$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811df8d9-830b-37d6-bc85-2b6ea1514864.roa File: 811df8d9-830b-37d6-bc85-2b6ea1514864.roa (raw, json) Hash identifier: 6xYCpxFJlvKouyTTOsV7sV2/il/YrS6Nbz8H2sXBlWg= Subject key identifier: 33:FE:F3:B1:DF:2E:6A:39:DB:0E:9B:D3:EC:84:14:DC:92:1C:10:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4278267274D13E916F820AB0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811df8d9-830b-37d6-bc85-2b6ea1514864.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.48.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:26:72:74:d1:3e:91:6f:82:0a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=7a3c8975-d592-4290-9e8e-723540494cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ee:7c:55:41:3d:a7:df:39:5f:f3:cb:70:dd: 45:8d:0c:44:2d:13:0d:19:3d:c2:64:ed:3d:ff:98: 32:42:6b:5c:64:42:a6:f1:a0:e3:28:fa:9e:f8:7e: 51:4e:6b:25:e2:0e:77:5d:60:09:ee:35:2b:e4:98: f4:68:74:18:2a:e3:fa:66:d8:01:10:be:b5:f2:95: 96:b1:ea:3a:2f:ae:5e:b5:9b:ee:25:c8:fa:ac:6d: ad:da:62:e0:a9:6b:d0:09:b5:9e:7c:10:5e:35:79: f1:01:17:b9:57:1c:9a:3e:87:4e:7e:b1:29:9e:c6: eb:8d:20:db:ee:eb:6c:51:51:cc:ad:89:07:90:45: 4d:a3:11:ae:c7:b5:2d:10:02:b8:91:32:b2:f4:41: 65:5a:4f:46:e1:74:8c:79:9a:96:7c:60:bf:ac:e8: 69:b4:54:35:0a:48:e0:3c:16:64:64:3d:cc:93:00: ce:3d:68:8d:75:bb:a1:2d:b9:d8:5f:6b:5f:63:85: 67:0e:4c:54:6d:33:12:54:46:4a:1c:0e:83:57:8e: 69:dd:0e:b1:d9:77:63:82:36:2f:11:79:62:d2:62: 5e:5f:2a:b0:6f:92:b8:85:e0:2e:fe:a3:0f:ac:d2: 49:8d:c6:ee:19:b5:54:54:c8:10:c6:4b:8d:62:cd: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FE:F3:B1:DF:2E:6A:39:DB:0E:9B:D3:EC:84:14:DC:92:1C:10:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/811df8d9-830b-37d6-bc85-2b6ea1514864.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ba:dd:a6:57:da:24:98:7e:4e:0d:75:54:93:1a:73:08:c7: 04:51:99:5f:e3:4d:2a:62:d2:00:a9:04:f7:02:37:45:a4:03: e4:d7:b5:94:86:0f:03:4c:62:dd:24:05:1d:e7:4f:33:5f:3a: a9:bd:59:0d:2d:75:b0:13:ed:63:c8:6f:d9:e4:f5:39:1f:ff: 24:a5:86:46:40:8b:af:b1:c3:5b:22:dc:b3:7e:a2:3d:94:e1: a0:38:08:17:53:04:60:e3:54:21:9f:98:79:6c:fa:1f:28:72: 31:4d:06:36:99:11:db:cf:30:23:c3:0f:96:e1:4b:1c:1c:0e: 57:63:3e:37:a1:22:54:83:86:eb:ba:48:c2:98:9f:91:a5:4e: 31:43:e5:20:1a:eb:95:3b:d3:be:45:59:d1:bb:85:9e:3c:68: 97:da:37:1b:f0:0e:d7:13:00:ec:60:48:fb:fa:7b:17:c1:10: 60:21:a3:f1:06:6a:6a:3e:62:6e:16:f9:ab:f5:c3:ad:12:e8: e0:7b:68:3d:7f:eb:fd:6b:a0:a1:6d:89:d8:d3:4e:f1:df:2c: c4:25:85:65:1d:a7:6d:f4:1f:06:75:2e:61:86:48:74:29:67: 99:e1:c2:6e:ea:43:b0:dd:85:b0:27:4c:39:a8:f8:c5:e1:b3: 71:9f:e5:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCZydNE+kW+CCrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk N2EzYzg5NzUtZDU5Mi00MjkwLTllOGUtNzIzNTQwNDk0Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+58VUE9p985X/PLcN1FjQxELRMNGT3CZO09 /5gyQmtcZEKm8aDjKPqe+H5RTmsl4g53XWAJ7jUr5Jj0aHQYKuP6ZtgBEL618pWW seo6L65etZvuJcj6rG2t2mLgqWvQCbWefBBeNXnxARe5VxyaPodOfrEpnsbrjSDb 7utsUVHMrYkHkEVNoxGux7UtEAK4kTKy9EFlWk9G4XSMeZqWfGC/rOhptFQ1Ckjg PBZkZD3MkwDOPWiNdbuhLbnYX2tfY4VnDkxUbTMSVEZKHA6DV45p3Q6x2XdjgjYv EXli0mJeXyqwb5K4heAu/qMPrNJJjcbuGbVUVMgQxkuNYs2GhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP+87HfLmo52w6b0+yEFNySHBAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODExZGY4ZDktODMwYi0z N2Q2LWJjODUtMmI2ZWExNTE0ODY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW63aZX2iSYfk4NdVSTGnMIxwRRmV/jTSpi0gCpBPcCN0WkA+TXtZSG DwNMYt0kBR3nTzNfOqm9WQ0tdbAT7WPIb9nk9Tkf/ySlhkZAi6+xw1si3LN+oj2U 4aA4CBdTBGDjVCGfmHls+h8ocjFNBjaZEdvPMCPDD5bhSxwcDldjPjehIlSDhuu6 SMKYn5GlTjFD5SAa65U7075FWdG7hZ48aJfaNxvwDtcTAOxgSPv6exfBEGAho/EG amo+Ym4W+av1w60S6OB7aD1/6/1roKFtidjTTvHfLMQlhWUdp230HwZ1LmGGSHQp Z5nhwm7qQ7DdhbAnTDmo+MXhs3Gf5ZU= -----END CERTIFICATE-----Generated at Fri Sep 25 17:02:52 2026 by rpki-client