$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad075e15-cf88-328b-97c2-7d30fe0b3983.roa File: ad075e15-cf88-328b-97c2-7d30fe0b3983.roa (raw, json) Hash identifier: yPZHHiHiLfFROgK4/LbCRPZ4tcMCTzS/3cwHJyUhIME= Subject key identifier: 1F:B0:7F:6A:51:D6:38:15:A6:86:18:10:99:52:A0:25:D4:A9:A0:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F9016EBF24608C911490 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad075e15-cf88-328b-97c2-7d30fe0b3983.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.38.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f9:01:6e:bf:24:60:8c:91:14:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=a4cc9f20-bc52-43ef-9995-9fbc36dc388a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:a3:e1:7d:24:76:27:8c:0d:89:40:b5:35: a4:be:b0:95:0d:2b:05:04:38:7e:b7:28:fb:f2:21: 4e:b6:3d:a5:ce:c1:9f:72:4e:8b:bc:f2:67:d1:b3: 6c:e0:63:e0:8f:a1:e6:3d:9e:c7:09:d3:ce:f9:93: 8d:91:75:e3:25:fc:21:66:8f:90:d4:09:0a:10:9f: 23:11:a6:87:f6:99:58:66:1d:81:e5:95:1c:8d:5c: eb:79:bc:2e:38:b2:a7:dc:3b:dd:4b:31:50:ca:97: 37:f6:3b:3f:86:1b:88:ca:c1:83:5f:d3:cd:f6:d8: 54:75:34:59:7d:0e:ec:01:44:67:56:66:f2:8e:b7: 96:d0:91:c6:59:51:72:12:b4:73:40:c9:cf:bb:34: 70:f3:e3:fe:4a:2f:92:0c:9d:98:52:49:ac:94:3e: a1:42:6d:73:ed:f8:05:96:47:fc:8b:dc:1a:1a:32: cd:f3:5d:5f:fe:5e:00:5e:23:33:38:a7:4f:b0:73: ac:24:f2:6b:70:d2:56:ea:42:4d:0d:11:26:0d:49: a3:d8:ba:5f:ba:7a:a8:a4:f9:c4:c7:08:c1:83:89: aa:bc:81:15:e5:f2:9b:45:73:96:34:39:7c:e5:23: 1d:fc:33:71:75:38:bb:32:c3:45:5a:40:f8:16:6c: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B0:7F:6A:51:D6:38:15:A6:86:18:10:99:52:A0:25:D4:A9:A0:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad075e15-cf88-328b-97c2-7d30fe0b3983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:79:2c:c7:4e:b9:78:b9:97:73:2a:0a:36:d4:3d:d0:db:ca: c7:29:c4:73:98:77:ff:d1:5d:12:4a:05:9b:d8:07:2f:38:fd: 39:99:d9:ba:3c:4d:e6:03:ee:6f:35:25:f6:6a:e5:e4:e7:c3: e6:1f:1d:46:ae:97:27:e3:f0:d7:34:8f:b0:e7:d8:8b:38:26: 3c:b2:ef:f4:18:75:81:cc:80:0a:7e:f3:30:ff:41:55:b9:4f: 51:ff:f6:08:94:12:54:1a:d9:db:57:63:c0:ae:0c:2e:3e:32: a8:b1:36:bf:19:e9:05:81:d9:ac:0e:db:b3:8f:d9:6e:9e:dd: 86:a8:58:f8:96:43:7b:b0:62:45:42:57:15:25:c2:43:35:16: ad:54:2f:1d:2b:56:b7:c7:22:0f:e0:bf:13:48:f6:c2:f6:a2: e6:1d:e3:90:dc:a7:9b:7a:2f:38:fe:5b:a2:ca:bb:4d:fd:43: 8e:c9:1e:3f:37:a4:d8:ea:01:d8:cd:68:9f:42:f6:d1:c5:69: 01:11:d6:9c:ee:f2:73:6b:37:18:74:79:0f:e4:18:43:68:66: 6c:d3:8f:04:23:5d:35:03:d4:fd:16:61:b8:1a:f1:30:ee:08: 2a:a7:b3:40:d7:9f:03:77:64:fa:00:fd:aa:f7:61:5c:a4:04: d2:93:ef:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/kBbr8kYIyRFJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YTRjYzlmMjAtYmM1Mi00M2VmLTk5OTUtOWZiYzM2ZGMzODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4+j4X0kdieMDYlAtTWkvrCVDSsFBDh+tyj7 8iFOtj2lzsGfck6LvPJn0bNs4GPgj6HmPZ7HCdPO+ZONkXXjJfwhZo+Q1AkKEJ8j EaaH9plYZh2B5ZUcjVzrebwuOLKn3DvdSzFQypc39js/hhuIysGDX9PN9thUdTRZ fQ7sAURnVmbyjreW0JHGWVFyErRzQMnPuzRw8+P+Si+SDJ2YUkmslD6hQm1z7fgF lkf8i9waGjLN811f/l4AXiMzOKdPsHOsJPJrcNJW6kJNDREmDUmj2LpfunqopPnE xwjBg4mqvIEV5fKbRXOWNDl85SMd/DNxdTi7MsNFWkD4FmysoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+wf2pR1jgVpoYYEJlSoCXUqaBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWQwNzVlMTUtY2Y4OC0z MjhiLTk3YzItN2QzMGZlMGIzOTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx5LMdOuXi5l3MqCjbUPdDbyscpxHOYd//RXRJKBZvYBy84/TmZ2bo8 TeYD7m81JfZq5eTnw+YfHUaulyfj8Nc0j7Dn2Is4Jjyy7/QYdYHMgAp+8zD/QVW5 T1H/9giUElQa2dtXY8CuDC4+MqixNr8Z6QWB2awO27OP2W6e3YaoWPiWQ3uwYkVC VxUlwkM1Fq1ULx0rVrfHIg/gvxNI9sL2ouYd45Dcp5t6Lzj+W6LKu039Q47JHj83 pNjqAdjNaJ9C9tHFaQER1pzu8nNrNxh0eQ/kGENoZmzTjwQjXTUD1P0WYbga8TDu CCqns0DXnwN3ZPoA/ar3YVykBNKT7+k= -----END CERTIFICATE-----Generated at Sun Sep 27 10:53:16 2026 by rpki-client