$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa File: 3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa (raw, json) Hash identifier: p+OxJWEH9uf9xGZathhoM9JufeDw0FYHSvfIc9tEohg= Subject key identifier: F6:DC:F4:DA:DB:B6:42:1A:13:00:FF:B0:F4:12:F2:BE:12:3E:B2:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F235DA6BE5D8B994F600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.39.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f2:35:da:6b:e5:d8:b9:94:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=4baa0927-94d1-4457-aa9b-8213d341ff0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bf:0c:46:a9:14:ba:50:3f:24:d5:55:f6:c3: 80:3f:32:1f:94:38:08:8f:db:af:7f:86:86:7c:b6: 16:a3:fc:de:7b:66:44:c0:1a:1a:31:cf:19:c1:d2: 61:7b:1e:0c:1e:0d:34:9d:9e:cf:5a:4c:ea:7f:99: 6e:6f:0a:ad:93:0f:df:43:c5:f1:26:f7:8b:be:a0: d1:0f:ac:bd:24:1a:bf:cc:c4:3e:67:af:17:5d:c5: 21:09:62:83:5a:1b:54:0b:9a:5d:8d:e2:8b:b5:66: 25:12:1f:ee:09:de:25:48:33:93:ae:ff:9f:0f:b4: e4:bc:07:af:b1:53:2a:5d:57:82:a4:5d:e7:8d:10: 3c:aa:9d:dc:c8:c5:20:5f:32:d4:72:05:61:6c:25: ed:1e:e9:79:21:0d:71:bd:94:9a:90:5f:0e:c4:19: 91:8e:5d:e1:a8:f8:c5:37:df:57:ad:6f:6c:80:47: db:0f:4c:e6:0d:e8:87:3e:f0:54:b5:f0:a8:bd:59: 54:b4:41:3c:b5:3e:bc:cb:1d:87:a3:68:bc:14:8e: a7:72:0f:aa:83:8a:32:6e:90:54:26:b0:97:c4:79: 57:7d:59:3d:6d:e2:76:c3:92:cd:d8:44:37:85:c7: 81:d3:e5:c3:74:15:1e:20:a7:15:81:0b:d4:98:10: d0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DC:F4:DA:DB:B6:42:1A:13:00:FF:B0:F4:12:F2:BE:12:3E:B2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ddb15ef-d8a8-3728-a764-4dca8b9260f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:50:bd:a6:e1:89:27:3f:f3:00:f2:dd:00:8b:ee:89:48:07: 36:ef:45:9a:4b:39:df:2e:b9:8b:aa:a1:ec:2e:e5:fc:6b:e4: 9a:46:47:e2:9c:0c:89:a8:36:7f:51:fc:b1:fa:f7:e9:f6:da: 10:f7:b4:06:fb:33:43:82:05:d6:81:3e:b9:02:f9:07:98:06: cd:d3:de:ef:fa:bb:af:fa:66:02:48:42:12:d3:c8:e3:28:1b: 24:a3:cc:85:d4:05:1a:d9:45:1b:47:cb:45:c2:14:1e:44:ad: e2:06:2a:c7:fa:cb:9f:6e:d5:d4:a8:2a:72:c3:96:65:bf:53: 1f:a2:ac:33:72:94:08:22:e4:e7:03:43:8b:13:7d:e2:a8:30: 59:3a:f4:b4:72:64:75:52:38:11:06:33:0b:cd:45:58:ce:f2: 75:e8:3b:7e:94:a0:f3:e2:4f:0c:bb:07:21:cf:01:64:f0:0f: e2:3f:3f:4f:3f:58:e8:5f:36:9f:32:7b:f7:ee:15:1b:3c:4e: b2:0b:09:aa:69:e8:f9:54:a1:fa:29:d8:0a:1c:b7:80:ca:f0: f0:ce:de:30:0e:4f:6e:83:58:14:4f:c7:a8:27:b3:fe:1c:76: ee:18:e0:ab:d0:1f:ed:15:a7:b9:e8:3d:a2:4c:7a:7f:17:8d: 5c:11:53:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/I12mvl2LmU9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NGJhYTA5MjctOTRkMS00NDU3LWFhOWItODIxM2QzNDFmZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL8MRqkUulA/JNVV9sOAPzIflDgIj9uvf4aG fLYWo/zee2ZEwBoaMc8ZwdJhex4MHg00nZ7PWkzqf5lubwqtkw/fQ8XxJveLvqDR D6y9JBq/zMQ+Z68XXcUhCWKDWhtUC5pdjeKLtWYlEh/uCd4lSDOTrv+fD7TkvAev sVMqXVeCpF3njRA8qp3cyMUgXzLUcgVhbCXtHul5IQ1xvZSakF8OxBmRjl3hqPjF N99XrW9sgEfbD0zmDeiHPvBUtfCovVlUtEE8tT68yx2Ho2i8FI6ncg+qg4oybpBU JrCXxHlXfVk9beJ2w5LN2EQ3hceB0+XDdBUeIKcVgQvUmBDQDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbc9NrbtkIaEwD/sPQS8r4SPrIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RkYjE1ZWYtZDhhOC0z NzI4LWE3NjQtNGRjYThiOTI2MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5QvabhiSc/8wDy3QCL7olIBzbvRZpLOd8uuYuqoewu5fxr5JpGR+Kc DImoNn9R/LH69+n22hD3tAb7M0OCBdaBPrkC+QeYBs3T3u/6u6/6ZgJIQhLTyOMo GySjzIXUBRrZRRtHy0XCFB5EreIGKsf6y59u1dSoKnLDlmW/Ux+irDNylAgi5OcD Q4sTfeKoMFk69LRyZHVSOBEGMwvNRVjO8nXoO36UoPPiTwy7ByHPAWTwD+I/P08/ WOhfNp8ye/fuFRs8TrILCapp6PlUofop2Aoct4DK8PDO3jAOT26DWBRPx6gns/4c du4Y4KvQH+0Vp7noPaJMen8XjVwRU9A= -----END CERTIFICATE-----Generated at Wed Sep 23 10:22:26 2026 by rpki-client