$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a915177c-91c4-31b6-8cda-be44a0fc0ea3.roa File: a915177c-91c4-31b6-8cda-be44a0fc0ea3.roa (raw, json) Hash identifier: 6Rf884C3DEEjlThJ3OPWRDlc5ft91z2gsUonKAAgohw= Subject key identifier: 8C:D6:53:5C:A4:7F:C6:CC:84:A1:55:61:DF:09:F4:59:AB:72:62:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47FC9F6292CCCF8A1D1B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a915177c-91c4-31b6-8cda-be44a0fc0ea3.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.41.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fc:9f:62:92:cc:cf:8a:1d:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=b535723c-6dfd-4a78-af9c-e09525158d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8c:6b:69:5f:ba:ad:a8:7a:e1:0e:98:4f:15: 03:5a:39:5c:2f:35:bc:b6:31:c3:f4:16:35:73:cd: 9d:38:e6:14:39:23:66:68:4f:2d:12:3d:e6:bc:ef: 6b:da:85:7c:de:f5:c3:c1:2b:33:14:75:e6:9f:f6: b3:20:12:1e:93:07:30:65:6c:3e:df:5a:2e:24:9b: 65:a9:31:bb:04:83:8e:1f:5e:19:6c:0b:14:9b:fc: b6:14:09:97:5c:d1:c5:7e:da:6b:df:aa:44:c1:ca: 29:b7:b7:6d:50:76:14:5b:26:bf:0a:87:97:30:91: e6:f6:c4:1c:01:76:2f:fc:df:d7:00:e2:70:aa:68: 25:21:3d:2a:dd:f8:b5:67:ee:64:e7:d4:c6:0c:d8: 4b:06:41:44:aa:86:47:70:df:e8:11:f5:92:37:4b: 24:40:30:8d:44:04:ed:6a:7a:b3:81:01:1a:16:8e: 57:b9:27:91:ea:a6:6a:23:e8:f9:88:45:2a:46:cd: 45:04:12:85:d8:ab:4e:87:ac:d5:9c:da:f7:45:a9: 19:66:13:6c:5d:10:1d:6f:c6:01:d5:18:da:ac:38: e5:5f:61:55:60:4b:01:6c:6c:2c:3d:67:7b:cd:0d: cf:4d:d0:e0:7b:8e:2f:09:26:9a:b5:f1:41:9b:41: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D6:53:5C:A4:7F:C6:CC:84:A1:55:61:DF:09:F4:59:AB:72:62:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a915177c-91c4-31b6-8cda-be44a0fc0ea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5f:ab:16:eb:f4:7e:54:6e:9d:66:86:92:e8:14:d8:7f:38: 14:0b:f6:ff:cd:38:db:b1:dc:ab:a2:56:b4:e6:cb:8c:48:07: e0:0a:87:dd:51:d3:4b:76:ea:b0:0c:56:46:71:b2:3e:59:20: 06:ff:9a:8f:85:1d:47:af:2c:82:94:93:9d:9a:05:58:88:9b: ea:c9:ad:e1:8f:c2:fb:b4:c7:10:f7:d7:9c:74:2c:46:e4:34: ff:19:33:22:b1:8a:21:58:91:94:e2:57:44:b6:de:03:31:13: 1f:70:9a:f8:a4:52:4a:07:97:8f:dc:d8:35:d1:bb:da:b5:d4: 76:c0:dc:90:91:c1:87:60:3b:0e:b4:5a:13:e8:44:42:b3:4d: 70:4f:e2:72:66:7d:4f:ce:e9:32:ab:8c:de:d2:76:97:fd:48: ac:33:d6:a9:c0:f1:41:fb:ff:cd:c8:b0:4b:14:83:ad:d1:a2: 80:65:e7:1e:26:c4:00:c9:bb:60:d5:f4:a4:41:c6:18:43:51: 20:a7:14:4a:e0:e7:58:00:04:1d:da:6c:80:95:75:04:ff:73: 43:e0:b7:44:f1:87:70:de:ce:aa:9d:19:71:00:87:1e:3a:30: 7c:ce:80:69:77:67:41:f2:3f:05:ae:05:5c:81:81:05:88:4c: a3:46:72:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/yfYpLMz4odG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YjUzNTcyM2MtNmRmZC00YTc4LWFmOWMtZTA5NTI1MTU4ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYxraV+6rah64Q6YTxUDWjlcLzW8tjHD9BY1 c82dOOYUOSNmaE8tEj3mvO9r2oV83vXDwSszFHXmn/azIBIekwcwZWw+31ouJJtl qTG7BIOOH14ZbAsUm/y2FAmXXNHFftpr36pEwcopt7dtUHYUWya/CoeXMJHm9sQc AXYv/N/XAOJwqmglIT0q3fi1Z+5k59TGDNhLBkFEqoZHcN/oEfWSN0skQDCNRATt anqzgQEaFo5XuSeR6qZqI+j5iEUqRs1FBBKF2KtOh6zVnNr3RakZZhNsXRAdb8YB 1RjarDjlX2FVYEsBbGwsPWd7zQ3PTdDge44vCSaatfFBm0HiGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzWU1ykf8bMhKFVYd8J9FmrcmKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTkxNTE3N2MtOTFjNC0z MWI2LThjZGEtYmU0NGEwZmMwZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFylAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpfqxbr9H5Ubp1mhpLoFNh/OBQL9v/NONux3KuiVrTmy4xIB+AKh91R 00t26rAMVkZxsj5ZIAb/mo+FHUevLIKUk52aBViIm+rJreGPwvu0xxD315x0LEbk NP8ZMyKxiiFYkZTiV0S23gMxEx9wmvikUkoHl4/c2DXRu9q11HbA3JCRwYdgOw60 WhPoREKzTXBP4nJmfU/O6TKrjN7Sdpf9SKwz1qnA8UH7/83IsEsUg63RooBl5x4m xADJu2DV9KRBxhhDUSCnFErg51gABB3abICVdQT/c0Pgt0Txh3DezqqdGXEAhx46 MHzOgGl3Z0HyPwWuBVyBgQWITKNGcqA= -----END CERTIFICATE-----Generated at Wed Sep 23 12:13:14 2026 by rpki-client