$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1a295be-4977-390b-8555-de77bcef201b.roa File: c1a295be-4977-390b-8555-de77bcef201b.roa (raw, json) Hash identifier: TbmA2kz9aGbxyyV1F0y7LajtIhndhPkNxWUasBQvqXI= Subject key identifier: A2:6D:EB:E5:F7:95:DD:81:D4:83:C2:33:A9:C1:1B:C8:0A:84:DC:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F5393E48B92BB0689980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1a295be-4977-390b-8555-de77bcef201b.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.42.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f5:39:3e:48:b9:2b:b0:68:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=39722c44-d300-4e2b-b94f-3e7f9a6ccb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:25:e6:07:76:e1:b8:f3:d2:42:79:1a:46: ac:ad:0b:17:df:85:f8:0d:fe:a5:7e:1c:ba:60:e1: 62:b4:2d:38:00:d0:dd:5d:b1:c2:c4:a6:44:89:0a: 2c:0f:ee:93:0f:64:2d:c6:bd:4d:54:f5:1f:38:dc: d1:fa:d3:aa:1d:6a:c2:d5:27:c6:00:fc:b6:2f:29: 56:11:93:7b:41:a0:b0:07:50:f6:ac:be:eb:dd:fc: 9d:87:65:05:ae:9d:a1:34:8c:ae:62:5e:c7:c8:ca: 3d:65:89:b2:2e:91:dc:c8:a9:3c:d4:3b:16:65:19: 7d:56:fb:df:11:33:7d:69:96:a7:46:9a:2e:ce:f4: 22:13:d1:0f:ec:5b:b1:20:81:da:da:54:1a:a9:c2: c3:bd:50:4e:e8:38:23:57:f9:86:89:1d:75:8f:da: a7:7c:52:09:c4:26:8a:3c:61:b8:63:76:b5:8f:f9: 0e:24:f2:e1:06:11:b4:43:d3:5f:f2:a9:c4:bf:40: 31:d5:85:f6:b8:f0:95:d1:10:61:ce:a6:cb:f5:dd: 20:0e:f2:b6:b6:54:9a:db:24:ec:86:7a:82:c9:e0: 75:24:fc:59:19:8f:15:33:4b:96:75:76:4a:34:3b: fc:ba:38:72:82:44:b5:79:29:da:35:70:d6:fb:c4: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6D:EB:E5:F7:95:DD:81:D4:83:C2:33:A9:C1:1B:C8:0A:84:DC:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1a295be-4977-390b-8555-de77bcef201b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:82:7b:ba:f8:78:9c:92:fd:38:32:68:cc:c9:ab:8c:0e:b2: 17:9d:ba:b7:68:47:06:c3:77:b4:48:22:e2:24:7c:f5:be:3f: 3d:46:cd:2f:cc:23:06:9a:47:0e:47:d7:56:04:c4:88:79:3c: d0:ba:b3:14:04:cc:79:82:57:4b:84:91:ef:e7:44:bb:5e:1f: 46:47:f7:01:35:01:53:4b:db:a4:91:87:73:44:a6:88:b2:c0: 88:a4:f7:ad:43:56:c2:1d:9d:f9:f5:05:7b:e1:24:fc:31:47: 34:c1:8f:e0:4e:25:2a:29:5e:f2:68:73:33:3e:fb:d1:ac:bb: ff:7b:31:c0:c9:4c:d3:9d:08:fe:34:38:60:0b:7d:c0:dd:93: a7:bd:db:b6:8b:76:c1:fe:e3:5b:39:82:9a:51:f0:e7:3c:fa: e3:21:43:88:9e:a9:aa:2e:36:6b:c0:1b:ff:b3:9e:7f:f2:06: 29:b5:d6:9c:14:67:71:ce:c0:96:9c:6c:c1:59:1d:a8:ad:4c: e8:9c:be:dc:01:6f:5d:ab:24:6c:ee:57:a3:f0:2b:d9:25:9b: 59:c0:20:33:0d:87:14:75:2c:9c:99:cf:d6:f6:27:5b:d4:79: 2c:6a:72:58:28:a2:fe:ef:65:d2:e4:7e:bb:18:5b:8b:10:24: c7:c9:aa:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/U5Pki5K7BomYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Mzk3MjJjNDQtZDMwMC00ZTJiLWI5NGYtM2U3ZjlhNmNjYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPEl5gd24bjz0kJ5GkasrQsX34X4Df6lfhy6 YOFitC04ANDdXbHCxKZEiQosD+6TD2Qtxr1NVPUfONzR+tOqHWrC1SfGAPy2LylW EZN7QaCwB1D2rL7r3fydh2UFrp2hNIyuYl7HyMo9ZYmyLpHcyKk81DsWZRl9Vvvf ETN9aZanRpouzvQiE9EP7FuxIIHa2lQaqcLDvVBO6DgjV/mGiR11j9qnfFIJxCaK PGG4Y3a1j/kOJPLhBhG0Q9Nf8qnEv0Ax1YX2uPCV0RBhzqbL9d0gDvK2tlSa2yTs hnqCyeB1JPxZGY8VM0uWdXZKNDv8ujhygkS1eSnaNXDW+8RsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJt6+X3ld2B1IPCM6nBG8gKhNxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzFhMjk1YmUtNDk3Ny0z OTBiLTg1NTUtZGU3N2JjZWYyMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFypAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuCe7r4eJyS/TgyaMzJq4wOshedurdoRwbDd7RIIuIkfPW+Pz1GzS/M IwaaRw5H11YExIh5PNC6sxQEzHmCV0uEke/nRLteH0ZH9wE1AVNL26SRh3NEpoiy wIik961DVsIdnfn1BXvhJPwxRzTBj+BOJSopXvJoczM++9Gsu/97McDJTNOdCP40 OGALfcDdk6e927aLdsH+41s5gppR8Oc8+uMhQ4ieqaouNmvAG/+znn/yBim11pwU Z3HOwJacbMFZHaitTOicvtwBb12rJGzuV6PwK9klm1nAIDMNhxR1LJyZz9b2J1vU eSxqclgoov7vZdLkfrsYW4sQJMfJqmk= -----END CERTIFICATE-----Generated at Sat Sep 26 13:03:26 2026 by rpki-client