$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/789d62f2-2b56-350c-b7cb-7b7690dc009a.roa File: 789d62f2-2b56-350c-b7cb-7b7690dc009a.roa (raw, json) Hash identifier: bThdkEyQefaWgtrC+yA3fdVtIoHfKvYpbS/Bhb+Dlq0= Subject key identifier: 4E:3D:05:C1:0F:3A:A8:C6:47:60:5C:82:8D:62:E7:DD:12:09:C7:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7CA518B04E5BB1B86CA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/789d62f2-2b56-350c-b7cb-7b7690dc009a.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.33.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:ca:51:8b:04:e5:bb:1b:86:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=d0c4e978-8735-4438-9cba-32a07c330119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:23:d7:a2:72:b6:4f:29:a0:6c:22:89:91:5e: 93:94:9c:57:f1:2d:68:cb:e2:8b:80:fb:5a:fa:fd: 5f:d2:cb:16:8b:73:3e:50:ec:5e:17:5b:59:b8:ac: c8:a0:f8:1e:6c:e6:90:bd:ad:cc:05:aa:d4:ac:b4: 64:37:2f:e8:49:1d:19:95:3c:1e:ba:19:a5:8a:ff: e8:d4:49:62:5d:66:fd:02:e5:30:44:c7:f5:b0:f4: b1:b6:44:a1:7a:82:91:9f:0d:64:17:92:8b:15:ef: b5:d0:9b:ac:08:6e:c2:24:1f:2b:56:bb:9e:4a:e2: 0a:19:6e:68:e3:94:e4:5d:9a:b0:ad:6b:cf:d1:4d: c2:31:7c:f5:6d:e3:49:34:c8:27:da:13:d3:2b:0c: b9:fc:ce:b6:ee:ba:fa:51:8a:2d:77:c4:ff:d2:41: c2:03:d5:cc:12:7c:96:27:e7:9f:61:aa:b5:a9:bc: ff:36:1c:41:f0:f1:a6:a0:13:ac:fd:a4:77:e7:95: b5:2e:5c:ef:24:ca:eb:b7:b3:5b:10:8f:89:fd:64: c2:56:9d:69:22:ca:4d:4e:09:b1:eb:99:b6:9a:5a: e8:c6:55:46:e5:d3:a1:0a:92:24:49:12:82:95:de: c2:62:a2:4b:7f:b0:6d:40:3b:26:ad:d3:a9:d1:0f: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3D:05:C1:0F:3A:A8:C6:47:60:5C:82:8D:62:E7:DD:12:09:C7:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/789d62f2-2b56-350c-b7cb-7b7690dc009a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:93:f4:48:4e:bc:e8:20:59:8c:6d:21:5b:2b:34:4b:cb:7a: a2:ef:ff:de:ca:cd:54:71:3e:ac:d8:13:59:5c:47:e9:f6:f4: 55:cd:da:d3:6c:c7:e3:c8:fb:9a:23:3c:8c:78:b9:40:ac:d5: 97:3e:40:c6:62:4e:cf:03:51:e2:52:de:b4:48:8d:6a:0b:fa: c8:82:98:c3:d5:82:51:4e:03:7b:c6:b0:cd:b1:3d:64:64:55: d2:0a:44:18:cc:d7:d1:22:d2:be:45:56:dc:23:20:d1:bb:23: cd:e8:7f:68:a6:51:23:3c:e6:ce:75:af:be:05:7a:c0:1c:22: 13:bb:e7:1a:db:89:5e:dd:e1:e3:dc:78:1d:27:54:39:af:5e: e8:2c:77:24:89:da:60:2d:d2:9c:6a:a8:6f:28:54:36:16:6f: 9e:c3:45:34:9b:46:36:76:36:05:33:d3:43:9b:ae:73:54:61: bc:e1:9e:b3:51:4e:9d:55:4f:55:e9:9d:23:da:cc:4e:6c:5d: 50:af:11:2f:de:85:46:59:35:a3:bd:b8:61:05:f3:50:e7:85: b3:9c:d0:58:12:f0:3f:f2:20:d0:26:a6:a7:02:b5:2b:66:72: f3:0a:cc:1d:81:5b:6e:f3:77:05:99:c2:20:d0:e6:a7:15:43: 0a:85:2c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8pRiwTluxuGygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZDBjNGU5NzgtODczNS00NDM4LTljYmEtMzJhMDdjMzMwMTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyPXonK2TymgbCKJkV6TlJxX8S1oy+KLgPta +v1f0ssWi3M+UOxeF1tZuKzIoPgebOaQva3MBarUrLRkNy/oSR0ZlTweuhmliv/o 1EliXWb9AuUwRMf1sPSxtkSheoKRnw1kF5KLFe+10JusCG7CJB8rVrueSuIKGW5o 45TkXZqwrWvP0U3CMXz1beNJNMgn2hPTKwy5/M627rr6UYotd8T/0kHCA9XMEnyW J+efYaq1qbz/NhxB8PGmoBOs/aR355W1LlzvJMrrt7NbEI+J/WTCVp1pIspNTgmx 65m2mlroxlVG5dOhCpIkSRKCld7CYqJLf7BtQDsmrdOp0Q/PuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE49BcEPOqjGR2Bcgo1i590SCcc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg5ZDYyZjItMmI1Ni0z NTBjLWI3Y2ItN2I3NjkwZGMwMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyT9EhOvOggWYxtIVsrNEvLeqLv/97KzVRxPqzYE1lcR+n29FXN2tNs x+PI+5ojPIx4uUCs1Zc+QMZiTs8DUeJS3rRIjWoL+siCmMPVglFOA3vGsM2xPWRk VdIKRBjM19Ei0r5FVtwjING7I83of2imUSM85s51r74FesAcIhO75xrbiV7d4ePc eB0nVDmvXugsdySJ2mAt0pxqqG8oVDYWb57DRTSbRjZ2NgUz00ObrnNUYbzhnrNR Tp1VT1XpnSPazE5sXVCvES/ehUZZNaO9uGEF81DnhbOc0FgS8D/yINAmpqcCtStm cvMKzB2BW27zdwWZwiDQ5qcVQwqFLEc= -----END CERTIFICATE-----Generated at Sat Sep 26 11:17:29 2026 by rpki-client