$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b6cce81-ed62-36bf-bcbc-c8d9860b234f.roa File: 3b6cce81-ed62-36bf-bcbc-c8d9860b234f.roa (raw, json) Hash identifier: AD4X3lK0q6tUvqXTu3cR7DacWSWiFZkv58JhtvoSeX4= Subject key identifier: 93:04:25:1E:4A:63:7A:D2:DC:7C:03:6A:8D:08:94:2F:73:76:91:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C8536458DDCDE09FB3B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b6cce81-ed62-36bf-bcbc-c8d9860b234f.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.35.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c8:53:64:58:dd:cd:e0:9f:b3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=10c7a8c2-7fd0-4aba-abdf-c4719d8335ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:89:b2:1c:90:90:12:d9:7d:50:bc:b6:43: 02:8f:d7:1c:5d:22:c4:bf:b7:ab:0b:72:68:7b:63: 3c:c8:a0:6c:0a:df:12:44:f2:d9:17:51:36:7c:f0: 30:37:ac:b8:2c:e9:73:2a:06:80:5e:90:a6:e5:d0: 21:12:de:b7:30:64:d4:d5:6c:c4:16:c7:41:9f:9a: 37:c1:01:19:83:81:cb:0e:7e:23:79:af:53:08:79: db:eb:d6:58:de:92:9d:ac:ee:a0:b2:5d:1b:42:37: 88:f1:61:ba:4c:17:61:42:0a:67:ff:6d:dc:cb:de: bc:27:fa:11:9a:97:e8:93:fd:07:36:4a:8e:6e:9d: 5c:0b:ea:8a:9b:3a:22:fe:77:db:45:8d:2c:b6:23: 4f:dc:9f:6d:b4:84:06:dc:91:6f:e8:64:ca:42:a7: b1:14:98:d2:f4:23:fe:71:54:48:fd:5f:5f:4e:57: cc:bf:51:ac:f0:c6:84:d3:8a:d8:f2:a5:a6:4f:be: 5a:e6:0a:17:9e:29:ea:5c:1b:db:5d:8f:a2:0a:63: 9f:60:b1:9e:c7:86:7d:dc:a8:b9:10:dc:44:15:2b: d3:10:94:3f:f4:da:e0:d7:31:4b:82:e9:8a:c4:85: 4e:e6:e9:c1:71:76:d4:cb:1e:71:6c:b1:ba:eb:aa: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:04:25:1E:4A:63:7A:D2:DC:7C:03:6A:8D:08:94:2F:73:76:91:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3b6cce81-ed62-36bf-bcbc-c8d9860b234f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:07:f5:27:20:1d:c8:09:7a:da:68:58:30:27:06:2f:03:9a: 56:9f:b5:7e:58:58:b0:d1:3b:fd:33:b1:23:3a:53:8c:95:70: 03:d6:f6:78:ea:ff:ed:7f:49:1f:1e:d6:a7:fe:3c:1c:91:d7: 38:aa:55:00:b0:79:05:84:f5:37:07:59:ac:f1:bc:d9:f4:f8: eb:df:a0:de:8c:79:4d:2c:77:6e:5a:74:ae:33:f4:c9:d8:db: 07:3e:66:30:31:d8:b6:46:00:79:0c:5c:08:3c:78:95:e2:52: 48:86:6e:95:07:55:2f:33:6c:3f:82:37:07:25:ad:72:eb:0f: b6:64:3d:01:7a:ea:7d:81:a6:3f:cd:e8:c8:03:a9:2a:fc:08: b8:84:27:25:46:ad:4f:9c:4a:1b:12:14:73:a1:d2:fd:b0:c5: 61:8a:7b:51:14:79:85:80:67:03:93:2c:ea:79:ec:ea:35:49: 86:a9:4d:df:74:9e:c7:69:c7:9d:f2:f9:6c:98:cb:89:6e:5c: 15:8e:4f:b5:34:82:cd:77:03:68:3d:7a:a1:55:a3:49:bd:b1: ab:69:66:38:c6:1a:95:28:4f:06:77:45:cc:4f:ca:5c:ba:9a: 83:31:97:8a:13:48:99:7d:64:dd:ab:95:0d:99:db:8d:a3:18: 8f:1d:69:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8hTZFjdzeCfs7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MTBjN2E4YzItN2ZkMC00YWJhLWFiZGYtYzQ3MTlkODMzNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bCJshyQkBLZfVC8tkMCj9ccXSLEv7erC3Jo e2M8yKBsCt8SRPLZF1E2fPAwN6y4LOlzKgaAXpCm5dAhEt63MGTU1WzEFsdBn5o3 wQEZg4HLDn4jea9TCHnb69ZY3pKdrO6gsl0bQjeI8WG6TBdhQgpn/23cy968J/oR mpfok/0HNkqObp1cC+qKmzoi/nfbRY0stiNP3J9ttIQG3JFv6GTKQqexFJjS9CP+ cVRI/V9fTlfMv1Gs8MaE04rY8qWmT75a5goXninqXBvbXY+iCmOfYLGex4Z93Ki5 ENxEFSvTEJQ/9Nrg1zFLgumKxIVO5unBcXbUyx5xbLG666qbjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMEJR5KY3rS3HwDao0IlC9zdpHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2I2Y2NlODEtZWQ2Mi0z NmJmLWJjYmMtYzhkOTg2MGIyMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEH9ScgHcgJetpoWDAnBi8DmlaftX5YWLDRO/0zsSM6U4yVcAPW9njq /+1/SR8e1qf+PByR1ziqVQCweQWE9TcHWazxvNn0+OvfoN6MeU0sd25adK4z9MnY 2wc+ZjAx2LZGAHkMXAg8eJXiUkiGbpUHVS8zbD+CNwclrXLrD7ZkPQF66n2Bpj/N 6MgDqSr8CLiEJyVGrU+cShsSFHOh0v2wxWGKe1EUeYWAZwOTLOp57Oo1SYapTd90 nsdpx53y+WyYy4luXBWOT7U0gs13A2g9eqFVo0m9satpZjjGGpUoTwZ3RcxPyly6 moMxl4oTSJl9ZN2rlQ2Z242jGI8daeE= -----END CERTIFICATE-----Generated at Tue Sep 22 05:16:27 2026 by rpki-client