$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca133652-5504-37dc-9d0d-5dfd675c228e.roa File: ca133652-5504-37dc-9d0d-5dfd675c228e.roa (raw, json) Hash identifier: /NOfoVr7/9opzG8hHfDi/ntYccl1nh91Eth8O2OmWDk= Subject key identifier: EC:E0:AD:60:11:CE:63:EF:2B:8C:0B:5A:22:B9:C8:B7:A3:ED:01:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F498572839E9EBF0F00797580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca133652-5504-37dc-9d0d-5dfd675c228e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.63.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:72:83:9e:9e:bf:0f:00:79:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35373a3c-7649-4d98-aaac-caaa646fb1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:1d:2d:81:0d:eb:2a:f1:ce:bf:bf:36:bd: 92:4c:11:09:96:1c:f0:b4:5f:bc:5a:28:26:4e:79: b3:c3:9f:39:5b:a8:47:6b:2a:3f:6e:8e:16:73:64: 5c:25:f6:81:e8:7e:d0:d0:03:65:4f:52:73:29:96: 2b:e9:80:5a:67:89:de:de:9f:de:82:c4:14:ec:b5: 56:43:60:d1:e2:aa:c9:af:44:64:30:44:d6:72:8e: 6d:fa:5b:cc:ee:a2:63:2d:3c:01:0f:e6:9b:44:ff: b9:25:de:04:80:6b:87:ee:6c:a5:98:12:42:62:2c: 33:78:82:46:5d:5c:19:60:f2:e0:9c:21:a7:07:7c: d2:68:a0:78:19:f7:cc:3d:2c:a9:0a:6c:65:e2:1e: 06:91:ec:25:78:1a:1d:35:35:34:49:a9:67:e5:f0: 9f:a4:5e:a3:5b:55:95:a6:ce:98:0d:91:f0:61:35: 7c:0c:9b:cd:f4:f7:16:a5:c4:df:7f:cb:17:8e:39: bb:ff:a4:c0:a9:5f:d0:48:3b:dd:f9:58:8b:db:34: 79:c9:c2:f1:cc:06:b8:db:54:d4:68:54:d0:3c:88: d6:1b:66:96:b2:2f:69:23:f0:80:5f:7f:f3:a4:b6: 3a:57:65:8a:8b:24:52:23:12:0a:2e:61:b8:41:d7: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E0:AD:60:11:CE:63:EF:2B:8C:0B:5A:22:B9:C8:B7:A3:ED:01:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca133652-5504-37dc-9d0d-5dfd675c228e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:71:c2:a9:15:2a:b9:72:f3:a8:81:9f:d9:1e:65:08:07:6f: b7:97:f9:ec:f5:35:b9:53:56:55:55:6b:db:db:9e:c5:b0:f2: df:39:67:d1:94:5a:8f:4b:7d:54:8e:84:5e:55:d0:b4:98:e0: 7b:f7:65:07:84:7a:63:fa:84:93:74:a9:1d:6e:5f:48:73:d3: aa:c8:87:50:b6:57:88:8c:b1:83:58:41:82:f2:78:61:70:f8: 02:b2:12:d4:2e:5b:44:ff:00:ab:49:ab:32:fb:55:51:3b:7f: 19:30:a4:21:17:02:2c:cb:94:3e:6c:e6:73:4b:a4:86:98:4e: 96:be:69:15:81:96:0f:39:6d:12:ee:1c:92:65:60:9d:ff:f9: b5:57:89:c4:62:6c:3e:6c:94:4b:8a:6f:e2:0a:fd:84:b1:ea: 14:b3:2e:0a:4f:1e:c6:33:78:0f:44:7d:a6:b9:3f:c4:f7:f9: 3a:45:36:35:68:a4:b4:d8:c8:36:e5:6a:11:70:38:2a:97:6f: 37:f3:44:77:e5:9c:45:86:8b:d7:eb:f9:50:f1:a4:89:35:e8: fb:04:ca:a8:39:e9:ef:3a:c5:46:54:3e:8f:61:35:ff:84:49: 0b:22:65:4a:cd:3c:bb:f1:f9:bb:b6:0f:69:11:2a:57:f3:6e: d6:33:83:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhXKDnp6/DwB5dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzUzNzNhM2MtNzY0OS00ZDk4LWFhYWMtY2FhYTY0NmZiMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt0dLYEN6yrxzr+/Nr2STBEJlhzwtF+8Wigm Tnmzw585W6hHayo/bo4Wc2RcJfaB6H7Q0ANlT1JzKZYr6YBaZ4ne3p/egsQU7LVW Q2DR4qrJr0RkMETWco5t+lvM7qJjLTwBD+abRP+5Jd4EgGuH7mylmBJCYiwzeIJG XVwZYPLgnCGnB3zSaKB4GffMPSypCmxl4h4GkewleBodNTU0Saln5fCfpF6jW1WV ps6YDZHwYTV8DJvN9PcWpcTff8sXjjm7/6TAqV/QSDvd+ViL2zR5ycLxzAa421TU aFTQPIjWG2aWsi9pI/CAX3/zpLY6V2WKiyRSIxIKLmG4QdesBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzgrWARzmPvK4wLWiK5yLej7QHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ExMzM2NTItNTUwNC0z N2RjLTlkMGQtNWRmZDY3NWMyMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANxwqkVKrly86iBn9keZQgHb7eX+ez1NblTVlVVa9vbnsWw8t85Z9GU Wo9LfVSOhF5V0LSY4Hv3ZQeEemP6hJN0qR1uX0hz06rIh1C2V4iMsYNYQYLyeGFw +AKyEtQuW0T/AKtJqzL7VVE7fxkwpCEXAizLlD5s5nNLpIaYTpa+aRWBlg85bRLu HJJlYJ3/+bVXicRibD5slEuKb+IK/YSx6hSzLgpPHsYzeA9Efaa5P8T3+TpFNjVo pLTYyDblahFwOCqXbzfzRHflnEWGi9fr+VDxpIk16PsEyqg56e86xUZUPo9hNf+E SQsiZUrNPLvx+bu2D2kRKlfzbtYzg28= -----END CERTIFICATE-----Generated at Fri Sep 25 14:35:19 2026 by rpki-client