$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb1cbf66-7cf2-320b-a96f-a9815f5039d2.roa File: cb1cbf66-7cf2-320b-a96f-a9815f5039d2.roa (raw, json) Hash identifier: Ejf+HZarfwf7+9sCdjGTEw1jqYwBYNRQPUY82CunvlE= Subject key identifier: 91:C3:6D:9D:56:CF:D4:7A:99:F9:5C:3D:DF:90:41:CD:D7:D6:5F:E2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F492D89ED9D6ECBA8200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb1cbf66-7cf2-320b-a96f-a9815f5039d2.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.41.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f4:92:d8:9e:d9:d6:ec:ba:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=cdf34138-dfd7-401d-9056-38099d6f6e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:62:27:ed:3f:8c:81:fc:5b:9e:46:13:51:8e: 70:a1:82:b7:f6:b2:c5:1c:bd:13:dc:4e:e3:b6:f2: be:09:ec:1e:69:d7:6e:f0:93:49:6b:01:0b:bd:39: 80:4e:d0:c5:80:1a:f5:94:1c:ed:8f:f3:de:1c:a5: 58:c5:16:86:e0:2e:e4:00:2d:9a:74:5e:b3:f1:36: d9:c3:d9:b4:99:b0:91:13:32:99:f6:3e:f0:a7:81: b4:bb:97:2b:bf:6d:2a:d5:9e:e2:26:fe:38:a8:b5: a4:65:d9:5c:26:f9:79:4a:37:4d:0d:49:1b:f5:1b: 29:1e:4b:46:74:97:ee:b2:63:22:b4:04:1b:d5:15: b2:8e:e3:5a:4a:ca:94:5b:32:00:12:b6:a5:b2:5c: 5c:81:2d:86:1b:d4:89:6a:cc:f8:6f:04:4e:60:dc: 58:de:04:71:60:1b:0d:69:52:56:cb:b8:c5:4a:9e: 7e:94:ab:e9:ae:c1:d0:b0:e7:a5:16:cc:6c:ec:8d: 33:2d:ad:4c:4d:8d:a2:5a:05:9f:e6:1f:47:d4:85: e9:ae:df:91:dd:c3:fa:55:a0:ba:67:65:73:1b:26: 33:76:16:7b:fb:26:9e:49:f0:0a:68:7d:13:91:3d: c9:7c:2c:fb:58:29:b7:8e:6b:97:e5:0c:78:76:48: b4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C3:6D:9D:56:CF:D4:7A:99:F9:5C:3D:DF:90:41:CD:D7:D6:5F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb1cbf66-7cf2-320b-a96f-a9815f5039d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:7a:78:2a:3a:0d:40:fa:7c:10:5d:21:3e:54:77:b5:da:08: ec:f0:06:be:a1:35:0d:a7:db:25:b1:75:57:5b:b4:b9:1b:aa: 8f:02:1b:88:03:7f:58:49:ea:1c:d4:ad:80:0f:16:b1:b4:81: a6:c2:2f:b5:f7:a4:eb:1e:6b:66:26:26:19:82:59:77:30:49: 1e:30:f8:f6:8e:95:ea:24:d4:01:43:2a:d8:d1:4c:6f:67:eb: b4:f7:90:02:47:3f:e5:ea:1a:0e:98:f5:32:30:5d:75:2f:7e: 25:63:0f:7e:a6:d3:22:b9:37:52:40:79:c3:af:85:83:24:e1: 11:de:09:0e:0f:71:21:87:d3:0e:d3:96:65:29:f8:e6:2c:45: fd:f0:98:06:5f:16:c4:c7:70:bf:6a:07:74:4c:b4:16:a9:e5: 49:cf:6e:e6:a6:ce:07:5c:9a:5f:a2:37:4f:41:00:d0:12:3b: 04:24:90:48:78:a6:7a:20:57:53:99:71:59:e2:9c:af:a2:55: e6:82:67:31:7f:25:d4:fa:c0:d8:81:0b:40:f4:d8:dc:9a:e8: dc:95:48:b4:ed:fb:98:fd:b0:34:5e:bc:18:8f:45:28:f6:98: fa:92:31:1e:7d:59:9c:69:81:c6:5c:f6:cf:e2:d1:1e:87:90: 80:d1:8e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/SS2J7Z1uy6ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Y2RmMzQxMzgtZGZkNy00MDFkLTkwNTYtMzgwOTlkNmY2ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGIn7T+MgfxbnkYTUY5woYK39rLFHL0T3E7j tvK+Ceweaddu8JNJawELvTmATtDFgBr1lBztj/PeHKVYxRaG4C7kAC2adF6z8TbZ w9m0mbCREzKZ9j7wp4G0u5crv20q1Z7iJv44qLWkZdlcJvl5SjdNDUkb9RspHktG dJfusmMitAQb1RWyjuNaSsqUWzIAEralslxcgS2GG9SJasz4bwROYNxY3gRxYBsN aVJWy7jFSp5+lKvprsHQsOelFsxs7I0zLa1MTY2iWgWf5h9H1IXprt+R3cP6VaC6 Z2VzGyYzdhZ7+yaeSfAKaH0TkT3JfCz7WCm3jmuX5Qx4dki0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHDbZ1Wz9R6mflcPd+QQc3X1l/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2IxY2JmNjYtN2NmMi0z MjBiLWE5NmYtYTk4MTVmNTAzOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFym4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx6eCo6DUD6fBBdIT5Ud7XaCOzwBr6hNQ2n2yWxdVdbtLkbqo8CG4gD f1hJ6hzUrYAPFrG0gabCL7X3pOsea2YmJhmCWXcwSR4w+PaOleok1AFDKtjRTG9n 67T3kAJHP+XqGg6Y9TIwXXUvfiVjD36m0yK5N1JAecOvhYMk4RHeCQ4PcSGH0w7T lmUp+OYsRf3wmAZfFsTHcL9qB3RMtBap5UnPbuamzgdcml+iN09BANASOwQkkEh4 pnogV1OZcVninK+iVeaCZzF/JdT6wNiBC0D02Nya6NyVSLTt+5j9sDRevBiPRSj2 mPqSMR59WZxpgcZc9s/i0R6HkIDRjnc= -----END CERTIFICATE-----Generated at Thu Sep 24 11:02:39 2026 by rpki-client