$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8cd35e-4184-3df4-a7cc-027fa3497b3f.roa File: da8cd35e-4184-3df4-a7cc-027fa3497b3f.roa (raw, json) Hash identifier: 4k+UrFIcrbRSQVoGEYpkFFsCho4Mfq+MJ4xgJ6An/as= Subject key identifier: 11:EB:C9:F6:ED:DB:1C:38:B5:5F:31:58:82:06:BE:05:BF:B5:16:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D4AD0BC409B4B38965B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8cd35e-4184-3df4-a7cc-027fa3497b3f.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.52.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:4a:d0:bc:40:9b:4b:38:96:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=7e2d6b20-ee89-49cd-bd5c-c9a77d5a027c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:f2:82:60:c0:c5:16:17:03:99:12:0d:18: f1:d7:8d:45:ad:a1:89:02:49:56:dc:a3:b6:d3:77: 77:1f:9d:c3:f8:7e:4c:58:0a:80:60:ad:8a:62:bb: 2e:83:30:2e:94:da:cd:47:9f:01:f2:f2:a9:d5:0b: f2:35:d8:8a:0a:f7:d5:57:47:6c:73:31:37:c1:b2: b6:17:64:ee:6f:01:13:90:58:22:d0:dc:05:00:70: 2e:63:2c:6a:ab:f7:44:86:36:8b:dc:01:be:67:11: 58:8a:e7:c2:ba:9b:51:45:25:11:bd:e1:b1:9a:16: b9:45:7c:0a:d2:e6:8c:b4:da:57:89:27:93:83:05: 12:c0:f1:b0:61:9d:08:ed:2a:a4:0f:0f:5a:61:ea: 80:4f:4f:15:b2:76:fe:9f:78:76:a8:2c:7f:ee:fc: d9:10:44:3b:d4:50:6f:cd:b0:43:bf:45:ab:12:55: 97:b0:b0:a8:22:7f:17:03:e3:35:66:34:d7:fa:cc: 20:f1:96:da:3e:3f:7d:5b:32:4d:18:1d:3f:b2:68: 67:c0:94:20:d2:ba:5e:af:7b:64:5c:68:ed:25:0b: 5b:87:23:62:5a:e1:63:2d:dc:4f:f2:26:93:db:94: a7:7c:af:32:7a:d9:be:10:e0:ac:75:47:d8:84:96: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EB:C9:F6:ED:DB:1C:38:B5:5F:31:58:82:06:BE:05:BF:B5:16:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da8cd35e-4184-3df4-a7cc-027fa3497b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4c:81:1d:88:16:08:31:c8:a3:6e:44:4f:ec:e3:cc:22:da: a0:fa:23:a6:73:06:ec:50:e3:95:5c:da:1c:7c:5e:a8:1e:44: da:d2:44:dd:f6:e5:4a:e4:f0:4c:80:56:71:20:1c:ca:9f:84: 72:84:5f:72:2c:d3:ee:bd:17:c8:8c:76:02:49:ff:50:48:68: 43:48:e5:35:1f:f6:c2:af:55:e6:ec:2f:ac:da:9b:2e:e0:45: 0c:b2:10:2e:e2:80:22:03:8e:5d:45:33:26:e5:6e:60:b8:ae: 1f:88:92:dc:87:0c:3e:21:c1:5f:93:c2:91:71:e2:a4:93:49: c7:54:7e:30:ed:de:50:7c:0d:bc:83:f8:f1:32:1a:c7:18:a7: 82:7b:e7:e9:7f:61:c1:da:79:f7:80:e5:c1:09:68:71:44:1c: 44:af:98:e6:41:5f:21:c3:3a:22:c1:3f:7c:4c:d2:99:8e:6b: 50:d7:1f:30:e0:70:aa:96:d7:4e:71:4e:ce:b1:e8:13:fb:be: 2a:ac:13:95:1b:69:f0:72:36:d3:3d:0a:cf:be:d9:8c:be:a8: 4c:0c:c6:72:6a:08:10:29:8c:ac:e6:8f:f0:0b:c5:06:a3:b4: 3d:7f:67:07:17:d7:59:8a:7d:f2:f6:f0:0a:40:c7:a9:be:1a: 00:f4:44:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUrQvECbSziWW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk N2UyZDZiMjAtZWU4OS00OWNkLWJkNWMtYzlhNzdkNWEwMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkufygmDAxRYXA5kSDRjx141FraGJAklW3KO2 03d3H53D+H5MWAqAYK2KYrsugzAulNrNR58B8vKp1QvyNdiKCvfVV0dsczE3wbK2 F2TubwETkFgi0NwFAHAuYyxqq/dEhjaL3AG+ZxFYiufCuptRRSURveGxmha5RXwK 0uaMtNpXiSeTgwUSwPGwYZ0I7SqkDw9aYeqAT08Vsnb+n3h2qCx/7vzZEEQ71FBv zbBDv0WrElWXsLCoIn8XA+M1ZjTX+swg8ZbaPj99WzJNGB0/smhnwJQg0rper3tk XGjtJQtbhyNiWuFjLdxP8iaT25SnfK8yetm+EOCsdUfYhJaPtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHryfbt2xw4tV8xWIIGvgW/tRahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE4Y2QzNWUtNDE4NC0z ZGY0LWE3Y2MtMDI3ZmEzNDk3YjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZMgR2IFggxyKNuRE/s48wi2qD6I6ZzBuxQ45Vc2hx8XqgeRNrSRN32 5Urk8EyAVnEgHMqfhHKEX3Is0+69F8iMdgJJ/1BIaENI5TUf9sKvVebsL6zamy7g RQyyEC7igCIDjl1FMyblbmC4rh+IktyHDD4hwV+TwpFx4qSTScdUfjDt3lB8DbyD +PEyGscYp4J75+l/YcHaefeA5cEJaHFEHESvmOZBXyHDOiLBP3xM0pmOa1DXHzDg cKqW105xTs6x6BP7viqsE5UbafByNtM9Cs++2Yy+qEwMxnJqCBApjKzmj/ALxQaj tD1/ZwcX11mKffL28ApAx6m+GgD0RMk= -----END CERTIFICATE-----Generated at Sun Sep 27 16:34:44 2026 by rpki-client