$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d8722a7-b793-3bbb-abf6-e03125e2a653.roa File: 8d8722a7-b793-3bbb-abf6-e03125e2a653.roa (raw, json) Hash identifier: T56AjrqqdubRGoPAfh9kB0NqTKKb/eceEfoK0u/WyYM= Subject key identifier: 89:0E:01:72:E2:44:D8:D5:46:E5:9D:D5:45:C8:97:EE:2F:CB:84:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F42782467E1105C3958176BE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d8722a7-b793-3bbb-abf6-e03125e2a653.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.48.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:24:67:e1:10:5c:39:58:17:6b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=095e568e-c91f-45fc-a3a5-99c7bd566736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d7:04:e0:cb:2d:f1:9e:6a:7f:87:d3:38:6b: e9:ab:b6:6e:f2:5b:29:78:c2:e1:9a:a1:09:cf:c8: 1e:c0:4e:e8:08:cd:0c:69:97:5e:03:de:3f:32:8f: 1c:a3:c2:b8:35:a0:99:47:fc:18:8b:59:ae:26:9a: 3c:6c:c6:4e:e8:06:41:c5:78:f0:5d:ef:4c:d3:27: 5f:f3:1c:40:02:06:e0:b7:ff:74:a0:16:b6:04:31: 3a:f9:76:a9:22:6f:a6:a9:ab:82:22:b5:79:5a:dc: f4:3a:dd:ff:f8:a4:3a:41:39:62:3a:01:c9:d9:02: a6:8e:3a:a5:2c:e1:b0:ab:dc:ee:7f:fb:4b:65:38: a3:08:1d:8b:f6:c3:4e:84:fa:46:54:8c:4a:48:13: da:9e:58:e2:35:9e:2a:20:ae:bf:b3:ce:fc:93:12: 8f:d2:a4:85:82:a2:13:04:5c:5d:0f:8a:33:ad:f9: 85:43:92:ea:4c:c2:0c:67:d8:22:a5:c1:51:64:e7: 6e:59:6b:f7:8e:9d:11:85:c6:6b:ae:03:57:bf:e3: 35:9f:d0:a5:73:60:a8:8f:0d:62:4d:54:6a:a9:fb: eb:b2:b2:bf:23:19:d0:78:58:28:30:70:23:da:d1: 1c:30:21:58:f2:f9:1a:cd:aa:a8:2a:b8:ad:ac:0c: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0E:01:72:E2:44:D8:D5:46:E5:9D:D5:45:C8:97:EE:2F:CB:84:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d8722a7-b793-3bbb-abf6-e03125e2a653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:55:15:ad:31:7a:3d:da:74:ed:a1:5e:99:9d:93:1c:99:1f: 30:f0:be:95:54:26:d9:84:5b:db:75:4f:ea:64:b2:94:42:1c: 54:fd:82:27:ab:9b:fa:d3:cf:d9:da:a5:bd:26:74:21:4c:a1: e2:a2:18:b7:ec:64:23:ef:03:11:0c:ed:cb:fe:95:60:f7:dd: 5b:1f:c6:a5:92:62:b2:bc:08:22:47:97:68:4a:39:ee:bd:93: 39:35:81:a7:91:4b:31:86:ab:1f:fa:85:40:ff:d6:ac:70:51: a8:fc:54:f5:3a:e4:75:2a:23:ae:a7:76:c1:12:fd:83:3a:58: 9e:fd:45:a5:40:21:20:1f:83:da:5a:13:f1:4e:52:27:d8:93: 9a:a9:df:e7:af:51:8f:bf:cb:80:73:d2:e9:2b:20:e1:33:a5: 59:91:5a:56:75:ac:ab:05:e0:57:e4:84:47:b8:68:bf:b8:4b: ac:f7:09:6c:2c:1a:95:12:43:a4:4e:7e:55:75:a9:d3:99:f9: d7:4d:2a:db:96:19:91:51:7b:72:88:6f:6f:e2:97:b4:91:38: 91:4b:b6:00:a7:9a:4e:c0:f6:46:82:0e:2a:f5:6a:a5:26:f8: 34:81:3a:b7:57:3a:7b:e2:50:1a:10:dc:f7:62:10:34:1c:24: b5:aa:bc:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCRn4RBcOVgXa+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MDk1ZTU2OGUtYzkxZi00NWZjLWEzYTUtOTljN2JkNTY2NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdcE4Mst8Z5qf4fTOGvpq7Zu8lspeMLhmqEJ z8gewE7oCM0MaZdeA94/Mo8co8K4NaCZR/wYi1muJpo8bMZO6AZBxXjwXe9M0ydf 8xxAAgbgt/90oBa2BDE6+XapIm+mqauCIrV5Wtz0Ot3/+KQ6QTliOgHJ2QKmjjql LOGwq9zuf/tLZTijCB2L9sNOhPpGVIxKSBPanljiNZ4qIK6/s878kxKP0qSFgqIT BFxdD4ozrfmFQ5LqTMIMZ9gipcFRZOduWWv3jp0RhcZrrgNXv+M1n9Clc2Cojw1i TVRqqfvrsrK/IxnQeFgoMHAj2tEcMCFY8vkazaqoKritrAxS4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkOAXLiRNjVRuWd1UXIl+4vy4TxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ4NzIyYTctYjc5My0z YmJiLWFiZjYtZTAzMTI1ZTJhNjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtVFa0xej3adO2hXpmdkxyZHzDwvpVUJtmEW9t1T+pkspRCHFT9gier m/rTz9napb0mdCFMoeKiGLfsZCPvAxEM7cv+lWD33VsfxqWSYrK8CCJHl2hKOe69 kzk1gaeRSzGGqx/6hUD/1qxwUaj8VPU65HUqI66ndsES/YM6WJ79RaVAISAfg9pa E/FOUifYk5qp3+evUY+/y4Bz0ukrIOEzpVmRWlZ1rKsF4FfkhEe4aL+4S6z3CWws GpUSQ6ROflV1qdOZ+ddNKtuWGZFRe3KIb2/il7SROJFLtgCnmk7A9kaCDir1aqUm +DSBOrdXOnviUBoQ3PdiEDQcJLWqvGA= -----END CERTIFICATE-----Generated at Thu Sep 24 21:42:13 2026 by rpki-client