$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa52dc6a-37b9-39c5-9975-0de78d6a0e39.roa File: aa52dc6a-37b9-39c5-9975-0de78d6a0e39.roa (raw, json) Hash identifier: /K67C3QveITzjh17wIrQT2kAtkG7OXGWbl3Y804HmiY= Subject key identifier: FC:07:1A:40:4E:80:33:16:BB:C3:14:86:32:BA:D0:E0:8A:F9:62:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F755BC1364FDF3B7B900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa52dc6a-37b9-39c5-9975-0de78d6a0e39.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.36.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f7:55:bc:13:64:fd:f3:b7:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=02408a87-2dcb-427e-9157-dcb4e210c6e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9d:d3:7d:7e:75:f2:00:77:65:99:fc:f1:b4: 91:0b:a1:86:1b:ec:a9:36:ec:64:c6:64:d0:d6:10: 47:c2:c9:3e:c1:34:b0:e1:92:23:b9:0f:27:39:fd: cc:ea:46:f8:e5:44:67:b0:18:95:be:34:4e:57:68: ca:53:81:38:8d:19:4e:00:dc:d8:1b:e1:8c:da:73: 88:83:87:8d:fe:8e:18:5b:6d:9b:f9:6b:74:a6:34: 8c:57:b5:98:37:ec:c9:e9:d7:dc:5f:b3:ad:77:6a: 62:5e:01:85:65:6e:cf:b0:0b:88:5d:03:9a:33:da: 13:c6:2e:9e:eb:ee:9a:bf:8f:c5:e5:d6:e1:54:9b: 87:97:9e:1a:b4:fe:46:26:d5:68:04:c4:1e:1e:c1: 69:e3:92:de:ea:af:65:c6:98:38:2d:ef:7c:6a:28: bd:4e:2d:73:2a:5b:f6:c9:ca:63:c9:e3:10:f9:e7: c1:4d:b7:53:9c:f8:75:bf:86:26:58:92:ea:bf:66: b0:17:d2:96:9d:22:b9:74:a8:7c:70:1f:92:88:ce: 1f:85:37:36:fe:60:bb:25:92:28:f3:8c:90:14:d2: 22:ff:bf:01:fe:04:7c:53:d1:43:5b:d3:ab:bf:c3: 74:42:ae:a3:21:52:d3:ff:be:73:a4:b0:fa:93:55: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:07:1A:40:4E:80:33:16:BB:C3:14:86:32:BA:D0:E0:8A:F9:62:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa52dc6a-37b9-39c5-9975-0de78d6a0e39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:76:93:01:54:38:74:27:0b:a9:b8:6e:13:1b:16:09:f9:2b: 00:74:1a:d5:29:db:bd:6d:7c:8d:7d:88:1d:76:77:cc:73:91: 58:a6:0d:87:5d:19:c8:8b:b4:b0:a8:5e:5a:e9:db:b3:f1:41: 76:6b:bf:58:24:57:33:30:c6:61:04:8b:8a:0f:d0:e9:58:14: 9f:a6:48:8a:c2:a9:c5:65:cb:ff:d6:ed:91:ba:2a:23:8f:90: f2:7d:ea:d8:e6:70:61:71:1b:0e:70:51:50:39:52:4b:24:81: 3d:31:62:98:bc:1b:24:9c:b1:ad:fa:cf:61:3d:80:5b:cf:71: 69:69:8e:d6:9c:b5:31:9b:1d:1a:89:4b:a4:a7:ed:c8:3f:7c: 11:19:cc:27:2f:26:fa:8a:d2:e6:87:c3:90:98:45:22:b6:4f: 2e:ea:7f:74:93:d2:e3:c3:45:97:c2:47:fc:ef:2d:56:10:62: dc:96:4b:e9:c6:61:12:7e:1d:60:3c:cb:e6:37:4a:a9:53:93: 1c:bc:19:c8:32:5c:74:fc:9f:ee:57:8e:f8:fe:d6:14:eb:a9: 8f:69:76:76:67:2e:16:e6:37:c2:55:a9:a7:21:41:4e:d9:fa: 22:65:7f:0f:f7:c0:39:7d:4a:7a:c6:c2:fc:fa:e9:0a:d8:c2: fd:e3:3f:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/dVvBNk/fO3uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MDI0MDhhODctMmRjYi00MjdlLTkxNTctZGNiNGUyMTBjNmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ3TfX518gB3ZZn88bSRC6GGG+ypNuxkxmTQ 1hBHwsk+wTSw4ZIjuQ8nOf3M6kb45URnsBiVvjROV2jKU4E4jRlOANzYG+GM2nOI g4eN/o4YW22b+Wt0pjSMV7WYN+zJ6dfcX7Otd2piXgGFZW7PsAuIXQOaM9oTxi6e 6+6av4/F5dbhVJuHl54atP5GJtVoBMQeHsFp45Le6q9lxpg4Le98aii9Ti1zKlv2 ycpjyeMQ+efBTbdTnPh1v4YmWJLqv2awF9KWnSK5dKh8cB+SiM4fhTc2/mC7JZIo 84yQFNIi/78B/gR8U9FDW9Orv8N0Qq6jIVLT/75zpLD6k1W1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwHGkBOgDMWu8MUhjK60OCK+WJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE1MmRjNmEtMzdiOS0z OWM1LTk5NzUtMGRlNzhkNmEwZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFySsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI92kwFUOHQnC6m4bhMbFgn5KwB0GtUp271tfI19iB12d8xzkVimDYdd GciLtLCoXlrp27PxQXZrv1gkVzMwxmEEi4oP0OlYFJ+mSIrCqcVly//W7ZG6KiOP kPJ96tjmcGFxGw5wUVA5UkskgT0xYpi8GyScsa36z2E9gFvPcWlpjtactTGbHRqJ S6Sn7cg/fBEZzCcvJvqK0uaHw5CYRSK2Ty7qf3ST0uPDRZfCR/zvLVYQYtyWS+nG YRJ+HWA8y+Y3SqlTkxy8GcgyXHT8n+5Xjvj+1hTrqY9pdnZnLhbmN8JVqachQU7Z +iJlfw/3wDl9SnrGwvz66QrYwv3jP38= -----END CERTIFICATE-----Generated at Sun Sep 27 11:59:12 2026 by rpki-client