$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94e2a028-632a-3273-9867-915d42097f64.roa File: 94e2a028-632a-3273-9867-915d42097f64.roa (raw, json) Hash identifier: dfULjtsoD0U2cIQ8SIVu72wkCj82SlGDKX52TSNn0A8= Subject key identifier: DD:13:D5:4D:03:E5:D8:DB:DE:0E:44:74:BE:CE:7B:04:FF:FD:D4:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47FC37D7D55E85F66B3280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94e2a028-632a-3273-9867-915d42097f64.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.40.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fc:37:d7:d5:5e:85:f6:6b:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=5a9beda6-6482-4082-bd78-da84548d6155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:78:7b:6f:e0:46:00:04:c6:ac:da:36:a8:a3: 41:b6:48:ca:d3:e8:15:f2:5f:84:7e:47:3a:09:26: 04:7d:8f:34:09:83:8b:52:d7:bb:bb:ea:30:09:68: 54:f9:f8:78:bd:f2:9b:d3:c9:bd:d8:77:8c:79:e2: 95:35:c3:09:eb:75:92:93:f3:e5:63:93:7d:61:cf: fc:67:ed:a4:46:8f:b9:2a:f4:43:bb:1e:e8:f3:b3: dd:22:c9:c9:55:7a:28:ac:9c:42:51:92:b4:7e:26: 08:5e:da:d6:63:5a:65:ae:a1:c5:af:5a:b3:5b:d7: 0e:3f:43:5b:70:05:87:4e:c2:9b:b3:c2:0d:72:98: 1e:2b:7d:7b:86:b3:85:49:44:75:7e:fd:51:42:42: 79:94:7a:f2:ce:66:7b:da:7e:90:ae:57:be:53:f8: fc:05:69:cd:c8:04:97:43:d4:0d:3b:f3:f5:8c:e3: 41:62:b8:02:52:c7:dc:b2:a8:a4:36:23:82:42:c9: c0:78:47:7b:d9:af:cb:1d:c4:d1:e3:95:0a:36:c4: 6c:b4:a9:ef:9e:34:fa:f1:ff:59:b9:18:05:e8:90: bf:cf:31:16:ed:43:b2:31:8b:d0:28:9f:28:33:2c: b0:16:87:74:b3:d1:05:3f:d1:b4:59:75:06:74:4b: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:13:D5:4D:03:E5:D8:DB:DE:0E:44:74:BE:CE:7B:04:FF:FD:D4:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94e2a028-632a-3273-9867-915d42097f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:46:84:b6:cf:b4:81:52:f7:68:f2:87:d9:57:49:68:c6:57: 9b:a1:6f:8e:78:7d:19:13:44:c4:22:48:07:e0:ff:c1:d1:c6: 40:2a:5b:cb:29:ea:08:10:19:58:7f:35:e0:c9:c7:60:73:d5: e3:e3:5c:71:56:6d:0b:b4:6d:f7:ac:50:e3:05:0a:76:ec:d3: d3:58:70:4a:83:90:2a:75:7b:04:24:9d:a9:01:6d:11:15:68: ac:0b:c0:df:06:5c:fd:6b:fa:34:3e:57:4a:c0:29:7b:26:b4: 13:cd:f7:3f:3c:5e:6e:b0:e1:b0:a7:d0:87:f6:67:23:ed:97: 33:ac:ad:0f:98:b1:f4:41:45:02:33:8e:5e:29:05:4f:16:89: 4c:cf:50:55:47:73:c7:ac:2b:4f:cd:fe:8d:d2:54:84:23:9d: 17:34:1d:32:41:22:a8:5a:42:b8:5f:d1:27:ce:63:0b:67:7e: 63:70:44:e8:bb:cc:83:fe:ca:fb:00:11:31:ef:ae:dd:8a:61: aa:5f:86:b5:ae:45:80:0e:87:8c:64:f2:e5:57:3c:31:b0:ec: 3b:e4:4b:7b:29:d8:12:a9:54:50:a4:6e:33:b2:4f:82:57:40: 94:f1:87:5f:b7:b5:da:59:4d:97:05:83:e8:ef:c4:bf:e4:87: 49:e5:88:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/w319VehfZrMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NWE5YmVkYTYtNjQ4Mi00MDgyLWJkNzgtZGE4NDU0OGQ2MTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXh7b+BGAATGrNo2qKNBtkjK0+gV8l+Efkc6 CSYEfY80CYOLUte7u+owCWhU+fh4vfKb08m92HeMeeKVNcMJ63WSk/PlY5N9Yc/8 Z+2kRo+5KvRDux7o87PdIsnJVXoorJxCUZK0fiYIXtrWY1plrqHFr1qzW9cOP0Nb cAWHTsKbs8INcpgeK317hrOFSUR1fv1RQkJ5lHryzmZ72n6Qrle+U/j8BWnNyASX Q9QNO/P1jONBYrgCUsfcsqikNiOCQsnAeEd72a/LHcTR45UKNsRstKnvnjT68f9Z uRgF6JC/zzEW7UOyMYvQKJ8oMyywFod0s9EFP9G0WXUGdEsnzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0T1U0D5djb3g5EdL7OewT//dRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTRlMmEwMjgtNjMyYS0z MjczLTk4NjctOTE1ZDQyMDk3ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABGhLbPtIFS92jyh9lXSWjGV5uhb454fRkTRMQiSAfg/8HRxkAqW8sp 6ggQGVh/NeDJx2Bz1ePjXHFWbQu0bfesUOMFCnbs09NYcEqDkCp1ewQknakBbREV aKwLwN8GXP1r+jQ+V0rAKXsmtBPN9z88Xm6w4bCn0If2ZyPtlzOsrQ+YsfRBRQIz jl4pBU8WiUzPUFVHc8esK0/N/o3SVIQjnRc0HTJBIqhaQrhf0SfOYwtnfmNwROi7 zIP+yvsAETHvrt2KYapfhrWuRYAOh4xk8uVXPDGw7DvkS3sp2BKpVFCkbjOyT4JX QJTxh1+3tdpZTZcFg+jvxL/kh0nliCQ= -----END CERTIFICATE-----Generated at Mon Sep 28 19:59:16 2026 by rpki-client