$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b55c7894-2911-3ffb-a0c8-d1814ad7a169.roa File: b55c7894-2911-3ffb-a0c8-d1814ad7a169.roa (raw, json) Hash identifier: 74ZOVL40DpLIJ+CgU8ChXtP8c902tM1jzt67rPInUm4= Subject key identifier: 14:7A:2E:A7:10:46:54:2C:94:FD:9B:23:92:54:66:2B:82:7B:4A:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D4CEB99013A0736DF8B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b55c7894-2911-3ffb-a0c8-d1814ad7a169.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.53.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:4c:eb:99:01:3a:07:36:df:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=27c0e49c-5349-4a62-af53-4c88b51bf179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f0:3c:48:b9:13:32:84:21:8b:bf:64:f6:83: b8:51:d4:56:ee:22:eb:cc:29:cb:8c:5d:cc:90:8e: b4:89:b2:87:12:28:4b:9b:ad:12:56:3a:67:35:47: 82:a2:e7:68:46:88:e8:00:07:fa:86:63:d5:8a:ce: cc:c3:98:91:b2:51:14:5d:d4:45:e9:da:36:76:eb: bc:c1:3d:7e:b7:27:ad:6b:f1:fd:97:6f:b8:ae:22: 5f:39:97:7b:c8:06:9e:1d:2e:41:ef:d2:fb:01:55: 79:0f:af:fe:eb:9d:cf:06:8c:e1:46:2b:38:c3:fc: 4a:44:bf:b8:c4:68:2c:24:da:f8:b8:05:10:ad:d5: 2d:e0:cf:60:a4:60:82:4c:1e:1b:2c:fe:8b:06:17: 04:45:dc:b8:75:0c:da:27:5b:c0:47:10:09:73:04: d3:a8:2a:31:18:11:5a:c5:21:64:8f:0d:ef:d1:8a: fc:20:33:75:74:f4:0e:fe:87:6a:6c:7a:31:31:f4: e9:bc:77:a5:b5:8f:be:09:a9:20:12:9c:ce:24:88: 07:36:f6:03:f3:5c:5b:24:8f:f1:74:16:63:27:04: 84:57:55:32:77:d5:a7:ba:d7:6d:1c:9d:27:d7:85: 30:f0:50:d8:37:f7:66:97:64:4b:31:c9:60:2d:06: 87:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:2E:A7:10:46:54:2C:94:FD:9B:23:92:54:66:2B:82:7B:4A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b55c7894-2911-3ffb-a0c8-d1814ad7a169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f7:08:78:93:bd:03:5b:cd:a6:65:05:d8:f7:86:d9:4b:ca: d5:34:66:42:4a:42:ae:60:a1:65:c5:99:8b:35:65:60:27:ff: 5f:52:50:c4:dd:16:ca:07:b9:85:9b:4c:ff:ee:aa:f6:6d:76: ee:16:c7:1d:05:ae:14:f7:55:6a:3d:e7:51:90:44:15:5a:4a: 2f:e8:87:3d:40:e4:7d:61:7d:bc:25:4a:c9:fe:1b:44:5b:23: 53:56:40:ea:5f:c2:e1:35:ff:7e:90:67:bc:ca:8e:20:07:62: e8:b7:1f:a0:70:73:fd:66:87:25:ea:95:6f:af:15:fd:c7:aa: 68:bc:7a:67:e1:29:34:3d:09:a2:4e:d1:e4:a6:c2:be:a8:67: 2d:ee:6e:89:4e:29:af:49:23:65:e4:cc:5b:71:6e:68:45:60: e2:29:31:cf:5b:94:77:65:fc:80:89:ad:bd:71:ad:e4:81:9b: 2b:fc:41:e1:c0:f9:82:f3:74:f1:b1:8e:67:9b:7f:d0:6d:f2: 52:73:47:3f:33:06:86:5a:36:78:75:e4:62:65:cc:1f:82:63: 4b:91:a9:21:72:1d:1b:99:7d:44:b9:e9:4d:ca:a5:74:2e:3c: 05:97:12:09:f2:db:4b:66:77:2d:2d:6a:8d:2e:74:99:7b:3d: e6:6e:08:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUzrmQE6Bzbfi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MjdjMGU0OWMtNTM0OS00YTYyLWFmNTMtNGM4OGI1MWJmMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfA8SLkTMoQhi79k9oO4UdRW7iLrzCnLjF3M kI60ibKHEihLm60SVjpnNUeCoudoRojoAAf6hmPVis7Mw5iRslEUXdRF6do2duu8 wT1+tyeta/H9l2+4riJfOZd7yAaeHS5B79L7AVV5D6/+653PBozhRis4w/xKRL+4 xGgsJNr4uAUQrdUt4M9gpGCCTB4bLP6LBhcERdy4dQzaJ1vARxAJcwTTqCoxGBFa xSFkjw3v0Yr8IDN1dPQO/odqbHoxMfTpvHeltY++CakgEpzOJIgHNvYD81xbJI/x dBZjJwSEV1Uyd9WnutdtHJ0n14Uw8FDYN/dml2RLMclgLQaHDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR6LqcQRlQslP2bI5JUZiuCe0r+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjU1Yzc4OTQtMjkxMS0z ZmZiLWEwYzgtZDE4MTRhZDdhMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH3CHiTvQNbzaZlBdj3htlLytU0ZkJKQq5goWXFmYs1ZWAn/19SUMTd FsoHuYWbTP/uqvZtdu4Wxx0FrhT3VWo951GQRBVaSi/ohz1A5H1hfbwlSsn+G0Rb I1NWQOpfwuE1/36QZ7zKjiAHYui3H6Bwc/1mhyXqlW+vFf3Hqmi8emfhKTQ9CaJO 0eSmwr6oZy3ubolOKa9JI2XkzFtxbmhFYOIpMc9blHdl/ICJrb1xreSBmyv8QeHA +YLzdPGxjmebf9Bt8lJzRz8zBoZaNnh15GJlzB+CY0uRqSFyHRuZfUS56U3KpXQu PAWXEgny20tmdy0tao0udJl7PeZuCIk= -----END CERTIFICATE-----Generated at Sat Sep 26 02:49:44 2026 by rpki-client