$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/927244e4-4b4c-3980-b03d-72a6aba787e2.roa File: 927244e4-4b4c-3980-b03d-72a6aba787e2.roa (raw, json) Hash identifier: Iwf5gpj2ocK9tpxRKiRiF2zAS6+uKTjQzkz1bslWgaQ= Subject key identifier: 05:37:6F:88:E8:70:2E:55:37:B0:0B:39:0E:03:E2:EE:62:39:6F:8F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F427823EBBAD855CDCB3AE260 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/927244e4-4b4c-3980-b03d-72a6aba787e2.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.48.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:23:eb:ba:d8:55:cd:cb:3a:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=42dc6dc3-67b2-43be-a0af-3dfd301d6330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c4:f4:41:df:75:02:9e:38:df:21:57:55:13: e9:85:37:23:fa:9a:9f:74:7f:ad:b7:c6:9b:1e:ff: db:3a:a3:fc:91:c1:76:99:be:0d:ab:e0:40:dc:72: 6d:76:46:35:66:c1:df:48:90:66:a9:01:92:36:c6: f2:c3:77:3e:ad:56:a8:c7:ae:d9:02:0b:fe:89:d9: 0a:05:b6:60:31:e4:77:46:37:d0:69:f9:19:6d:2a: 23:5e:a1:e5:ad:a1:ff:a6:30:79:19:5e:9c:dd:75: a9:25:b5:a5:91:f0:a9:97:15:82:38:0f:29:c2:fe: 0c:ed:a7:db:5c:81:fd:13:35:71:89:df:c6:11:53: e5:c0:50:f1:84:f1:d1:71:8a:3a:64:a3:51:c5:a7: 1f:2e:67:5b:a2:68:0c:c4:ea:06:92:5a:c3:67:1d: df:1e:c0:c2:e3:7d:b5:6f:a7:89:fb:72:7a:6c:c4: 28:39:7b:b3:09:72:5b:3d:02:ee:29:b0:ab:27:10: 8c:9b:b3:96:db:b3:df:85:91:de:1a:f9:2f:dd:18: c0:c2:ac:64:2c:a1:af:71:18:f3:56:9f:4d:27:8a: 15:5f:4f:c9:3a:e4:a4:c8:9a:e2:b8:f6:43:75:99: 14:54:dc:57:07:92:a8:01:89:86:f6:36:4c:18:b7: 39:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:37:6F:88:E8:70:2E:55:37:B0:0B:39:0E:03:E2:EE:62:39:6F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/927244e4-4b4c-3980-b03d-72a6aba787e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:12:a8:17:ae:d2:48:2a:3b:36:5d:a0:30:b3:30:80:e0:4c: 52:70:ac:63:42:a0:35:1a:1c:78:09:c7:cb:49:04:0d:ef:46: 37:a1:5c:3a:0b:ae:65:a1:1b:18:c5:fe:b3:cb:dd:c3:05:01: 15:41:c0:cd:e4:20:4e:23:e1:26:f4:dc:83:69:2e:11:62:b8: 0b:2a:df:84:16:9b:ed:2b:e3:fd:35:5a:fa:00:83:82:82:6e: ae:37:01:d7:80:6f:9e:bf:65:7a:9a:a5:a5:08:d0:43:61:16: 29:a8:3f:9f:1e:e8:c6:b4:87:03:89:c6:97:a8:e3:10:02:84: ce:42:57:46:ed:42:2a:d4:c5:31:49:11:30:4e:b1:1a:3c:a5: b8:18:b4:bc:e3:77:03:bb:78:3f:79:6c:d7:cb:ae:5f:ec:2c: b8:7c:8e:b6:03:da:b6:be:7a:d7:fe:d2:73:f3:ad:a3:af:35: d9:2b:72:93:48:75:d3:73:98:ac:08:6b:d8:18:a7:f2:16:31: 5b:d6:9f:20:c8:0b:3c:1d:05:bf:cd:e1:ef:4b:8a:c8:ff:b3: 4a:82:04:c9:5b:55:6e:ef:02:f5:f3:af:bf:fb:f0:df:6d:ad: fb:f7:59:e9:5b:00:fc:37:08:9c:39:c0:04:6c:6a:39:2c:c0: 23:de:79:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCPruthVzcs64mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NDJkYzZkYzMtNjdiMi00M2JlLWEwYWYtM2RmZDMwMWQ2MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8T0Qd91Ap443yFXVRPphTcj+pqfdH+tt8ab Hv/bOqP8kcF2mb4Nq+BA3HJtdkY1ZsHfSJBmqQGSNsbyw3c+rVaox67ZAgv+idkK BbZgMeR3RjfQafkZbSojXqHlraH/pjB5GV6c3XWpJbWlkfCplxWCOA8pwv4M7afb XIH9EzVxid/GEVPlwFDxhPHRcYo6ZKNRxacfLmdbomgMxOoGklrDZx3fHsDC4321 b6eJ+3J6bMQoOXuzCXJbPQLuKbCrJxCMm7OW27PfhZHeGvkv3RjAwqxkLKGvcRjz Vp9NJ4oVX0/JOuSkyJriuPZDdZkUVNxXB5KoAYmG9jZMGLc5CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAU3b4jocC5VN7ALOQ4D4u5iOW+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTI3MjQ0ZTQtNGI0Yy0z OTgwLWIwM2QtNzJhNmFiYTc4N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAESqBeu0kgqOzZdoDCzMIDgTFJwrGNCoDUaHHgJx8tJBA3vRjehXDoL rmWhGxjF/rPL3cMFARVBwM3kIE4j4Sb03INpLhFiuAsq34QWm+0r4/01WvoAg4KC bq43AdeAb56/ZXqapaUI0ENhFimoP58e6Ma0hwOJxpeo4xAChM5CV0btQirUxTFJ ETBOsRo8pbgYtLzjdwO7eD95bNfLrl/sLLh8jrYD2ra+etf+0nPzraOvNdkrcpNI ddNzmKwIa9gYp/IWMVvWnyDICzwdBb/N4e9Lisj/s0qCBMlbVW7vAvXzr7/78N9t rfv3WelbAPw3CJw5wARsajkswCPeeSw= -----END CERTIFICATE-----Generated at Thu Sep 24 09:22:54 2026 by rpki-client