$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa File: 57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa (raw, json) Hash identifier: 2gYtBZz8Zb8uSP7Rnil5eWgbm6YSS9Lt2S3ObDgriM4= Subject key identifier: 13:1A:12:C9:AB:9F:8A:A6:51:14:C0:A2:AA:BD:2A:3C:87:BB:A6:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F06913A4637DFA6E5280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.38.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f0:69:13:a4:63:7d:fa:6e:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=c0115355-792d-4db5-ae5a-f91abdb8dd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:e7:c4:68:03:13:c2:77:16:33:76:1b:43: 84:90:0e:9b:2d:fb:5c:dd:75:73:b1:75:36:dd:34: d2:ed:9d:98:03:e1:9a:6d:e2:0a:d0:94:b6:80:3f: e8:7d:31:44:89:89:46:f3:dd:d2:ad:f3:28:f8:a9: 6c:51:39:4f:46:0b:79:3c:9a:5f:37:86:98:72:02: 0e:b4:0b:cc:13:3f:7f:e2:fe:1f:e0:21:62:63:d4: f8:71:04:e5:57:92:10:55:1b:87:35:b5:f1:94:ad: c5:fe:be:83:e6:b5:fc:e8:97:02:65:a4:30:0d:08: 3e:74:8a:d6:fa:83:99:23:83:d5:a7:b6:8e:d4:b0: ac:cc:69:99:3f:58:af:f4:33:31:4b:8e:46:9f:8a: e8:d3:dc:8d:46:2d:c0:83:7a:9d:7d:ee:c7:35:5f: 43:0d:ef:e0:9f:eb:91:8c:80:5b:ff:eb:20:53:8e: 91:fe:e9:6f:09:36:c5:3e:78:d3:5e:ea:9e:5f:73: 87:14:3b:20:88:7d:25:c3:9c:18:48:b3:77:b9:47: c0:1c:a6:df:b1:4a:8e:b5:48:ae:54:46:d0:5d:60: a3:b1:8c:ae:14:e2:9b:5e:be:5e:c4:1d:51:f2:34: 48:b4:23:cd:61:a7:c0:52:2e:ae:e3:4c:d0:3a:68: 72:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1A:12:C9:AB:9F:8A:A6:51:14:C0:A2:AA:BD:2A:3C:87:BB:A6:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57f10b5c-0b6a-3c05-ab63-1de8b1a40ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0e:51:af:33:eb:43:98:a6:c5:23:c9:09:85:57:b8:82:d3: c8:49:13:fe:cb:50:9d:b1:f9:bb:77:f8:1f:91:1a:2d:68:9a: 70:d0:b6:50:b4:6d:44:4d:b9:04:94:31:34:00:5d:46:93:8a: 4d:1b:0a:09:35:f9:62:f6:df:9e:d4:ad:51:fc:97:bb:7a:11: 36:0f:60:35:08:76:0a:d0:bb:71:6b:f2:fc:05:c3:a1:19:57: 78:40:1b:bb:8a:2a:6c:75:a3:74:fa:6c:6c:6e:a3:9b:33:b1: c5:66:8d:13:cf:47:0e:0e:44:fa:10:8c:35:a6:67:22:28:be: cd:f1:fc:ad:a5:f7:84:50:ef:8e:40:5b:24:65:dd:c3:b3:50: a5:be:55:9b:bd:2b:71:60:57:ce:b7:93:68:6d:17:5f:86:d6: 62:a5:e2:dd:7a:14:76:da:a9:d3:14:b2:56:ba:d9:cd:a6:5a: 6d:32:67:ea:c2:65:1a:d8:9e:6c:9b:60:16:64:bc:0b:2e:7b: 37:50:f3:f1:25:5e:24:47:10:81:cb:74:79:75:62:ac:4d:b9: cf:c8:d1:48:ca:d0:f6:38:d1:e0:fe:39:fb:2c:c4:42:08:b2: a8:81:78:31:76:6f:7d:71:0f:76:a9:c8:28:9e:9b:d3:b9:ac: 77:3c:54:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/BpE6RjffpuUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YzAxMTUzNTUtNzkyZC00ZGI1LWFlNWEtZjkxYWJkYjhkZDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyvnxGgDE8J3FjN2G0OEkA6bLftc3XVzsXU2 3TTS7Z2YA+GabeIK0JS2gD/ofTFEiYlG893SrfMo+KlsUTlPRgt5PJpfN4aYcgIO tAvMEz9/4v4f4CFiY9T4cQTlV5IQVRuHNbXxlK3F/r6D5rX86JcCZaQwDQg+dIrW +oOZI4PVp7aO1LCszGmZP1iv9DMxS45Gn4ro09yNRi3Ag3qdfe7HNV9DDe/gn+uR jIBb/+sgU46R/ulvCTbFPnjTXuqeX3OHFDsgiH0lw5wYSLN3uUfAHKbfsUqOtUiu VEbQXWCjsYyuFOKbXr5exB1R8jRItCPNYafAUi6u40zQOmhyqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMaEsmrn4qmURTAoqq9KjyHu6Y4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdmMTBiNWMtMGI2YS0z YzA1LWFiNjMtMWRlOGIxYTQwYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoOUa8z60OYpsUjyQmFV7iC08hJE/7LUJ2x+bt3+B+RGi1omnDQtlC0 bURNuQSUMTQAXUaTik0bCgk1+WL2357UrVH8l7t6ETYPYDUIdgrQu3Fr8vwFw6EZ V3hAG7uKKmx1o3T6bGxuo5szscVmjRPPRw4ORPoQjDWmZyIovs3x/K2l94RQ745A WyRl3cOzUKW+VZu9K3FgV863k2htF1+G1mKl4t16FHbaqdMUsla62c2mWm0yZ+rC ZRrYnmybYBZkvAsuezdQ8/ElXiRHEIHLdHl1YqxNuc/I0UjK0PY40eD+OfssxEII sqiBeDF2b31xD3apyCiem9O5rHc8VAE= -----END CERTIFICATE-----Generated at Tue Sep 29 17:54:41 2026 by rpki-client