$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3f17d6d-8f79-3850-8991-ca99d233b784.roa File: c3f17d6d-8f79-3850-8991-ca99d233b784.roa (raw, json) Hash identifier: tvd+0p7FYZQoEb+vhs+ivsRg7SFWKwATta/b8Ny4z/g= Subject key identifier: A4:62:23:02:25:66:86:E3:34:13:0A:A3:61:D0:0C:27:AA:BA:D9:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C60FE31ABDCB3FACC660 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3f17d6d-8f79-3850-8991-ca99d233b784.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.33.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c6:0f:e3:1a:bd:cb:3f:ac:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=59c41835-abf5-4502-82aa-0cd86501d5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:25:b9:49:8f:a9:e3:71:ef:08:5d:47:0d: b7:65:aa:88:24:f1:b6:2e:eb:3a:d5:3d:15:a5:d0: 87:6c:a7:14:29:52:0d:91:ce:36:0b:94:cb:58:2e: 60:4e:c1:44:cd:06:f7:7f:11:14:b9:3d:a5:bc:62: 2b:e6:e1:7d:1e:85:05:f8:1e:34:6e:35:54:6b:40: 87:84:e1:3e:d8:92:55:df:27:c1:02:a7:df:30:ef: 2a:95:b1:e9:7f:c0:e7:39:5b:e6:a5:a8:9d:c3:4b: 80:89:c4:1a:d0:88:55:a9:70:a8:50:4c:9d:12:27: 0c:f9:b5:56:cc:65:55:94:e7:ab:55:1b:e7:a3:42: 9d:b3:64:78:f8:95:cb:a1:54:b9:7b:61:17:80:3e: a7:5f:e8:06:8d:0c:16:d2:5b:21:82:e3:39:2c:ce: 21:b6:f9:be:49:59:7f:0e:bc:c1:b2:54:3f:f4:b6: 8d:bc:75:e5:63:61:5c:15:3f:38:75:4f:f1:d5:73: 0e:e8:80:f6:44:60:72:57:71:fe:82:d1:39:9b:0e: 8f:32:73:7c:3b:02:33:ca:80:c8:63:95:c4:06:4b: 2e:32:40:74:4c:89:bb:b5:2a:d0:a5:98:0c:27:ec: 57:4a:18:9a:63:92:7f:6b:a6:9c:95:eb:f2:4d:2b: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:62:23:02:25:66:86:E3:34:13:0A:A3:61:D0:0C:27:AA:BA:D9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3f17d6d-8f79-3850-8991-ca99d233b784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0a:cc:f1:28:3b:e5:11:3d:5c:23:86:ca:d7:4a:b8:da:af: 9b:73:c4:4f:e2:41:69:72:bf:0b:f8:67:51:05:3a:c1:22:f8: 43:af:18:9a:e9:28:b2:c6:b6:4e:b1:84:08:9f:ce:87:09:88: ea:6a:75:b5:92:89:8a:a8:81:80:31:c5:7b:52:9b:84:3a:4e: f1:3f:d2:11:35:02:11:a6:fa:73:a1:8e:fc:2f:c7:4d:cf:2f: 4e:06:92:22:b8:cd:7f:26:c4:da:e5:d2:10:ad:ff:4f:57:b7: 7e:fc:90:23:b8:a5:75:9c:00:57:ca:61:15:63:4b:7a:30:d3: 9a:8b:a7:b5:f6:e5:bd:9c:e8:b7:0e:49:f1:e2:bc:fc:03:60: 94:5c:42:34:34:6c:2e:28:e6:44:80:11:ea:ae:17:92:e9:00: e1:a4:de:7a:c5:13:82:85:49:ae:ca:87:6f:8c:4f:fd:8c:16: f2:21:75:eb:af:4c:0a:cb:7d:f0:8c:46:df:13:cf:42:82:0f: 95:b0:66:ab:25:36:8d:ef:e3:11:3b:6e:50:4a:ee:21:97:9a: 5d:0c:64:fb:44:5f:ef:f6:5b:b8:36:45:ea:a5:08:0d:3d:94: f2:01:be:34:35:d7:da:f0:fc:2b:ac:40:a7:c3:f4:e2:c0:f3: 7c:8d:e9:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8YP4xq9yz+sxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk NTljNDE4MzUtYWJmNS00NTAyLTgyYWEtMGNkODY1MDFkNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xgluUmPqeNx7whdRw23ZaqIJPG2Lus61T0V pdCHbKcUKVINkc42C5TLWC5gTsFEzQb3fxEUuT2lvGIr5uF9HoUF+B40bjVUa0CH hOE+2JJV3yfBAqffMO8qlbHpf8DnOVvmpaidw0uAicQa0IhVqXCoUEydEicM+bVW zGVVlOerVRvno0Kds2R4+JXLoVS5e2EXgD6nX+gGjQwW0lshguM5LM4htvm+SVl/ DrzBslQ/9LaNvHXlY2FcFT84dU/x1XMO6ID2RGByV3H+gtE5mw6PMnN8OwIzyoDI Y5XEBksuMkB0TIm7tSrQpZgMJ+xXShiaY5J/a6aclevyTSv2uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRiIwIlZobjNBMKo2HQDCequtlAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNmMTdkNmQtOGY3OS0z ODUwLTg5OTEtY2E5OWQyMzNiNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYKzPEoO+URPVwjhsrXSrjar5tzxE/iQWlyvwv4Z1EFOsEi+EOvGJrp KLLGtk6xhAifzocJiOpqdbWSiYqogYAxxXtSm4Q6TvE/0hE1AhGm+nOhjvwvx03P L04GkiK4zX8mxNrl0hCt/09Xt378kCO4pXWcAFfKYRVjS3ow05qLp7X25b2c6LcO SfHivPwDYJRcQjQ0bC4o5kSAEequF5LpAOGk3nrFE4KFSa7Kh2+MT/2MFvIhdeuv TArLffCMRt8Tz0KCD5WwZqslNo3v4xE7blBK7iGXml0MZPtEX+/2W7g2ReqlCA09 lPIBvjQ119rw/CusQKfD9OLA83yN6Ys= -----END CERTIFICATE-----Generated at Tue Sep 29 15:45:15 2026 by rpki-client