$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dac41a7a-cfab-3721-a80f-156c029935e7.roa File: dac41a7a-cfab-3721-a80f-156c029935e7.roa (raw, json) Hash identifier: 0kT5gAGnTSobBQ2Z0/mMUSk36Tt6MiS7nFns+I4fWik= Subject key identifier: F5:68:81:7B:27:FD:F1:77:8D:DC:F5:FD:B4:36:CD:33:1B:73:E2:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C48DF2DC0F190FA66F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dac41a7a-cfab-3721-a80f-156c029935e7.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.33.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c4:8d:f2:dc:0f:19:0f:a6:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=a8bb43b9-dad1-4ccf-adec-34c61c7b6d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:10:f5:f8:7d:71:b8:85:21:2e:e6:f6:0f:d4: 3b:9c:4f:65:4c:58:dd:7b:65:0d:13:64:04:2d:4b: 36:b6:ee:9b:74:e5:5d:1e:b1:ed:03:35:6f:09:85: bd:af:cf:81:e5:e9:9d:6a:98:db:2d:01:6a:cc:93: 23:15:86:d1:35:7b:a6:ed:cb:79:10:83:30:a5:77: b6:ec:9c:db:5d:e2:cf:91:a7:e2:65:ed:93:5b:5b: 17:4d:91:8a:3d:ae:69:b7:bc:74:cf:3e:90:c2:c3: fb:3b:bf:0a:0d:74:1f:6f:5c:1e:27:15:cc:a0:89: b3:ea:b0:79:ee:f3:7e:5e:1b:bb:90:c5:5b:ad:11: eb:85:6e:6f:2e:b4:90:fe:74:da:d1:7f:f7:fc:97: 50:56:1a:bb:b3:49:a8:4f:23:d6:f1:75:b4:c6:fe: e7:c5:96:03:58:6a:85:bf:2a:93:8f:c0:c5:fc:30: 47:2d:d9:53:16:a5:83:4f:40:da:d6:0f:ae:41:52: ab:d9:85:a4:b3:1f:ae:86:cc:b1:59:9e:0f:f6:e2: db:52:40:ee:32:1b:fb:da:33:99:11:20:b1:17:ad: 46:c6:ec:8f:1c:e9:85:f6:37:0b:25:2b:bf:c5:9d: 2a:01:d0:d8:af:06:d0:72:aa:15:87:86:81:36:7f: 13:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:68:81:7B:27:FD:F1:77:8D:DC:F5:FD:B4:36:CD:33:1B:73:E2:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dac41a7a-cfab-3721-a80f-156c029935e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:07:13:98:df:d1:bc:32:1f:74:39:fd:60:65:3f:1a:57:65: 49:b7:47:be:c9:14:4a:57:2f:dc:03:be:14:8a:24:ad:5b:9f: 10:2b:ca:47:fd:22:db:ea:bc:1a:dd:34:e1:c8:5e:df:fd:8a: 27:ae:33:fd:98:6f:e7:0e:6e:95:84:75:9e:50:bd:60:4e:90: 69:11:9d:8b:78:f7:07:ef:a6:8d:93:52:b9:f6:25:e7:2c:f8: ce:76:29:af:2a:e9:b9:f3:a5:b5:79:0e:bf:d7:26:0d:40:97: 27:d6:07:dc:1f:5a:ec:9a:1a:c2:1f:30:15:6b:7d:a2:63:f1: 4d:b4:50:01:c0:39:4e:b4:54:16:53:42:ee:98:93:eb:63:a8: 75:a1:9a:18:bc:e5:47:e1:93:b5:27:d9:1c:28:1b:14:92:0b: ac:94:66:f5:7e:d8:54:5b:bb:19:d9:17:23:35:4d:58:60:b8: 4b:0d:40:f2:40:46:75:c6:3c:99:1b:c5:8e:c4:06:c7:f6:1c: ae:82:91:a4:84:04:35:b1:05:99:c2:48:9c:08:68:c7:7d:5e: d9:f8:2a:f8:77:98:67:f8:74:a0:78:09:83:e3:35:76:a3:4a: 2f:ae:71:55:b0:b6:89:22:ad:4a:88:42:e5:f5:d0:8d:db:39: 3f:3f:c7:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8SN8twPGQ+mbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk YThiYjQzYjktZGFkMS00Y2NmLWFkZWMtMzRjNjFjN2I2ZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxD1+H1xuIUhLub2D9Q7nE9lTFjde2UNE2QE LUs2tu6bdOVdHrHtAzVvCYW9r8+B5emdapjbLQFqzJMjFYbRNXum7ct5EIMwpXe2 7JzbXeLPkafiZe2TW1sXTZGKPa5pt7x0zz6QwsP7O78KDXQfb1weJxXMoImz6rB5 7vN+Xhu7kMVbrRHrhW5vLrSQ/nTa0X/3/JdQVhq7s0moTyPW8XW0xv7nxZYDWGqF vyqTj8DF/DBHLdlTFqWDT0Da1g+uQVKr2YWksx+uhsyxWZ4P9uLbUkDuMhv72jOZ ESCxF61GxuyPHOmF9jcLJSu/xZ0qAdDYrwbQcqoVh4aBNn8TgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVogXsn/fF3jdz1/bQ2zTMbc+JIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFjNDFhN2EtY2ZhYi0z NzIxLWE4MGYtMTU2YzAyOTkzNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoHE5jf0bwyH3Q5/WBlPxpXZUm3R77JFEpXL9wDvhSKJK1bnxArykf9 ItvqvBrdNOHIXt/9iieuM/2Yb+cObpWEdZ5QvWBOkGkRnYt49wfvpo2TUrn2Jecs +M52Ka8q6bnzpbV5Dr/XJg1AlyfWB9wfWuyaGsIfMBVrfaJj8U20UAHAOU60VBZT Qu6Yk+tjqHWhmhi85Ufhk7Un2RwoGxSSC6yUZvV+2FRbuxnZFyM1TVhguEsNQPJA RnXGPJkbxY7EBsf2HK6CkaSEBDWxBZnCSJwIaMd9Xtn4Kvh3mGf4dKB4CYPjNXaj Si+ucVWwtokirUqIQuX10I3bOT8/x5c= -----END CERTIFICATE-----Generated at Thu Sep 24 06:51:37 2026 by rpki-client