$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba2beb10-f824-33ed-acd4-a3599b4fd987.roa File: ba2beb10-f824-33ed-acd4-a3599b4fd987.roa (raw, json) Hash identifier: fV9QjKBA32CwU6LTJPPCky1fEHXcc0kGPpD3tNK4VgM= Subject key identifier: AC:34:1C:B5:66:1C:C2:CA:FA:3F:4F:07:04:47:58:B7:C1:D6:D0:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD71B29DD8ABCA14453FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba2beb10-f824-33ed-acd4-a3599b4fd987.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.44.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:71:b2:9d:d8:ab:ca:14:45:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=65d88071-3c6e-4f43-964e-42aee3a4ea8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:f9:0f:50:c6:c6:08:56:d4:82:f4:a5:a5: 3d:be:dc:d6:d9:e7:9c:8d:2f:bf:2d:9c:62:c7:ac: f7:da:a9:20:92:88:a3:75:5f:68:3a:2a:95:70:43: 7f:eb:fd:74:0a:e1:64:43:e7:bd:1c:9b:d6:b8:92: 6b:bf:a7:5d:61:af:2b:a0:df:31:d6:61:5b:fb:ec: 13:51:03:20:4b:bb:64:c6:42:f0:03:03:50:95:94: 7a:a9:4a:58:1f:ea:56:43:a9:2f:e2:57:63:e2:6c: 50:b4:b4:a0:b9:d6:dd:9a:39:5d:4c:a7:e5:52:1b: d1:8c:f7:b3:24:8c:32:f9:df:45:18:56:08:32:c3: bb:38:6c:e5:bd:66:d7:17:88:ad:97:a7:4b:0e:97: 2f:96:80:97:46:3e:a0:67:80:ce:1f:cc:b5:b6:fd: 31:35:86:e2:e8:cc:8d:ec:54:65:70:ab:ed:76:c4: c8:ab:f4:d9:99:45:12:f6:97:c0:06:ab:8f:48:e7: 86:24:d0:cb:7d:f9:cc:af:da:37:c7:86:23:b1:fb: 0d:2e:1d:cd:cf:d2:33:2e:fe:25:9d:6b:ad:8d:b6: 9b:a1:e6:c0:34:10:08:10:2f:c2:f6:11:74:90:0c: d3:c8:d8:64:71:e5:1a:87:e0:04:9e:ab:92:9a:09: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:34:1C:B5:66:1C:C2:CA:FA:3F:4F:07:04:47:58:B7:C1:D6:D0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba2beb10-f824-33ed-acd4-a3599b4fd987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:3f:d6:66:5e:2a:51:47:e7:99:80:f5:05:99:f1:29:45:6d: 95:6d:d3:36:e2:69:f5:0d:64:20:a7:f3:e5:3a:ab:19:e5:0e: 90:e3:a0:d2:31:64:5a:52:60:10:05:2f:ea:46:ea:19:6a:38: 8d:46:69:34:98:d0:67:a4:ce:dd:ed:10:be:45:20:83:37:6f: 64:cf:17:74:c7:a3:75:52:c4:03:a3:94:25:cc:fd:74:eb:43: 98:7d:1f:43:b9:fe:eb:12:ed:c2:58:2a:66:ab:10:2f:7c:52: 5c:27:ee:b9:3a:d3:06:59:88:c1:69:45:c0:b0:1e:b0:54:ff: 2e:69:ae:0b:1b:04:f9:48:2d:ae:50:32:6b:d1:92:12:ef:aa: 2f:8d:d1:b3:24:71:69:af:59:95:69:5e:e6:fe:8f:1e:d0:7e: 49:68:fd:36:fa:94:48:57:ca:aa:eb:41:b8:ba:b1:c7:53:08: ea:69:e4:89:9a:db:ce:bb:96:a7:b2:00:f6:56:84:a3:ab:a9: 95:a7:54:fd:84:16:52:85:a1:c5:ce:61:0f:58:70:bd:a3:ff: f1:73:f6:98:62:e2:fb:ef:61:40:cd:26:e1:27:c7:3d:a0:a9: 1b:a9:b9:68:49:55:a5:ae:fa:e0:e5:85:13:bf:c5:f3:15:69: 41:c1:61:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rXGyndiryhRFP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NjVkODgwNzEtM2M2ZS00ZjQzLTk2NGUtNDJhZWUzYTRlYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSj5D1DGxghW1IL0paU9vtzW2eecjS+/LZxi x6z32qkgkoijdV9oOiqVcEN/6/10CuFkQ+e9HJvWuJJrv6ddYa8roN8x1mFb++wT UQMgS7tkxkLwAwNQlZR6qUpYH+pWQ6kv4ldj4mxQtLSgudbdmjldTKflUhvRjPez JIwy+d9FGFYIMsO7OGzlvWbXF4itl6dLDpcvloCXRj6gZ4DOH8y1tv0xNYbi6MyN 7FRlcKvtdsTIq/TZmUUS9pfABquPSOeGJNDLffnMr9o3x4YjsfsNLh3Nz9IzLv4l nWutjbaboebANBAIEC/C9hF0kAzTyNhkceUah+AEnquSmgkh8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw0HLVmHMLK+j9PBwRHWLfB1tCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmEyYmViMTAtZjgyNC0z M2VkLWFjZDQtYTM1OTliNGZkOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4/1mZeKlFH55mA9QWZ8SlFbZVt0zbiafUNZCCn8+U6qxnlDpDjoNIx ZFpSYBAFL+pG6hlqOI1GaTSY0Gekzt3tEL5FIIM3b2TPF3THo3VSxAOjlCXM/XTr Q5h9H0O5/usS7cJYKmarEC98Ulwn7rk60wZZiMFpRcCwHrBU/y5prgsbBPlILa5Q MmvRkhLvqi+N0bMkcWmvWZVpXub+jx7Qfklo/Tb6lEhXyqrrQbi6scdTCOpp5Ima 2867lqeyAPZWhKOrqZWnVP2EFlKFocXOYQ9YcL2j//Fz9phi4vvvYUDNJuEnxz2g qRupuWhJVaWu+uDlhRO/xfMVaUHBYWs= -----END CERTIFICATE-----Generated at Tue Sep 29 12:19:49 2026 by rpki-client