$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa File: 8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa (raw, json) Hash identifier: cFAxeoDrBBQf6qecP70rlaQoQDncOiXueprwvD5W8pU= Subject key identifier: CE:BC:12:A3:8F:C4:71:23:89:D6:A6:EE:1D:AB:01:11:34:8F:89:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD4AD34EE29BB525716B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.43.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:4a:d3:4e:e2:9b:b5:25:71:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=9fe938bc-8724-4b24-a1f3-1823ea984b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:55:4e:35:0d:6e:fa:d0:d5:35:fe:2b:51:cd: 51:d1:47:42:37:0f:cd:e9:13:38:ce:f5:77:6f:98: bc:c5:30:a4:82:3b:ed:89:54:c1:b6:dd:9f:54:43: 30:a6:63:42:ca:e1:9f:d5:24:fc:a1:ab:54:57:04: cf:91:0e:d8:06:04:9e:fa:7b:cd:3b:a1:25:7c:60: 89:e4:0d:4c:09:9d:d3:91:c2:ef:f8:11:0d:02:e5: 4e:fe:8a:1b:fd:0e:0e:c4:79:c7:fa:32:8b:0e:30: 03:ab:77:e3:ca:15:cc:d2:26:dd:12:8d:c9:16:66: 81:cf:7b:2c:df:6a:e8:5d:36:30:1e:95:49:e8:32: 2b:67:42:99:fc:22:cb:04:ec:d3:d2:26:26:08:4f: 12:2f:ce:cb:07:f5:b1:89:17:d3:a0:04:26:54:44: 64:03:e5:3f:20:d0:92:c0:7c:4b:41:34:ef:b0:e0: 7a:01:54:a4:2c:66:a5:7f:c9:50:32:87:ad:98:88: ae:ac:0a:e6:8f:66:34:31:5e:e5:59:b3:e0:8d:54: 47:f0:a2:de:5c:b7:4b:f4:fe:31:c0:90:31:71:00: 70:51:99:9f:a1:28:9d:c5:4f:28:33:3a:5c:7e:00: 42:72:7b:29:5f:bc:92:2d:bb:49:7c:09:d8:c4:a3: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:12:A3:8F:C4:71:23:89:D6:A6:EE:1D:AB:01:11:34:8F:89:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bf0290a-3e3c-3710-a98a-14c9b1a689f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4a:70:5d:55:ec:89:9c:a2:4c:da:3a:90:40:1e:84:64:c1: b1:e7:52:32:80:5a:72:22:35:a8:b7:b6:4e:3b:7b:9c:a2:b7: d9:46:8f:d2:87:af:b1:3f:61:06:c6:64:65:e4:55:1a:db:c7: 23:dc:73:dd:22:86:6d:08:eb:55:4f:81:f2:7d:39:1e:68:46: 6b:52:b1:ee:c9:50:f2:cd:19:b0:53:6b:06:d9:fb:10:8b:0d: a7:cc:57:3e:80:cb:74:af:12:36:60:e5:e1:4e:f5:fe:31:f9: 86:75:41:29:e4:e0:7a:b6:a0:0a:57:48:68:fd:9f:e1:61:d5: a3:53:72:7d:c6:ea:df:eb:8a:71:b7:3c:01:ac:21:4d:c8:87: 6d:13:e0:7e:78:d9:d9:41:62:d9:a5:32:aa:fd:91:35:f7:18: e4:3a:32:3f:14:69:fc:e8:ea:54:ec:36:2a:af:f2:df:60:af: 16:20:63:d0:70:85:78:90:a8:19:24:a8:ba:b1:a7:7c:1b:82: 4c:e6:9c:f0:57:61:14:7d:40:d5:cf:1c:17:6c:7e:0e:62:fb: 28:eb:9c:e3:39:69:80:bf:10:a7:37:0d:38:40:c4:6f:2a:ef: a1:f0:bd:91:e9:f5:f4:45:f0:3c:d1:01:58:ce:21:b8:4f:a9: da:2c:21:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUrTTuKbtSVxawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OWZlOTM4YmMtODcyNC00YjI0LWExZjMtMTgyM2VhOTg0YjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11VONQ1u+tDVNf4rUc1R0UdCNw/N6RM4zvV3 b5i8xTCkgjvtiVTBtt2fVEMwpmNCyuGf1ST8oatUVwTPkQ7YBgSe+nvNO6ElfGCJ 5A1MCZ3TkcLv+BENAuVO/oob/Q4OxHnH+jKLDjADq3fjyhXM0ibdEo3JFmaBz3ss 32roXTYwHpVJ6DIrZ0KZ/CLLBOzT0iYmCE8SL87LB/WxiRfToAQmVERkA+U/INCS wHxLQTTvsOB6AVSkLGalf8lQMoetmIiurArmj2Y0MV7lWbPgjVRH8KLeXLdL9P4x wJAxcQBwUZmfoSidxU8oMzpcfgBCcnspX7ySLbtJfAnYxKMRGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM68EqOPxHEjidam7h2rARE0j4kQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJmMDI5MGEtM2UzYy0z NzEwLWE5OGEtMTRjOWIxYTY4OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFys8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExKcF1V7ImcokzaOpBAHoRkwbHnUjKAWnIiNai3tk47e5yit9lGj9KH r7E/YQbGZGXkVRrbxyPcc90ihm0I61VPgfJ9OR5oRmtSse7JUPLNGbBTawbZ+xCL DafMVz6Ay3SvEjZg5eFO9f4x+YZ1QSnk4Hq2oApXSGj9n+Fh1aNTcn3G6t/rinG3 PAGsIU3Ih20T4H542dlBYtmlMqr9kTX3GOQ6Mj8Uafzo6lTsNiqv8t9grxYgY9Bw hXiQqBkkqLqxp3wbgkzmnPBXYRR9QNXPHBdsfg5i+yjrnOM5aYC/EKc3DThAxG8q 76HwvZHp9fRF8DzRAVjOIbhPqdosIUk= -----END CERTIFICATE-----Generated at Tue Sep 29 12:37:44 2026 by rpki-client