$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9eee90-326b-3257-ab82-d3ba1c5a2b15.roa File: 5f9eee90-326b-3257-ab82-d3ba1c5a2b15.roa (raw, json) Hash identifier: J8gJ6f6R955e4HRZtOnaiP5Xs7VgTivn+ChHSaFL1sY= Subject key identifier: 1E:92:C5:CB:45:02:8B:75:9D:64:4A:AF:B0:9E:76:E0:8A:F1:7C:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F2B99C1402C297DE6A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9eee90-326b-3257-ab82-d3ba1c5a2b15.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.40.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f2:b9:9c:14:02:c2:97:de:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=96c17325-fc2c-4198-838b-40b9635aa78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:f7:03:7d:cd:f1:e2:2b:0d:ab:e0:85:86: 55:d5:4d:c5:55:a3:84:3f:6b:70:ff:0b:6d:1d:02: 3c:6a:ce:9d:f6:27:52:9f:94:5d:ef:95:71:dd:87: df:81:69:40:75:9d:9a:0b:28:aa:d8:01:86:44:8b: 02:92:a7:8c:10:ee:ca:b8:1c:a3:b4:74:c4:97:21: bc:c8:c6:b3:0d:b5:df:50:9c:73:df:8f:b7:27:d6: 75:00:32:ca:77:43:c2:51:c9:69:24:94:37:c0:1a: af:4a:31:08:64:79:6c:ee:0a:c7:05:ce:34:54:df: 93:09:b8:93:70:7e:8c:b7:0b:9a:c9:d6:d9:91:9c: 78:8c:fc:3f:82:6c:72:19:5f:70:48:b6:34:a9:44: 15:0a:d7:07:ec:2e:d3:f6:4e:85:2c:70:69:92:41: 0d:6e:2a:86:de:f6:10:d2:5b:d0:92:f4:70:af:2d: 6d:00:22:1a:21:17:43:0c:e1:11:04:4d:07:d6:18: 81:35:47:a4:40:c5:10:2b:da:da:f4:a2:17:f0:eb: 46:0f:76:6e:50:f4:80:22:59:ab:07:4e:89:91:d5: 8b:2b:a5:15:a4:cc:12:31:d2:32:b9:aa:7c:35:16: 2a:ff:5d:85:b0:63:82:df:3d:22:40:f6:f5:dc:bd: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:92:C5:CB:45:02:8B:75:9D:64:4A:AF:B0:9E:76:E0:8A:F1:7C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f9eee90-326b-3257-ab82-d3ba1c5a2b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:93:0c:35:65:52:36:40:c6:07:00:01:67:c0:86:b0:7f:3f: 98:14:d2:88:b3:5b:f2:52:f7:02:fe:ea:97:0f:fa:63:ba:ab: 87:a3:ed:cb:d1:6f:2b:1f:8d:82:de:cd:9d:e5:f0:fe:d6:26: 90:5b:aa:13:03:37:52:34:63:98:e5:2b:fe:bd:e0:ff:78:5e: a2:fb:32:12:7f:d0:d9:c9:60:65:3d:7a:67:0b:2b:29:5f:c1: 03:68:98:36:55:03:d0:2f:24:dc:9b:99:82:c8:6d:e0:92:fb: 05:a6:39:99:10:06:96:67:e3:70:58:4b:e9:83:c7:6c:f4:21: 6e:f9:85:65:5a:87:3a:8e:ed:78:30:e7:7d:08:ca:82:f8:7b: 5f:52:81:b0:f2:f7:ee:85:78:9c:61:95:93:ab:f9:7f:af:f8: 75:7f:8e:4c:8c:dd:3d:b6:58:61:01:c9:0e:dd:b8:42:ea:f7: 0a:f6:16:1e:8b:b0:e7:b7:b1:f9:e1:f5:96:d8:cf:be:80:36: 71:1b:78:4c:ac:97:e1:f5:2e:f0:44:aa:ff:79:23:e7:cf:88: 9f:5f:52:91:9a:40:ea:1b:ad:ef:ab:26:a4:6f:bc:75:5e:4d: 10:bc:26:05:52:6b:5d:af:c7:c0:0c:4d:34:60:1e:c9:4d:ef: 85:50:a1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/K5nBQCwpfeagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk OTZjMTczMjUtZmMyYy00MTk4LTgzOGItNDBiOTYzNWFhNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y/3A33N8eIrDavghYZV1U3FVaOEP2tw/wtt HQI8as6d9idSn5Rd75Vx3YffgWlAdZ2aCyiq2AGGRIsCkqeMEO7KuByjtHTElyG8 yMazDbXfUJxz34+3J9Z1ADLKd0PCUclpJJQ3wBqvSjEIZHls7grHBc40VN+TCbiT cH6MtwuaydbZkZx4jPw/gmxyGV9wSLY0qUQVCtcH7C7T9k6FLHBpkkENbiqG3vYQ 0lvQkvRwry1tACIaIRdDDOERBE0H1hiBNUekQMUQK9ra9KIX8OtGD3ZuUPSAIlmr B06JkdWLK6UVpMwSMdIyuap8NRYq/12FsGOC3z0iQPb13L2rCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6SxctFAot1nWRKr7CeduCK8XzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWY5ZWVlOTAtMzI2Yi0z MjU3LWFiODItZDNiYTFjNWEyYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFygcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISTDDVlUjZAxgcAAWfAhrB/P5gU0oizW/JS9wL+6pcP+mO6q4ej7cvR bysfjYLezZ3l8P7WJpBbqhMDN1I0Y5jlK/694P94XqL7MhJ/0NnJYGU9emcLKylf wQNomDZVA9AvJNybmYLIbeCS+wWmOZkQBpZn43BYS+mDx2z0IW75hWVahzqO7Xgw 530IyoL4e19SgbDy9+6FeJxhlZOr+X+v+HV/jkyM3T22WGEByQ7duELq9wr2Fh6L sOe3sfnh9ZbYz76ANnEbeEysl+H1LvBEqv95I+fPiJ9fUpGaQOobre+rJqRvvHVe TRC8JgVSa12vx8AMTTRgHslN74VQoSA= -----END CERTIFICATE-----Generated at Wed Sep 23 16:46:19 2026 by rpki-client