$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c3ec76c-1a58-3e1f-99ca-9984db8a20ff.roa File: 0c3ec76c-1a58-3e1f-99ca-9984db8a20ff.roa (raw, json) Hash identifier: PHvaT5al6lfVtwGIU/ZGy/Hi9g7NB58kkpvhrn2MM4A= Subject key identifier: 58:12:0F:59:40:8C:6E:57:35:7F:BE:02:EC:D1:DF:16:67:B2:9E:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F7012A4E8BC498D648C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c3ec76c-1a58-3e1f-99ca-9984db8a20ff.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 4780 IP address blocks: 23.36.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f7:01:2a:4e:8b:c4:98:d6:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=3d9a3a0e-390d-4071-a0f6-d5a2271453fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:45:a7:7b:10:a2:84:0b:0b:c4:d9:94:c4:af: b4:1a:06:27:bb:c5:18:5c:f8:6c:3e:4b:a9:a3:0b: 89:72:2a:4b:a9:67:73:95:8b:bb:53:12:38:b5:08: 03:dd:d8:b8:fa:e7:66:9a:c9:ac:cf:cb:11:fb:54: a5:a1:16:56:0c:1f:5d:f4:69:27:d1:e1:3f:19:e5: 58:2c:b2:16:98:a9:30:e7:43:d3:58:80:d7:f3:8d: d9:4e:3d:54:be:67:2c:dd:49:05:83:9e:0a:ac:e3: 23:0e:38:20:99:d8:b3:c1:0a:b6:26:82:88:a2:bd: b6:04:a5:ce:6f:e4:8c:20:42:fd:3e:64:ff:5d:5b: c6:2a:ba:c6:d7:b6:33:69:af:88:e6:7e:36:38:47: 6b:b5:46:76:d9:e8:3c:f3:66:32:ef:f7:68:b2:09: 83:1f:ef:92:b3:69:00:9c:6f:10:ef:5b:6b:f6:a1: 91:62:4d:ef:35:91:b3:ee:35:4d:e9:6d:d0:21:f7: 8e:b2:19:2d:80:74:0d:6a:1e:f0:8c:09:ae:76:be: 4e:4c:be:dc:36:e3:5c:17:6a:ad:61:d6:12:37:56: 6a:23:53:76:dd:73:ff:01:8c:ed:3d:20:3f:d1:2b: 83:6c:9a:87:f6:41:9c:f8:0e:3a:7c:e8:2a:5b:e7: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:0F:59:40:8C:6E:57:35:7F:BE:02:EC:D1:DF:16:67:B2:9E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c3ec76c-1a58-3e1f-99ca-9984db8a20ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ff:e6:d9:e8:f1:e7:3c:db:84:d6:74:53:a4:bb:f8:3b:bb: 7f:0c:84:43:76:50:81:f5:d3:fb:2f:84:81:ab:c7:7d:86:61: 4b:cb:5e:33:41:3b:f8:13:0e:27:43:88:cb:e2:bb:7b:de:95: ef:29:b6:13:f5:2a:92:1f:38:55:4b:42:b1:62:de:db:0f:43: ed:15:ea:18:71:6f:7d:2c:52:ec:58:ab:26:b7:0c:36:78:fa: 6a:6d:9d:e4:b4:df:70:f3:bf:77:da:fa:d0:73:43:c2:4c:75: bb:1c:a3:02:49:93:0e:44:f4:8b:d0:b6:85:62:3a:18:a9:e4: 67:d3:d7:7d:0f:29:03:b7:66:d6:09:5e:ed:91:45:13:d8:7a: 10:ae:00:fc:ee:48:18:74:1f:fa:84:1d:3d:7c:ce:f4:ca:48: 9f:b9:a0:6d:ea:57:3f:cb:5b:5f:49:69:a1:58:92:07:33:3d: c0:fc:fd:e3:eb:87:f5:ff:3a:3f:0b:34:26:45:df:0e:dc:d6: 70:be:5f:11:6e:ff:a3:e9:45:aa:5c:a9:d4:79:ec:c4:5f:70: b1:21:ba:8b:53:50:df:47:e6:cf:98:24:83:5b:0a:79:03:17: b5:98:da:86:38:ef:79:b0:6a:9f:13:25:56:a7:73:7b:7b:39: 7e:60:df:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/cBKk6LxJjWSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk M2Q5YTNhMGUtMzkwZC00MDcxLWEwZjYtZDVhMjI3MTQ1M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0WnexCihAsLxNmUxK+0GgYnu8UYXPhsPkup owuJcipLqWdzlYu7UxI4tQgD3di4+udmmsmsz8sR+1SloRZWDB9d9Gkn0eE/GeVY LLIWmKkw50PTWIDX843ZTj1Uvmcs3UkFg54KrOMjDjggmdizwQq2JoKIor22BKXO b+SMIEL9PmT/XVvGKrrG17Yzaa+I5n42OEdrtUZ22eg882Yy7/dosgmDH++Ss2kA nG8Q71tr9qGRYk3vNZGz7jVN6W3QIfeOshktgHQNah7wjAmudr5OTL7cNuNcF2qt YdYSN1ZqI1N23XP/AYztPSA/0SuDbJqH9kGc+A46fOgqW+eRbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgSD1lAjG5XNX++AuzR3xZnsp7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGMzZWM3NmMtMWE1OC0z ZTFmLTk5Y2EtOTk4NGRiOGEyMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb/5tno8ec824TWdFOku/g7u38MhEN2UIH10/svhIGrx32GYUvLXjNB O/gTDidDiMviu3vele8pthP1KpIfOFVLQrFi3tsPQ+0V6hhxb30sUuxYqya3DDZ4 +mptneS033Dzv3fa+tBzQ8JMdbscowJJkw5E9IvQtoViOhip5GfT130PKQO3ZtYJ Xu2RRRPYehCuAPzuSBh0H/qEHT18zvTKSJ+5oG3qVz/LW19JaaFYkgczPcD8/ePr h/X/Oj8LNCZF3w7c1nC+XxFu/6PpRapcqdR57MRfcLEhuotTUN9H5s+YJINbCnkD F7WY2oY473mwap8TJVanc3t7OX5g34g= -----END CERTIFICATE-----Generated at Mon Sep 21 21:21:32 2026 by rpki-client