$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84792fab-7346-33cc-8f6c-dac93ee36b02.roa File: 84792fab-7346-33cc-8f6c-dac93ee36b02.roa (raw, json) Hash identifier: PZlvHCiUYZQYm4bvKDc1sMZOr2JGN20yxx3pFXYhzME= Subject key identifier: 61:3B:9E:DD:D2:12:51:D2:38:F4:69:CD:D4:4B:0E:0E:44:3E:22:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F1AB15F3D5D997E9CB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84792fab-7346-33cc-8f6c-dac93ee36b02.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.39.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f1:ab:15:f3:d5:d9:97:e9:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=d7966b55-37f2-4dc9-a64f-c1874b5f06c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:1b:6c:a1:48:9a:42:54:52:24:93:50:08: 45:a3:77:b6:ea:c9:39:5d:d5:c2:a8:41:37:49:85: 92:8f:7a:62:2b:bd:f6:17:f4:88:c6:6d:16:90:17: 4f:75:c7:5c:63:23:ca:5a:be:85:a7:de:93:56:40: f6:b2:8a:63:b8:e8:29:d0:9e:b0:28:fe:4a:22:1f: ef:5c:a6:cf:d9:06:3c:3b:be:4d:49:51:30:84:0a: 3c:6b:79:ef:ad:34:83:42:97:a5:88:a9:e3:bf:a0: dd:6d:20:87:e1:f2:10:8d:71:5e:58:95:f4:67:ff: 43:8b:1a:c9:7f:3b:61:00:5d:8c:b8:54:c6:48:11: 95:9c:ce:b2:53:f2:b1:15:6d:d6:07:48:16:04:f7: 0a:f9:13:60:42:18:34:d4:f7:d9:8b:09:a4:d4:80: 08:1f:03:5d:f4:58:76:a6:51:7a:a7:c9:04:e9:bf: 2d:41:d3:86:0f:14:e5:8a:d0:e4:00:2f:ca:7b:3a: a9:1d:4c:37:c7:8b:ef:47:c8:02:ef:32:91:f3:fd: af:c1:19:0a:fa:e4:4e:c5:54:6d:05:ec:c6:e4:94: a6:0d:0e:06:50:85:91:2b:53:00:7a:fe:35:11:12: 48:3d:af:ad:d9:3c:0d:ed:9f:f5:60:da:73:4b:c9: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3B:9E:DD:D2:12:51:D2:38:F4:69:CD:D4:4B:0E:0E:44:3E:22:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84792fab-7346-33cc-8f6c-dac93ee36b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ca:60:f2:04:e8:62:26:b3:e1:48:16:e6:b4:e3:14:33:47: 9f:09:d7:73:40:a8:1e:9c:91:9d:36:ae:53:be:15:86:0f:e6: 02:95:e9:47:79:86:83:93:d7:f2:70:4d:81:ae:36:b6:0f:45: 66:4e:7f:a8:52:0d:7c:41:a9:09:0e:7f:32:31:69:3e:c0:70: 18:70:4d:27:12:b2:7b:ba:45:30:a9:e6:38:13:03:1d:53:a5: 80:e6:0c:5f:2d:01:79:be:72:d8:3f:87:0f:c3:e1:63:be:24: a5:90:30:22:8d:b7:67:7a:38:a1:9c:b8:f4:07:c3:93:4d:20: 15:6e:08:9e:e5:8f:28:da:e9:cf:7a:38:7b:67:38:0d:8f:ca: a8:e4:a9:6b:be:0a:5c:82:4a:f9:fa:8c:12:41:95:cc:cc:ef: 1e:e5:a3:aa:37:31:62:b8:0a:87:45:6a:57:02:6f:82:cd:92: f2:93:d9:ae:51:ec:ba:44:28:b2:c1:33:fc:38:d5:ed:2f:51: cd:f6:2d:28:09:fe:9e:4b:15:d8:29:8d:bf:51:eb:0c:7a:17: 49:25:f6:8d:f9:aa:dd:28:d2:3a:30:16:06:01:bf:b9:e2:23: b7:df:a2:9f:8e:5c:ff:89:9e:8c:46:59:c2:f4:21:26:d7:11: c7:54:cc:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/GrFfPV2ZfpywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZDc5NjZiNTUtMzdmMi00ZGM5LWE2NGYtYzE4NzRiNWYwNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE4bbKFImkJUUiSTUAhFo3e26sk5XdXCqEE3 SYWSj3piK732F/SIxm0WkBdPdcdcYyPKWr6Fp96TVkD2sopjuOgp0J6wKP5KIh/v XKbP2QY8O75NSVEwhAo8a3nvrTSDQpeliKnjv6DdbSCH4fIQjXFeWJX0Z/9DixrJ fzthAF2MuFTGSBGVnM6yU/KxFW3WB0gWBPcK+RNgQhg01PfZiwmk1IAIHwNd9Fh2 plF6p8kE6b8tQdOGDxTlitDkAC/KezqpHUw3x4vvR8gC7zKR8/2vwRkK+uROxVRt BezG5JSmDQ4GUIWRK1MAev41ERJIPa+t2TwN7Z/1YNpzS8ko/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE7nt3SElHSOPRpzdRLDg5EPiIWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ3OTJmYWItNzM0Ni0z M2NjLThmNmMtZGFjOTNlZTM2YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvKYPIE6GIms+FIFua04xQzR58J13NAqB6ckZ02rlO+FYYP5gKV6Ud5 hoOT1/JwTYGuNrYPRWZOf6hSDXxBqQkOfzIxaT7AcBhwTScSsnu6RTCp5jgTAx1T pYDmDF8tAXm+ctg/hw/D4WO+JKWQMCKNt2d6OKGcuPQHw5NNIBVuCJ7ljyja6c96 OHtnOA2PyqjkqWu+ClyCSvn6jBJBlczM7x7lo6o3MWK4CodFalcCb4LNkvKT2a5R 7LpEKLLBM/w41e0vUc32LSgJ/p5LFdgpjb9R6wx6F0kl9o35qt0o0jowFgYBv7ni I7ffop+OXP+JnoxGWcL0ISbXEcdUzDo= -----END CERTIFICATE-----Generated at Wed Sep 23 10:49:14 2026 by rpki-client