f:84:2a:3c:42:9a: 18:08:3e:2c:cb:4d:3e:ce:11:ab:be:9b:11:74:86: 0e:d7:c5:d3:73:bc:cb:bb:52:12:46:f6:69:af:2b: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:92:00:F7:E7:72:1F:E9:3D:B5:2E:1E:63:99:79:40:C0:E2:94:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3688060c-720d-3110-9863-b594ca38628a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b6:18:be:fb:0d:83:1d:56:f0:9b:df:dd:b1:09:38:d9:45: 30:f0:72:15:1c:2f:7b:db:f1:6f:b1:ed:27:c6:52:17:df:9a: 6c:af:66:47:77:5a:96:5b:01:14:20:22:87:07:7a:f6:33:c5: 42:27:3b:01:9d:b6:1c:1a:de:7c:22:ad:4f:23:c2:0a:a9:69: 3d:dc:b9:c7:d9:24:e0:78:e0:a3:d8:70:be:c6:e7:5a:8f:8d: ff:11:1d:54:21:71:3e:ca:d8:bb:8e:04:cb:79:f7:70:87:d8: 29:51:9a:98:ec:38:f6:cb:cc:8c:9c:56:32:ab:04:48:60:83: b5:a9:b2:2d:b0:e3:7e:9c:97:b7:8a:87:f3:b5:bb:25:23:bc: 1c:3e:f9:70:b9:d1:c7:79:80:9d:e7:c5:6a:8c:a0:49:b3:f9: e7:66:b8:53:6f:9b:5f:8c:f7:da:2c:45:54:e7:e5:7f:26:5e: 9f:06:86:81:16:1d:0c:f0:74:9f:af:3b:85:8f:b1:58:f6:42: 3f:8e:57:19:20:d7:b5:49:79:cc:c7:cb:32:b7:2b:94:6d:ab: a5:4f:2c:53:aa:39:d3:6a:57:bf:ad:04:d9:a7:3f:a5:c9:78: 39:21:42:21:77:3e:26:d5:0b:64:3a:ef:71:f9:e2:18:da:b1: 92:41:78:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8wfZiwyBpPmgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk YjdmMTJlYzItN2M2MS00YWFlLTkyZGQtODc4ZjdmZjYzNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVnq5Z3QIdX43In6E+DAe3eRHvZfZLzcTfzL UiC+OSwbdjcjp6PbIl/aWHO2b1I6FpuZRuvkK9E5xs4z6xnBSRlSE8xrvcfEck6b knZMW8W/9woTveudV372XuDADkttrClMsMTwQW8/WFDkwI7sRVXGZxwOQYcZIMP5 92u6d9MhopavlSoO2nJU0n1NQNHxeOs/vbsIuxKDnSSf3y9EVMeo2GQEWNokoXm0 +I3LZuIBSeEujDF/K+ffefymNT/hBHh/vHGryYDpRxOkIKmWaZ1x/yCbkpH4zMF/ hCo8QpoYCD4sy00+zhGrvpsRdIYO18XTc7zLu1ISRvZpryuktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSSAPfnch/pPbUuHmOZeUDA4pTPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY4ODA2MGMtNzIwZC0z MTEwLTk4NjMtYjU5NGNhMzg2MjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyNiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC2GL77DYMdVvCb392xCTjZRTDwchUcL3vb8W+x7SfGUhffmmyvZkd3 WpZbARQgIocHevYzxUInOwGdthwa3nwirU8jwgqpaT3cucfZJOB44KPYcL7G51qP jf8RHVQhcT7K2LuOBMt593CH2ClRmpjsOPbLzIycVjKrBEhgg7Wpsi2w436cl7eK h/O1uyUjvBw++XC50cd5gJ3nxWqMoEmz+edmuFNvm1+M99osRVTn5X8mXp8GhoEW HQzwdJ+vO4WPsVj2Qj+OVxkg17VJeczHyzK3K5Rtq6VPLFOqOdNqV7+tBNmnP6XJ eDkhQiF3PibVC2Q673H54hjasZJBeGI= -----END CERTIFICATE-----Generated at Sun Oct 4 17:57:47 2026 by rpki-client