$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa File: 3444ef75-c7e4-3273-828e-13da92d78462.roa (raw, json) Hash identifier: tIBX8iGpLi61KlENBufWKvFB/Yo+IuGfL7XsdQdMDtc= Subject key identifier: 87:F1:95:07:3D:7E:28:B1:47:95:60:EF:1A:C0:24:C8:51:44:11:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD72365FFD0B2470D0EE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.45.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:72:36:5f:fd:0b:24:70:d0:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=4bf89db5-9690-4663-a583-bff7944e30ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:d9:99:f3:8d:5c:7a:89:46:5a:97:c9:b8: c9:6c:63:73:70:0c:ca:be:01:bc:be:66:5a:14:64: 6b:69:4d:80:a8:79:7e:6c:75:a7:e7:46:4e:bb:f3: 3a:ff:1c:1b:3f:6f:40:3c:5e:0a:4f:6f:59:b8:c5: 0d:68:da:5f:af:d8:a2:ac:81:f5:db:1a:c3:d0:33: 83:ca:39:03:5d:c8:14:c1:7b:41:86:45:ee:fc:7c: 55:6f:3a:1c:61:b4:07:2c:13:1a:5f:6a:35:93:71: fe:cc:09:73:5c:8b:20:5c:8a:2e:3e:d1:2d:45:d4: a4:70:23:16:8f:0f:f5:5f:f2:51:ae:b7:8d:1c:a1: 79:85:39:d5:71:be:97:87:f1:25:d9:28:2d:6e:f8: 5a:63:51:a9:b4:07:e8:55:b4:dc:5e:3f:16:92:c1: 4d:56:4d:0e:79:74:e5:ad:f6:cd:35:90:76:25:b7: 73:76:af:89:34:4b:1a:b0:b9:b9:f3:3f:97:3c:07: 43:18:fc:16:bf:50:50:bf:9a:da:85:e4:0c:9c:26: 4b:bb:e7:f5:e3:39:3d:1f:cd:35:1a:98:92:dd:09: 94:1c:6b:5a:8f:5d:d7:e8:e2:2a:58:0a:3b:c2:1a: 29:5b:71:e0:47:4b:bd:6e:3f:79:33:f5:36:3e:5f: da:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F1:95:07:3D:7E:28:B1:47:95:60:EF:1A:C0:24:C8:51:44:11:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3444ef75-c7e4-3273-828e-13da92d78462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.45.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:6c:0d:c1:91:3d:50:9b:c3:78:72:85:3e:5f:97:99:70:62: 92:6f:4b:ae:1d:e7:fb:8d:31:44:c4:d9:a7:8c:e3:0f:9e:7a: 1b:ca:e9:2c:7e:e8:84:b8:30:b8:d6:80:f5:42:36:87:df:ce: 45:3e:2b:6c:e2:bd:4a:5b:e7:80:e6:6e:1d:ac:ec:b7:a8:df: 9c:d3:3b:fb:9a:ea:5a:4d:42:26:de:93:20:44:9e:83:1c:fb: e8:30:d9:76:69:21:f2:3b:3c:29:ed:1d:78:3d:2f:8f:9f:77: fd:cc:a0:39:21:fe:06:d1:31:19:f9:d7:6e:43:ad:5d:19:22: 60:31:47:00:d0:d0:72:b7:ba:22:a4:81:41:cb:24:11:d4:05: 42:63:34:5c:c4:9f:bb:cf:ea:e0:01:2d:92:d7:9c:c4:ac:dc: 5a:6a:4e:01:ba:ae:2f:c3:f8:c9:80:f5:a6:4a:a1:e0:f2:ff: ef:12:06:5b:d9:f7:e1:01:ad:14:c6:5b:a9:1a:7e:52:75:96: 59:55:04:0c:c7:01:57:74:dc:d4:aa:ad:5c:03:19:cb:ff:9a: ed:da:6a:00:f0:4c:70:23:dd:32:8a:9c:59:ec:2b:9d:1d:ae: 6e:b9:3c:2e:23:ca:23:95:33:1d:8c:d6:7f:76:f2:e1:dc:81: 35:e9:23:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rXI2X/0LJHDQ7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NGJmODlkYjUtOTY5MC00NjYzLWE1ODMtYmZmNzk0NGUzMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/rZmfONXHqJRlqXybjJbGNzcAzKvgG8vmZa FGRraU2AqHl+bHWn50ZOu/M6/xwbP29APF4KT29ZuMUNaNpfr9iirIH12xrD0DOD yjkDXcgUwXtBhkXu/HxVbzocYbQHLBMaX2o1k3H+zAlzXIsgXIouPtEtRdSkcCMW jw/1X/JRrreNHKF5hTnVcb6Xh/El2SgtbvhaY1GptAfoVbTcXj8WksFNVk0OeXTl rfbNNZB2Jbdzdq+JNEsasLm58z+XPAdDGPwWv1BQv5raheQMnCZLu+f14zk9H801 GpiS3QmUHGtaj13X6OIqWAo7whopW3HgR0u9bj95M/U2Pl/a8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfxlQc9fiixR5Vg7xrAJMhRRBGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzQ0NGVmNzUtYzdlNC0z MjczLTgyOGUtMTNkYTkyZDc4NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFy0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANsDcGRPVCbw3hyhT5fl5lwYpJvS64d5/uNMUTE2aeM4w+eehvK6Sx+ 6IS4MLjWgPVCNoffzkU+K2zivUpb54Dmbh2s7Leo35zTO/ua6lpNQibekyBEnoMc ++gw2XZpIfI7PCntHXg9L4+fd/3MoDkh/gbRMRn5125DrV0ZImAxRwDQ0HK3uiKk gUHLJBHUBUJjNFzEn7vP6uABLZLXnMSs3FpqTgG6ri/D+MmA9aZKoeDy/+8SBlvZ 9+EBrRTGW6kaflJ1lllVBAzHAVd03NSqrVwDGcv/mu3aagDwTHAj3TKKnFnsK50d rm65PC4jyiOVMx2M1n928uHcgTXpI0s= -----END CERTIFICATE-----Generated at Tue Sep 22 21:12:14 2026 by rpki-client