$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c838f996-1d94-362d-801d-2229e38890c0.roa File: c838f996-1d94-362d-801d-2229e38890c0.roa (raw, json) Hash identifier: hiMPxw/QERMSl7sxuGeUyCrEVOVPSVuriJ+aH9vlFfg= Subject key identifier: 87:3B:4C:2A:BB:1D:FE:ED:CE:BF:B4:1B:55:CD:0C:60:0B:DF:1C:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F2957AB8CA476FD2FE292F140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c838f996-1d94-362d-801d-2229e38890c0.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 20940 IP address blocks: 23.15.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:ab:8c:a4:76:fd:2f:e2:92:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=6130cc3a-82f7-446b-89f7-2ec8148ad561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:da:aa:2e:77:4c:96:40:ff:3b:eb:9e:e4:e7: 1c:b6:fc:c1:22:87:87:2e:5f:fe:8e:f9:ce:f5:42: 14:2a:36:c1:6b:54:83:c2:c6:f4:54:89:4d:99:79: 41:98:30:2d:68:ed:a0:4e:38:ed:0f:4e:c2:bf:b3: 3c:9e:3e:8e:53:e6:6a:54:a1:99:6f:86:6e:30:ff: b5:89:74:2d:40:f2:54:58:08:55:e0:c2:47:77:bb: 1e:f5:f4:c4:77:10:50:54:63:13:a4:c3:1e:c6:9c: 85:97:a8:14:3b:3b:0a:14:93:2e:25:82:58:83:7b: 3e:6b:ab:a1:cf:3d:cd:17:a9:a7:9d:53:39:b2:66: 5a:c8:90:12:28:30:5e:a5:a2:dc:c0:4d:30:b0:90: b3:b0:45:fb:79:23:0e:2d:28:ff:fa:d3:48:a3:7e: 88:9a:f9:ec:2c:59:f1:43:e5:8e:e0:b0:ed:b0:ee: 82:28:2d:c9:bd:7c:86:d0:bf:e9:4e:3f:a8:2f:32: 00:81:9f:ad:f0:59:73:d6:71:2e:5c:2f:39:97:96: 9e:a7:e0:29:6b:aa:b4:e4:d1:59:2d:42:2f:f1:b4: f4:a9:52:88:ab:59:e0:16:38:63:42:1c:3e:6f:fa: 41:f2:53:0e:91:48:e9:4a:25:98:61:a8:b7:6f:d7: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:4C:2A:BB:1D:FE:ED:CE:BF:B4:1B:55:CD:0C:60:0B:DF:1C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c838f996-1d94-362d-801d-2229e38890c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.15.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:9b:28:f1:3b:1c:d3:ee:b7:16:18:ec:7c:6f:96:25:b9:1e: 14:b4:f4:5a:7b:c6:f1:f0:32:f4:ee:4b:a0:57:dc:93:f6:35: 8d:be:5d:97:4e:b5:70:04:b2:6e:93:11:39:cf:51:84:7d:5e: 7d:37:d2:8a:60:06:d4:c0:ad:bc:16:0a:53:a0:f7:68:04:42: 5f:a4:06:68:d4:96:c7:c0:d6:3b:a6:39:45:6b:f5:4c:ad:af: 45:68:23:ef:79:ce:68:ce:fb:b8:f5:21:8b:51:87:7c:b1:e4: d8:43:f2:ce:16:89:87:83:b6:ad:9a:07:31:c9:a1:2e:6f:d5: 80:d9:d6:5f:81:dd:15:a8:98:f8:e7:b7:87:6c:d9:03:55:17: b3:55:b8:91:58:3b:3d:53:bd:c8:a1:a9:10:07:d9:37:d7:8b: f0:7f:bb:9a:ee:49:8c:04:bb:df:a3:80:bc:99:57:bc:69:a6: 27:16:63:4f:e5:9a:df:cf:c6:19:83:06:55:ee:2b:9d:0b:a7: fb:c5:cc:ff:7c:52:09:26:f2:81:7e:c1:83:87:a3:1c:4c:99: bd:98:b6:2d:3a:d2:33:6d:06:e8:12:48:a6:7f:2b:a1:28:9b: da:cc:06:2b:25:77:ff:96:f4:6d:1a:6c:20:f1:24:57:bf:51: 95:cb:6f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV6uMpHb9L+KS8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NjEzMGNjM2EtODJmNy00NDZiLTg5ZjctMmVjODE0OGFkNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydqqLndMlkD/O+ue5OcctvzBIoeHLl/+jvnO 9UIUKjbBa1SDwsb0VIlNmXlBmDAtaO2gTjjtD07Cv7M8nj6OU+ZqVKGZb4ZuMP+1 iXQtQPJUWAhV4MJHd7se9fTEdxBQVGMTpMMexpyFl6gUOzsKFJMuJYJYg3s+a6uh zz3NF6mnnVM5smZayJASKDBepaLcwE0wsJCzsEX7eSMOLSj/+tNIo36ImvnsLFnx Q+WO4LDtsO6CKC3JvXyG0L/pTj+oLzIAgZ+t8Flz1nEuXC85l5aep+Apa6q05NFZ LUIv8bT0qVKIq1ngFjhjQhw+b/pB8lMOkUjpSiWYYai3b9ey7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc7TCq7Hf7tzr+0G1XNDGAL3xx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzgzOGY5OTYtMWQ5NC0z NjJkLTgwMWQtMjIyOWUzODg5MGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFw8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAabKPE7HNPutxYY7HxvliW5HhS09Fp7xvHwMvTuS6BX3JP2NY2+XZdO tXAEsm6TETnPUYR9Xn030opgBtTArbwWClOg92gEQl+kBmjUlsfA1jumOUVr9Uyt r0VoI+95zmjO+7j1IYtRh3yx5NhD8s4WiYeDtq2aBzHJoS5v1YDZ1l+B3RWomPjn t4ds2QNVF7NVuJFYOz1TvcihqRAH2TfXi/B/u5ruSYwEu9+jgLyZV7xppicWY0/l mt/PxhmDBlXuK50Lp/vFzP98Ugkm8oF+wYOHoxxMmb2Yti060jNtBugSSKZ/K6Eo m9rMBisld/+W9G0abCDxJFe/UZXLby4= -----END CERTIFICATE-----Generated at Sun Sep 27 12:43:56 2026 by rpki-client