$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4081d435-5328-3fa9-b68b-283149181fb9.roa File: 4081d435-5328-3fa9-b68b-283149181fb9.roa (raw, json) Hash identifier: 7iqM+gEOmvj5Lv3wv5lMVp5BO1HPOAS+MizvAI+eVjw= Subject key identifier: 0B:16:98:FA:3B:E8:54:8A:1E:03:54:38:6D:D2:A8:4E:90:0C:7D:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C8250AA569981386D880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4081d435-5328-3fa9-b68b-283149181fb9.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 3786 IP address blocks: 23.35.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c8:25:0a:a5:69:98:13:86:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=f6569e86-1f57-4865-b3ae-0cbb6adff06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:43:5a:7c:e5:f4:dc:d6:d2:29:18:a1:88: a8:88:01:1b:df:0e:73:71:f1:59:7b:00:9d:7b:e7: 88:db:6b:70:a9:bf:16:9c:ac:be:76:f6:19:c2:8d: 05:54:cc:e0:8d:d2:6a:ff:4a:36:0b:60:fc:2a:0d: fa:a3:ce:b6:e3:20:06:f4:88:42:be:9f:05:02:f6: ad:bd:90:14:5a:c5:1b:a4:8d:c0:92:c7:ea:a7:07: 3a:17:77:67:d8:89:a5:e7:aa:a0:88:bf:60:06:df: 26:fa:b2:d7:f7:2e:ec:fb:c0:b2:ed:a4:f2:a6:75: 88:fd:7c:82:7d:68:14:0d:78:a3:a3:37:88:30:e3: e9:7d:ff:49:97:46:2b:7d:4d:1b:f4:cc:26:86:f8: 54:74:8f:1f:29:c9:6f:40:ef:de:fc:a8:fe:6d:41: 0c:0f:80:c5:09:f0:e3:1d:6e:1b:3a:07:ad:f6:9a: 6a:ce:3c:34:b8:60:c6:0c:b4:61:6f:36:47:e6:a2: 7e:d9:21:67:0a:23:d2:59:7f:51:9f:90:2a:67:e9: b5:6f:37:bd:d1:b6:b2:6f:33:df:8f:ff:49:7b:bb: b7:fb:aa:fe:a7:38:8a:88:b8:6b:23:bd:42:7e:3a: c1:3f:a3:2e:75:7a:28:02:63:08:b5:3d:24:c6:3d: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:16:98:FA:3B:E8:54:8A:1E:03:54:38:6D:D2:A8:4E:90:0C:7D:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4081d435-5328-3fa9-b68b-283149181fb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:04:63:86:4e:c6:95:00:f9:1d:da:8e:55:61:50:b2:b3:26: 66:71:5c:be:2b:95:c7:01:c8:af:43:70:7a:ee:66:fe:7f:3e: 2a:f7:78:7b:d0:6e:04:1a:b0:c8:69:8e:55:39:77:74:0e:3b: 11:d3:b5:e6:03:3e:c6:99:fe:e5:bc:0f:ae:45:49:16:72:43: fc:6f:36:d9:fd:65:30:68:84:a0:b3:dc:05:e2:97:bf:04:c4: 50:19:66:6f:e2:2e:ea:a3:dd:af:f5:8f:5d:09:01:ad:ba:bd: 29:71:2b:a4:f3:cd:79:18:85:1b:91:dd:68:25:79:97:31:61: 1f:52:18:a0:d0:fa:cc:e2:4e:2f:ea:c5:47:4f:45:9c:27:a1: c9:90:c8:42:43:52:79:b3:6d:44:66:3a:5a:ec:2a:9e:9f:3a: 09:65:6e:1d:d3:1f:74:90:e8:ae:4e:52:2d:64:0e:56:11:67: 51:5c:61:dc:13:50:66:ae:44:26:6f:68:a8:f1:a5:56:11:96: 69:a4:33:8a:78:9c:06:0e:1a:9e:14:8d:5a:d9:cf:1b:1b:08: 25:93:c9:9f:24:19:0b:28:51:66:d9:d2:74:5a:d3:df:95:76: 5a:eb:de:92:7d:83:af:18:60:12:24:1c:5f:e5:91:29:d4:08: af:d0:56:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98glCqVpmBOG2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjY1NjllODYtMWY1Ny00ODY1LWIzYWUtMGNiYjZhZGZmMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdZDWnzl9NzW0ikYoYioiAEb3w5zcfFZewCd e+eI22twqb8WnKy+dvYZwo0FVMzgjdJq/0o2C2D8Kg36o8624yAG9IhCvp8FAvat vZAUWsUbpI3Aksfqpwc6F3dn2Iml56qgiL9gBt8m+rLX9y7s+8Cy7aTypnWI/XyC fWgUDXijozeIMOPpff9Jl0YrfU0b9MwmhvhUdI8fKclvQO/e/Kj+bUEMD4DFCfDj HW4bOget9ppqzjw0uGDGDLRhbzZH5qJ+2SFnCiPSWX9Rn5AqZ+m1bze90baybzPf j/9Je7u3+6r+pziKiLhrI71CfjrBP6MudXooAmMItT0kxj0EjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsWmPo76FSKHgNUOG3SqE6QDH3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDA4MWQ0MzUtNTMyOC0z ZmE5LWI2OGItMjgzMTQ5MTgxZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEEY4ZOxpUA+R3ajlVhULKzJmZxXL4rlccByK9DcHruZv5/Pir3eHvQ bgQasMhpjlU5d3QOOxHTteYDPsaZ/uW8D65FSRZyQ/xvNtn9ZTBohKCz3AXil78E xFAZZm/iLuqj3a/1j10JAa26vSlxK6TzzXkYhRuR3WgleZcxYR9SGKDQ+sziTi/q xUdPRZwnocmQyEJDUnmzbURmOlrsKp6fOgllbh3TH3SQ6K5OUi1kDlYRZ1FcYdwT UGauRCZvaKjxpVYRlmmkM4p4nAYOGp4UjVrZzxsbCCWTyZ8kGQsoUWbZ0nRa09+V dlrr3pJ9g68YYBIkHF/lkSnUCK/QVos= -----END CERTIFICATE-----Generated at Sat Sep 26 05:27:42 2026 by rpki-client