$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ea97e12-279c-3fac-bd9c-7d4029e2517e.roa File: 1ea97e12-279c-3fac-bd9c-7d4029e2517e.roa (raw, json) Hash identifier: RGz+UxDuQ2+7zpF6uwV/oJsTvTp9LnASkXhz3zDsxIg= Subject key identifier: 27:13:7C:DC:A0:14:73:B8:A0:25:F3:FC:1F:7D:E9:5E:96:17:85:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F331D1D692803A017EB9FF5C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ea97e12-279c-3fac-bd9c-7d4029e2517e.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.33.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:1d:69:28:03:a0:17:eb:9f:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=5438ee26-7c6f-4db4-9dbf-22f2cc2378ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:af:28:0c:05:67:b1:79:0f:8c:79:b0:cc: f6:d2:97:7a:56:c3:ac:c6:00:03:4d:51:1e:bc:98: 17:f1:71:7a:3a:8e:b3:a3:60:c8:aa:17:de:fa:9c: d8:40:9e:78:9e:67:c1:26:a6:99:d9:c2:01:b0:d0: 62:9d:7b:51:03:90:6b:c7:bd:d1:c2:d0:e6:f8:37: c8:37:21:a2:1a:51:58:1f:9b:82:fd:27:8b:a8:e4: 05:bf:23:eb:dd:2d:d6:3d:de:5e:ed:74:9f:05:92: 0a:e5:0e:ce:92:4e:b9:22:8e:4d:b0:f0:89:44:e1: 76:c5:26:ee:c3:0b:d8:7e:61:fc:9f:27:12:09:5d: f4:b9:e9:32:29:5a:53:30:b4:73:f2:b3:c6:c9:32: e7:da:b1:3e:96:12:c6:24:68:21:25:48:61:38:90: 91:24:e5:79:dc:0e:9f:6e:af:59:76:9b:42:02:ad: 85:c5:90:d3:1c:cb:b6:1b:04:c3:97:b5:f2:b3:d1: 12:63:c8:43:8f:ca:b9:e4:62:cd:20:aa:90:b3:8e: da:30:0a:18:56:6c:de:14:57:d1:f8:45:f4:94:ec: 77:65:0a:d6:d1:c0:14:25:b1:c3:90:95:2b:ad:88: 77:4a:37:06:07:41:99:49:e3:ce:01:cb:74:8f:cc: d9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:13:7C:DC:A0:14:73:B8:A0:25:F3:FC:1F:7D:E9:5E:96:17:85:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ea97e12-279c-3fac-bd9c-7d4029e2517e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e5:4e:e5:bb:84:96:5d:7a:3a:0a:2e:4d:53:7d:b6:40:d4: b0:81:c1:67:d1:b0:a1:49:9e:22:d5:7d:4a:9e:d7:f2:ff:46: a7:48:5e:31:33:86:12:07:ce:88:12:aa:ec:43:40:2f:cc:6a: 99:d7:00:d7:d5:4a:98:15:4f:08:03:7a:43:e2:48:e0:b9:e8: d9:02:35:99:c5:41:8d:c3:d2:f4:26:b7:61:0f:0d:92:56:20: 69:65:04:9d:89:11:6b:ef:a3:e4:b0:eb:52:a1:03:f4:dd:8e: c2:6a:f6:e5:3e:86:36:db:5d:47:54:d6:6b:96:8d:a7:44:36: 0f:46:11:b6:fb:b9:54:5b:06:23:0d:2b:bf:65:c9:51:c8:62: 36:90:24:1b:bd:01:75:f4:e8:41:fa:61:c0:a3:fd:58:0f:d6: 41:72:27:b6:1d:c2:cf:f8:c0:bd:94:5d:bf:0e:4c:71:fa:5a: bc:b9:da:b9:1e:52:ef:36:8a:ce:73:2f:e1:e2:8d:59:cc:af: 99:9f:62:f2:e4:9d:a1:dc:3f:58:e0:f6:c4:f0:54:b8:06:c4: 44:92:32:53:a2:78:33:5d:bc:09:e3:41:3e:9c:d0:14:e2:42: 42:13:22:5e:25:19:72:40:8c:16:35:e2:4b:9c:f3:10:12:7a: 04:b2:cd:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHR1pKAOgF+uf9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NTQzOGVlMjYtN2M2Zi00ZGI0LTlkYmYtMjJmMmNjMjM3OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP+vKAwFZ7F5D4x5sMz20pd6VsOsxgADTVEe vJgX8XF6Oo6zo2DIqhfe+pzYQJ54nmfBJqaZ2cIBsNBinXtRA5Brx73RwtDm+DfI NyGiGlFYH5uC/SeLqOQFvyPr3S3WPd5e7XSfBZIK5Q7Okk65Io5NsPCJROF2xSbu wwvYfmH8nycSCV30uekyKVpTMLRz8rPGyTLn2rE+lhLGJGghJUhhOJCRJOV53A6f bq9ZdptCAq2FxZDTHMu2GwTDl7Xys9ESY8hDj8q55GLNIKqQs47aMAoYVmzeFFfR +EX0lOx3ZQrW0cAUJbHDkJUrrYh3SjcGB0GZSePOAct0j8zZeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcTfNygFHO4oCXz/B996V6WF4WUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVhOTdlMTItMjc5Yy0z ZmFjLWJkOWMtN2Q0MDI5ZTI1MTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLlTuW7hJZdejoKLk1TfbZA1LCBwWfRsKFJniLVfUqe1/L/RqdIXjEz hhIHzogSquxDQC/MapnXANfVSpgVTwgDekPiSOC56NkCNZnFQY3D0vQmt2EPDZJW IGllBJ2JEWvvo+Sw61KhA/TdjsJq9uU+hjbbXUdU1muWjadENg9GEbb7uVRbBiMN K79lyVHIYjaQJBu9AXX06EH6YcCj/VgP1kFyJ7Ydws/4wL2UXb8OTHH6Wry52rke Uu82is5zL+HijVnMr5mfYvLknaHcP1jg9sTwVLgGxESSMlOieDNdvAnjQT6c0BTi QkITIl4lGXJAjBY14kuc8xASegSyzaU= -----END CERTIFICATE-----Generated at Sun Sep 27 17:02:38 2026 by rpki-client