$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0650a461-c116-30df-86f3-9f9f2ff047f2.roa File: 0650a461-c116-30df-86f3-9f9f2ff047f2.roa (raw, json) Hash identifier: 7QJwCnkhd6ItADU4eqP0AzQcAwxaR40Oc3pU5ANd06E= Subject key identifier: 2F:F8:F0:4C:5C:46:22:4A:DD:5C:B4:7E:76:7A:3B:C1:D3:8B:A9:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497D78F020A9E35C97811500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0650a461-c116-30df-86f3-9f9f2ff047f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.196.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:78:f0:20:a9:e3:5c:97:81:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2d243589-a6a4-4646-b5fd-28dab2838141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6a:54:87:b7:e8:a4:16:0b:05:89:23:66:5d: 90:75:2a:81:68:d5:d2:60:97:3a:bb:a8:49:60:de: 95:8d:8e:be:ce:7a:9f:9c:0f:82:6a:44:fc:f8:b6: 45:7e:6a:3a:66:9f:8e:d5:46:cf:96:bd:b0:09:27: e0:f1:0b:ec:8b:f7:4e:5e:65:da:13:0a:f5:6e:00: ab:75:8d:71:c4:cd:b2:d5:5f:4c:71:00:0e:99:a1: e4:52:0e:08:cf:60:dc:96:c2:b7:72:a4:5f:28:b6: 25:65:b0:ff:9a:70:48:fc:de:2c:2e:4b:d3:3e:6d: 92:09:3f:13:bd:ff:90:bc:67:1f:d5:5e:d4:32:03: 3f:37:25:d1:3e:4e:d1:1d:54:57:ff:4b:b4:2d:26: 76:f6:09:12:2d:d6:7f:72:de:41:12:86:ee:a9:12: ba:ee:aa:da:9a:a9:d8:23:e3:14:cb:5a:c7:7d:a4: fd:52:2e:74:de:9f:b5:ca:db:fb:35:8d:91:19:40: ed:5d:a4:44:4b:ca:0d:52:b9:0a:d8:e4:2c:ba:0d: 96:d2:76:39:99:8e:39:14:c4:3f:e2:01:d7:f6:f3: 11:47:13:7c:fc:ed:07:fb:3f:b4:b1:3c:64:46:36: c6:13:a7:64:e6:b8:33:2f:95:f7:e9:88:d9:fb:4a: 80:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F8:F0:4C:5C:46:22:4A:DD:5C:B4:7E:76:7A:3B:C1:D3:8B:A9:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0650a461-c116-30df-86f3-9f9f2ff047f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:49:b5:18:18:74:c7:a7:57:19:33:7c:2d:94:87:c4:aa:e0: a0:df:11:0f:5c:3b:d9:7f:13:c6:b2:68:40:80:45:97:73:6a: 3b:a6:be:81:10:e1:aa:0c:08:13:68:33:45:91:68:d3:61:fd: b2:c7:2c:85:9e:2d:aa:c3:ae:17:3b:3f:48:c4:74:a0:fc:1a: 0a:df:43:68:33:14:bb:87:77:96:09:9d:66:5f:a6:e8:4c:81: cd:13:2a:ca:b5:de:29:21:bc:1a:55:ff:1c:25:c7:ff:43:d2: d5:67:d7:67:1b:76:d3:f8:19:6a:29:ca:a0:5a:50:b7:20:6a: 6b:53:2a:91:e8:57:c4:41:7b:b6:b9:7d:7a:ed:eb:a0:9d:c3: 21:05:f8:41:2e:34:37:c1:f8:d9:b3:d5:e3:b1:3d:2f:f9:17: 62:5e:d9:19:ca:18:01:46:53:d8:36:0a:cb:b0:2d:a6:3b:39: fe:72:76:c0:4d:f4:c9:25:72:3f:0d:7a:7f:07:90:ac:40:e6: e7:54:5a:dc:bb:a1:d0:6b:8e:f8:43:c0:e2:c3:ed:b6:c0:16: 34:2c:e4:65:b6:6a:64:37:62:75:f1:f0:b2:67:b4:86:c0:31: 5d:45:a4:eb:0c:8d:1a:c4:90:f7:49:05:03:04:5e:07:5b:20: d3:30:0b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfXjwIKnjXJeBFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmQyNDM1ODktYTZhNC00NjQ2LWI1ZmQtMjhkYWIyODM4MTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWpUh7fopBYLBYkjZl2QdSqBaNXSYJc6u6hJ YN6VjY6+znqfnA+CakT8+LZFfmo6Zp+O1UbPlr2wCSfg8Qvsi/dOXmXaEwr1bgCr dY1xxM2y1V9McQAOmaHkUg4Iz2DclsK3cqRfKLYlZbD/mnBI/N4sLkvTPm2SCT8T vf+QvGcf1V7UMgM/NyXRPk7RHVRX/0u0LSZ29gkSLdZ/ct5BEobuqRK67qramqnY I+MUy1rHfaT9Ui503p+1ytv7NY2RGUDtXaRES8oNUrkK2OQsug2W0nY5mY45FMQ/ 4gHX9vMRRxN8/O0H+z+0sTxkRjbGE6dk5rgzL5X36YjZ+0qAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/48ExcRiJK3Vy0fnZ6O8HTi6l7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY1MGE0NjEtYzExNi0z MGRmLTg2ZjMtOWY5ZjJmZjA0N2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8QwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRJtRgYdMenVxkzfC2Uh8Sq4KDfEQ9cO9l/E8ayaECARZdzajumvoEQ 4aoMCBNoM0WRaNNh/bLHLIWeLarDrhc7P0jEdKD8GgrfQ2gzFLuHd5YJnWZfpuhM gc0TKsq13ikhvBpV/xwlx/9D0tVn12cbdtP4GWopyqBaULcgamtTKpHoV8RBe7a5 fXrt66CdwyEF+EEuNDfB+Nmz1eOxPS/5F2Je2RnKGAFGU9g2CsuwLaY7Of5ydsBN 9Mklcj8Nen8HkKxA5udUWty7odBrjvhDwOLD7bbAFjQs5GW2amQ3YnXx8LJntIbA MV1FpOsMjRrEkPdJBQMEXgdbINMwC74= -----END CERTIFICATE-----Generated at Tue Sep 29 23:33:41 2026 by rpki-client