$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ced85c74-6020-36b1-b73b-328ec2d3107d.roa File: ced85c74-6020-36b1-b73b-328ec2d3107d.roa (raw, json) Hash identifier: 2fVpWmbvgQFWmB729pkuNQ37FeWuVmZ9qa6bXfUnqJ4= Subject key identifier: 96:46:30:9D:8F:AA:FF:90:AB:CE:B4:A0:12:93:82:BD:DA:54:45:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093CF6E16BDA20E0FA833960 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ced85c74-6020-36b1-b73b-328ec2d3107d.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.3.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f6:e1:6b:da:20:e0:fa:83:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=073deb78-3c73-492f-9ce4-a7b0f2a32aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:1b:04:62:2b:6a:c6:d5:90:e3:ff:d9:dd: 95:42:f2:b2:4e:69:66:f7:54:fc:df:0b:8e:94:50: d9:51:16:5f:be:8f:16:18:b1:d0:93:ff:bc:d9:89: 4f:18:b2:f0:59:9e:62:17:a9:5c:1c:84:81:42:ee: c7:c2:bb:20:c7:36:04:90:ef:af:ea:ae:fc:cd:ce: aa:06:65:e7:8a:25:b7:e6:32:e2:ef:6d:96:35:b1: 42:55:ee:26:5d:ac:a2:fa:51:9c:2c:9a:88:28:1a: f6:95:80:28:53:df:c7:64:10:a9:17:5e:b5:b2:9b: 93:d4:ce:3d:40:a4:94:56:74:8b:fa:dc:e6:6d:95: a4:e2:33:e4:78:45:43:04:66:0b:cb:67:07:0a:b6: a7:e0:57:97:fb:0d:ca:81:ac:27:e5:6d:5d:ec:5c: 2c:cb:84:d4:75:bb:41:49:0f:3b:6a:a3:c2:1f:3a: 5d:99:d1:e9:f1:b5:00:22:36:aa:a6:cb:5b:f7:2c: 8d:f6:e6:f0:d9:36:c9:42:87:60:69:fb:05:22:1a: 9b:e8:0c:ec:0f:29:4d:8c:f3:9e:08:00:40:44:d5: bf:46:fb:4c:80:cb:89:1a:18:a7:ee:07:d7:6d:f8: f8:1a:42:19:cb:d4:45:55:1d:9f:ce:ad:97:99:5b: 01:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:46:30:9D:8F:AA:FF:90:AB:CE:B4:A0:12:93:82:BD:DA:54:45:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ced85c74-6020-36b1-b73b-328ec2d3107d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:5d:e0:37:f1:ab:43:d0:3f:10:a5:d7:84:c4:32:a6:b3:98: 2b:20:dc:1c:21:b9:a4:51:40:72:7f:ca:4f:7c:da:fa:8d:e3: c6:f4:75:c8:4f:f6:87:61:80:6e:b4:01:bd:54:21:7e:4a:14: e8:15:85:47:80:b1:e3:b8:4f:bc:6a:13:dd:53:52:89:39:41: 0b:e6:58:ad:83:1a:13:8d:6d:91:14:70:20:8c:a6:e6:4b:13: 5c:de:8c:94:b0:ea:b9:72:de:e5:63:6f:e6:58:49:e0:d5:8f: b3:21:9e:aa:b4:f9:a3:7b:4d:e9:22:e4:86:34:69:5e:c2:94: 21:93:4f:24:9a:85:24:7d:75:50:25:6e:33:31:73:97:99:f5: 32:6c:a6:f6:9f:12:d0:4a:61:20:67:5b:d5:cc:37:41:94:b1: 06:3b:4e:31:81:86:af:0d:65:1d:80:9c:89:09:e4:96:7a:27: 88:36:38:60:bf:ff:15:bd:64:94:1e:48:f3:d7:4c:19:47:b0: 1d:b0:bf:ec:7d:18:88:12:e3:7f:2c:3e:59:f9:00:d4:81:59: 04:25:26:47:db:49:66:d2:eb:09:04:d5:92:ad:97:e3:a7:97: 7b:e2:c6:40:06:16:c4:3c:19:4f:51:69:18:e7:f9:2a:12:9e: 85:e9:62:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPbha9og4PqDOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MDczZGViNzgtM2M3My00OTJmLTljZTQtYTdiMGYyYTMyYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvQbBGIrasbVkOP/2d2VQvKyTmlm91T83wuO lFDZURZfvo8WGLHQk/+82YlPGLLwWZ5iF6lcHISBQu7HwrsgxzYEkO+v6q78zc6q BmXniiW35jLi722WNbFCVe4mXayi+lGcLJqIKBr2lYAoU9/HZBCpF161spuT1M49 QKSUVnSL+tzmbZWk4jPkeEVDBGYLy2cHCran4FeX+w3Kgawn5W1d7Fwsy4TUdbtB SQ87aqPCHzpdmdHp8bUAIjaqpstb9yyN9ubw2TbJQodgafsFIhqb6AzsDylNjPOe CABARNW/RvtMgMuJGhin7gfXbfj4GkIZy9RFVR2fzq2XmVsBwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZGMJ2Pqv+Qq860oBKTgr3aVEVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2VkODVjNzQtNjAyMC0z NmIxLWI3M2ItMzI4ZWMyZDMxMDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwOMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxd4Dfxq0PQPxCl14TEMqazmCsg3BwhuaRRQHJ/yk982vqN48b0dchP 9odhgG60Ab1UIX5KFOgVhUeAseO4T7xqE91TUok5QQvmWK2DGhONbZEUcCCMpuZL E1zejJSw6rly3uVjb+ZYSeDVj7Mhnqq0+aN7Teki5IY0aV7ClCGTTySahSR9dVAl bjMxc5eZ9TJspvafEtBKYSBnW9XMN0GUsQY7TjGBhq8NZR2AnIkJ5JZ6J4g2OGC/ /xW9ZJQeSPPXTBlHsB2wv+x9GIgS438sPln5ANSBWQQlJkfbSWbS6wkE1ZKtl+On l3vixkAGFsQ8GU9RaRjn+SoSnoXpYqY= -----END CERTIFICATE-----Generated at Wed Sep 23 19:59:40 2026 by rpki-client