$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa File: 429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa (raw, json) Hash identifier: a4+f3pMMrXLL1qDPeMcXXrOTBrlzRWA2ROrhLVnuuCQ= Subject key identifier: 51:28:DE:39:99:D0:5E:31:4C:A4:13:95:C5:BC:61:CD:F8:0B:06:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C8D87BC729BBB6A92C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 35994 IP address blocks: 23.39.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c8:d8:7b:c7:29:bb:b6:a9:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=336afd4e-d888-4e03-b7d0-0defd876fdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:46:10:ea:d9:b3:33:56:30:5b:8d:a0:b7: 40:f5:c3:db:9d:64:ed:b9:67:e1:b5:fc:8a:35:cb: cf:2d:9c:f9:a4:32:16:64:b3:65:5c:a3:e7:3d:ee: c3:c7:84:12:89:aa:3f:dc:0c:e3:6a:a0:fe:bb:61: f4:3d:50:d4:83:a3:52:f0:28:e6:c5:79:16:8e:cf: 70:78:42:63:21:79:bd:f0:79:66:9e:38:31:50:7a: 7c:0e:80:44:94:07:7c:da:12:11:5f:0b:54:4b:2e: 3d:1b:dd:3a:74:f3:f3:51:3f:8b:69:6d:ef:29:f9: 2a:c7:e3:4f:ad:61:e3:58:b5:36:61:1f:a9:42:1c: 63:e7:8a:ee:0b:89:94:1f:7b:70:d6:4a:dc:9a:50: 45:a8:85:28:17:28:fe:f0:70:bd:b6:cd:85:f4:da: cb:23:56:f8:f0:20:9f:de:b6:86:c2:b0:8c:3c:e4: 34:34:54:a5:2e:ce:34:7e:64:20:2e:83:37:86:93: 7a:52:d7:3d:28:58:10:9b:46:41:29:b0:f0:6c:6f: 2e:23:d2:6b:b3:61:9e:9c:3e:f1:9a:62:ab:f5:4b: c7:0a:e6:10:a9:82:60:76:93:97:5f:78:8d:e6:91: 90:6c:9b:f9:e8:49:e6:4a:56:78:ee:4a:3a:02:7f: e3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:28:DE:39:99:D0:5E:31:4C:A4:13:95:C5:BC:61:CD:F8:0B:06:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:42:c9:81:2a:b5:88:f2:63:29:a6:5f:80:f0:5c:32:9c:66: 48:6c:12:66:9d:d7:5f:2e:b4:4d:95:f9:a1:91:9b:84:73:ba: 66:7e:e6:15:1f:4c:37:55:7e:59:a9:69:16:85:c6:ea:c1:8f: 25:0b:f2:f5:db:cd:87:1a:d6:18:d0:34:fb:9f:fa:4b:42:65: 24:b1:31:60:be:b5:4c:48:5a:06:8b:94:3b:fe:25:e5:72:4f: ad:d5:1d:4b:42:0c:27:19:0a:f3:24:6c:69:46:56:67:91:31: 87:20:ac:bf:d9:05:46:ad:4b:a1:c0:3c:48:92:6c:7b:7e:2d: f5:b9:db:59:cf:92:29:bf:3a:f3:f5:41:2b:f7:1b:0e:45:06: d8:08:40:a3:26:20:c6:48:ca:8f:cc:86:22:85:24:9b:de:ca: 4b:07:46:00:7b:20:1c:bb:86:20:fc:5a:55:48:7c:e5:ed:7b: dc:83:80:a5:a1:40:0d:50:65:34:df:1d:c8:61:15:32:fa:16: 02:64:c6:36:01:50:bc:38:b6:5c:31:20:19:82:a3:04:0a:71: 2d:54:f5:e7:ad:d2:d4:4a:db:49:b2:cf:ae:a9:35:12:c7:24: ec:c6:a9:90:3f:c6:d4:c6:ba:07:2d:ee:46:dc:40:55:c5:5d: fa:7c:01:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98jYe8cpu7apLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MzM2YWZkNGUtZDg4OC00ZTAzLWI3ZDAtMGRlZmQ4NzZmZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhdGEOrZszNWMFuNoLdA9cPbnWTtuWfhtfyK NcvPLZz5pDIWZLNlXKPnPe7Dx4QSiao/3AzjaqD+u2H0PVDUg6NS8CjmxXkWjs9w eEJjIXm98HlmnjgxUHp8DoBElAd82hIRXwtUSy49G906dPPzUT+LaW3vKfkqx+NP rWHjWLU2YR+pQhxj54ruC4mUH3tw1krcmlBFqIUoFyj+8HC9ts2F9NrLI1b48CCf 3raGwrCMPOQ0NFSlLs40fmQgLoM3hpN6Utc9KFgQm0ZBKbDwbG8uI9Jrs2GenD7x mmKr9UvHCuYQqYJgdpOXX3iN5pGQbJv56EnmSlZ47ko6An/jpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEo3jmZ0F4xTKQTlcW8Yc34CwadMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDI5NDAxYTItYTczYi0z YmM1LTk2YjYtYjBkNzAxZTk1ZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVCyYEqtYjyYymmX4DwXDKcZkhsEmad118utE2V+aGRm4RzumZ+5hUf TDdVflmpaRaFxurBjyUL8vXbzYca1hjQNPuf+ktCZSSxMWC+tUxIWgaLlDv+JeVy T63VHUtCDCcZCvMkbGlGVmeRMYcgrL/ZBUatS6HAPEiSbHt+LfW521nPkim/OvP1 QSv3Gw5FBtgIQKMmIMZIyo/MhiKFJJveyksHRgB7IBy7hiD8WlVIfOXte9yDgKWh QA1QZTTfHchhFTL6FgJkxjYBULw4tlwxIBmCowQKcS1U9eet0tRK20myz66pNRLH JOzGqZA/xtTGugct7kbcQFXFXfp8ATs= -----END CERTIFICATE-----Generated at Tue Sep 22 18:16:28 2026 by rpki-client