$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa File: 487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa (raw, json) Hash identifier: GEtzMho6hivaK5l4Lxnb+c1oQmeHNDgl8NXTYJcUZuQ= Subject key identifier: 68:49:FF:E5:7A:E9:56:F5:E1:15:17:1D:E7:DE:25:9A:32:D8:24:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F8F58A82333A23ED4C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.38.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f8:f5:8a:82:33:3a:23:ed:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=a40d5c6c-29d2-474c-b527-3cd726e9d12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:65:8f:92:d9:ab:7d:e7:ea:07:28:88:24: 9d:eb:7e:21:13:92:e2:c0:b0:32:8a:05:ae:44:0d: 17:96:54:f3:c4:0a:12:2a:24:7b:85:a1:f5:89:c2: 27:5d:95:9c:3f:ee:d6:ab:fc:74:a6:30:34:a4:b2: 61:89:28:e4:e7:df:4d:34:dd:d0:ba:4f:22:0c:65: cd:b6:8f:ba:c7:37:07:2b:ac:2c:d0:c4:6f:71:52: f5:22:41:de:b6:0e:b8:12:c4:0e:c9:ba:0b:6b:d4: 0f:8d:37:16:4d:a7:c5:61:04:b0:02:ae:ea:bd:6b: 7e:e2:3a:33:21:dd:31:9d:4d:7b:92:fb:3f:cd:5f: c4:15:f1:e2:bd:da:a9:15:47:9a:3f:c2:2a:ed:b8: cf:6d:f3:ee:e4:74:db:01:ef:11:d1:00:e7:d2:4b: fd:be:c9:eb:f4:48:99:38:eb:7f:db:32:1d:45:a1: e8:af:74:f4:d4:57:69:c7:55:c0:f2:d9:f9:1d:f6: 71:af:aa:3e:65:48:5d:1b:1f:a5:6d:51:76:c3:41: 34:4f:8f:27:06:80:6b:f0:81:af:32:95:32:0b:f8: 1b:85:5b:ad:7f:0c:8e:28:d4:d8:3a:c2:52:51:fa: bb:2f:d5:ee:a3:9c:ac:46:14:b0:39:82:4f:e1:40: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:49:FF:E5:7A:E9:56:F5:E1:15:17:1D:E7:DE:25:9A:32:D8:24:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ad:6b:ac:fe:ac:37:b0:2a:4e:18:3a:2b:f1:3f:67:41:3b: d1:ac:b6:7e:e3:f1:55:d3:78:e3:27:64:32:dd:c1:34:fd:d5: 7c:79:99:ff:53:0e:30:43:bc:fd:c6:a9:cf:e3:82:62:77:07: b2:5c:f6:74:7f:d5:61:48:52:f1:9c:d0:e0:57:36:41:92:89: f8:17:7c:45:d3:da:b4:d8:11:55:72:8e:40:43:0f:88:56:89: 28:30:f5:c2:f7:98:00:70:b7:2c:e7:7b:8a:de:98:f0:a4:f6: e2:75:af:c6:fe:74:77:8e:e4:46:1c:c6:c7:17:d2:40:24:17: d9:23:c1:5f:68:92:f8:e4:71:ed:51:e5:b5:88:b9:a6:a0:6e: 8a:1e:fa:c4:bf:1a:d4:98:d5:50:70:ab:f9:1c:78:07:c4:c6: c9:92:9f:4e:7e:51:06:5b:45:d3:22:44:12:98:b4:1b:28:0c: 06:45:02:fc:7b:16:d6:6b:69:1e:80:2d:2a:a6:e8:38:2d:8a: 9a:88:f9:1c:01:5c:44:e3:84:e0:9a:eb:a2:86:37:36:48:38: ba:ae:e1:1b:a2:aa:ee:73:2f:58:90:87:30:72:7d:bc:09:c9: c9:8a:75:1b:c6:b2:b8:07:e6:2a:3d:d8:89:ef:d3:fa:00:8b: 6b:97:95:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/j1ioIzOiPtTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YTQwZDVjNmMtMjlkMi00NzRjLWI1MjctM2NkNzI2ZTlkMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+plj5LZq33n6gcoiCSd634hE5LiwLAyigWu RA0XllTzxAoSKiR7haH1icInXZWcP+7Wq/x0pjA0pLJhiSjk599NNN3Quk8iDGXN to+6xzcHK6ws0MRvcVL1IkHetg64EsQOyboLa9QPjTcWTafFYQSwAq7qvWt+4joz Id0xnU17kvs/zV/EFfHivdqpFUeaP8Iq7bjPbfPu5HTbAe8R0QDn0kv9vsnr9EiZ OOt/2zIdRaHor3T01Fdpx1XA8tn5HfZxr6o+ZUhdGx+lbVF2w0E0T48nBoBr8IGv MpUyC/gbhVutfwyOKNTYOsJSUfq7L9Xuo5ysRhSwOYJP4UA5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhJ/+V66Vb14RUXHefeJZoy2CTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDg3ZjBhNTctZTlkNS0z YWQ3LWJiZTQtMDdlYTM4YTE1YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeta6z+rDewKk4YOivxP2dBO9Gstn7j8VXTeOMnZDLdwTT91Xx5mf9T DjBDvP3Gqc/jgmJ3B7Jc9nR/1WFIUvGc0OBXNkGSifgXfEXT2rTYEVVyjkBDD4hW iSgw9cL3mABwtyzne4remPCk9uJ1r8b+dHeO5EYcxscX0kAkF9kjwV9okvjkce1R 5bWIuaagbooe+sS/GtSY1VBwq/kceAfExsmSn05+UQZbRdMiRBKYtBsoDAZFAvx7 FtZraR6ALSqm6DgtipqI+RwBXETjhOCa66KGNzZIOLqu4Ruiqu5zL1iQhzByfbwJ ycmKdRvGsrgH5io92Inv0/oAi2uXlR4= -----END CERTIFICATE-----Generated at Tue Sep 22 10:31:56 2026 by rpki-client