$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cabce08-b77a-333b-a0ef-7ada3a8ed8f3.roa File: 3cabce08-b77a-333b-a0ef-7ada3a8ed8f3.roa (raw, json) Hash identifier: tMxlozrlt3yWtlNtTkpE07fsrgXW0A5zcMklGqn2VcM= Subject key identifier: 89:73:57:CD:E1:AC:7B:57:18:56:32:EF:EB:61:47:A9:D5:EA:EF:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F427823D4F82A51CCBA0A4960 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cabce08-b77a-333b-a0ef-7ada3a8ed8f3.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.48.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:23:d4:f8:2a:51:cc:ba:0a:49:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=f4e30600-8fc9-4a1c-8506-f2860db729fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:65:91:20:a7:cc:9f:70:27:03:fa:d7:99: 32:66:ba:41:aa:2d:2e:54:da:e4:e4:dc:53:89:59: c7:a8:bc:d1:98:1c:5d:79:94:8f:59:5f:25:0f:2d: 80:72:84:9b:85:0d:16:58:c7:99:75:d2:1c:4c:95: 11:4e:00:a2:66:c5:5f:56:ea:f2:21:4f:a6:40:60: dd:4e:60:50:df:e7:16:07:ae:44:c8:fd:13:f2:60: 2a:fa:9f:5f:f8:1c:01:71:86:da:d2:6e:28:a3:46: 73:ec:95:70:a7:08:88:43:17:97:24:ff:a7:4b:e9: bc:0c:66:90:7a:cb:6a:54:b8:dd:68:af:8a:e9:95: 26:6c:8a:12:8e:92:54:4f:63:1b:c0:1e:15:f8:05: fc:ae:3e:64:a5:0d:fa:93:7f:b0:06:a5:e1:0f:d7: f2:5f:42:aa:69:aa:f6:1a:ef:b1:a4:6f:51:28:2c: fa:cd:53:bd:02:55:37:51:12:cd:5f:ff:9f:83:c9: 64:5a:28:d5:02:cc:30:0a:f4:9c:ec:1e:2b:db:66: 5b:21:48:5a:d8:56:fc:e3:7d:d3:db:97:81:14:9b: 96:b5:c8:cd:c0:5d:16:ae:b4:23:a9:ba:02:93:c6: f7:d0:4c:65:72:41:1e:16:71:63:bc:38:92:b9:64: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:73:57:CD:E1:AC:7B:57:18:56:32:EF:EB:61:47:A9:D5:EA:EF:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cabce08-b77a-333b-a0ef-7ada3a8ed8f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:d5:f4:b5:50:9a:c4:3b:6b:15:aa:4f:1b:20:f6:86:a5:e4: c1:3f:70:76:58:0b:df:a6:95:27:46:48:ae:73:aa:17:31:ba: 11:b3:2e:3a:f6:9a:ff:ec:e8:bd:51:f9:f1:e0:9d:3d:ae:d7: 46:de:3b:83:3b:f9:7d:74:f5:3c:5d:f2:56:42:b5:05:7c:5f: 42:a8:39:41:d8:a9:31:1a:90:d4:e9:4a:6d:13:aa:da:70:80: 63:9a:cb:2c:8e:57:2c:d5:8f:8b:c1:04:72:12:5d:2b:55:e0: 85:b3:f7:88:33:d8:74:11:10:40:eb:97:7f:ab:f3:a1:c4:f8: a5:79:c9:23:97:fe:87:20:34:d4:c4:f3:cf:56:da:0f:d3:53: 0d:e7:bf:d8:ec:10:f6:b7:2f:4e:04:e1:91:94:38:94:b2:54: be:db:9a:b4:0d:1c:eb:10:2f:e8:85:f0:e3:50:6a:d9:f3:de: bd:6e:64:db:3a:b7:2f:8d:bf:e2:f6:22:b1:df:dc:68:d7:6f: 51:00:5d:d8:e5:c4:dd:58:f2:e9:2f:66:5d:4e:6a:90:57:f4: 57:0e:9a:e0:19:a5:08:74:11:f7:9e:a4:2e:5d:9a:1a:87:1a: 88:79:a3:f3:53:c3:6b:7e:8e:56:01:fc:e8:b4:66:ae:06:70: 06:05:f5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCPU+CpRzLoKSWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjRlMzA2MDAtOGZjOS00YTFjLTg1MDYtZjI4NjBkYjcyOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11dlkSCnzJ9wJwP615kyZrpBqi0uVNrk5NxT iVnHqLzRmBxdeZSPWV8lDy2AcoSbhQ0WWMeZddIcTJURTgCiZsVfVuryIU+mQGDd TmBQ3+cWB65EyP0T8mAq+p9f+BwBcYba0m4oo0Zz7JVwpwiIQxeXJP+nS+m8DGaQ estqVLjdaK+K6ZUmbIoSjpJUT2MbwB4V+AX8rj5kpQ36k3+wBqXhD9fyX0Kqaar2 Gu+xpG9RKCz6zVO9AlU3URLNX/+fg8lkWijVAswwCvSc7B4r22ZbIUha2Fb8433T 25eBFJuWtcjNwF0WrrQjqboCk8b30ExlckEeFnFjvDiSuWQh+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlzV83hrHtXGFYy7+thR6nV6u8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2NhYmNlMDgtYjc3YS0z MzNiLWEwZWYtN2FkYTNhOGVkOGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLV9LVQmsQ7axWqTxsg9oal5ME/cHZYC9+mlSdGSK5zqhcxuhGzLjr2 mv/s6L1R+fHgnT2u10beO4M7+X109Txd8lZCtQV8X0KoOUHYqTEakNTpSm0Tqtpw gGOayyyOVyzVj4vBBHISXStV4IWz94gz2HQREEDrl3+r86HE+KV5ySOX/ocgNNTE 889W2g/TUw3nv9jsEPa3L04E4ZGUOJSyVL7bmrQNHOsQL+iF8ONQatnz3r1uZNs6 ty+Nv+L2IrHf3GjXb1EAXdjlxN1Y8ukvZl1OapBX9FcOmuAZpQh0EfeepC5dmhqH Goh5o/NTw2t+jlYB/Oi0Zq4GcAYF9cc= -----END CERTIFICATE-----Generated at Thu Sep 24 23:52:33 2026 by rpki-client