$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5087673f-1128-3860-b2b2-2179665b3bc2.roa File: 5087673f-1128-3860-b2b2-2179665b3bc2.roa (raw, json) Hash identifier: a3IwEIzHMmKk03MFmqlU0FWqWoOu0FhglTrXGSgdC/I= Subject key identifier: 1D:33:C8:2C:18:F0:A9:64:FF:EC:19:FE:D5:CE:A7:D5:DE:28:30:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F2957B591DE990B75F8A61F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5087673f-1128-3860-b2b2-2179665b3bc2.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 4775 IP address blocks: 23.210.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b5:91:de:99:0b:75:f8:a6:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=7a5effae-eb38-4ee2-a989-9b6cd375e2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:e7:f3:01:1c:71:2c:0b:ad:71:b3:10:ed: ac:c1:c2:48:8e:49:9f:f3:80:0c:6e:23:e8:d8:dd: 9f:58:c7:8e:ac:c1:a0:cc:f8:e0:02:33:ff:32:b0: fa:47:75:1e:71:94:e2:e5:cb:25:24:e7:e0:20:63: 92:93:e0:12:e7:0d:33:1d:fb:04:0d:32:24:57:5f: fc:fd:87:7b:d6:46:b0:36:24:f0:23:70:a7:54:03: 62:1a:83:84:46:c7:c9:15:af:75:6e:eb:7b:e2:54: 3d:49:ed:30:2e:7e:b1:48:39:39:49:07:29:88:51: 48:ae:72:c9:57:ac:75:20:d2:75:47:42:58:27:d1: 05:c0:aa:d0:e1:41:57:81:8d:02:5e:c2:6c:34:60: 57:22:eb:0e:df:15:56:aa:c8:df:70:74:ae:1b:e7: 8a:2e:db:20:cb:af:65:7c:ee:88:f1:4b:c1:a5:49: ab:b6:60:56:c0:b7:57:7b:19:73:dc:2e:de:22:5a: 55:4a:31:d4:ec:83:94:b5:36:a4:65:50:8c:12:d0: 96:ae:84:f4:e9:07:5c:48:2e:ee:dc:d1:ca:ab:47: e2:4b:04:1d:37:d8:16:eb:48:8f:36:e8:c4:5b:3d: f6:e8:1c:71:9f:35:07:78:2f:74:c9:b2:78:6a:c5: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:33:C8:2C:18:F0:A9:64:FF:EC:19:FE:D5:CE:A7:D5:DE:28:30:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5087673f-1128-3860-b2b2-2179665b3bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ec:44:0d:2e:7e:cb:95:9c:29:2f:f6:f0:8b:39:48:a4:6a: 2b:94:3b:89:34:a3:9e:c8:07:6b:85:af:4c:bf:52:85:49:b5: 74:c4:7d:6f:2a:34:33:e0:68:85:f0:79:4a:7e:85:8a:a9:d1: 4a:28:6b:83:bc:ec:14:ef:eb:62:48:83:89:bd:4f:13:b5:ac: 02:7d:7c:f4:0b:de:34:85:66:ef:c8:a1:f8:3e:83:0f:0c:48: 90:1e:5a:85:03:bd:97:e0:9a:04:7b:62:42:57:4f:18:de:f7: 0b:1b:e4:3b:57:04:c4:77:15:c9:62:23:12:5b:f0:0e:a8:bc: 44:55:74:c4:9d:6a:f2:68:6c:c6:16:ef:44:a3:0b:67:54:50: 03:7d:ae:ad:1a:61:a3:e7:fe:20:06:cd:da:2d:59:c9:ec:47: f0:06:26:7a:4e:48:dc:3d:df:9a:5d:d8:57:c6:e6:a8:68:df: 4f:dc:74:52:c5:71:6c:0a:ca:8e:e0:e6:20:4c:80:13:7b:d4: a4:0b:a9:38:39:af:34:77:ed:32:ec:eb:0d:13:71:06:87:93: 18:0d:f1:17:47:14:b8:ed:56:51:dd:7c:f0:6c:22:dc:1e:73: c9:4c:87:df:b0:ed:ba:2c:c6:81:25:0b:14:25:b8:ef:60:e4: 4a:fd:36:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7WR3pkLdfimH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk N2E1ZWZmYWUtZWIzOC00ZWUyLWE5ODktOWI2Y2QzNzVlMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbvn8wEccSwLrXGzEO2swcJIjkmf84AMbiPo 2N2fWMeOrMGgzPjgAjP/MrD6R3UecZTi5cslJOfgIGOSk+AS5w0zHfsEDTIkV1/8 /Yd71kawNiTwI3CnVANiGoOERsfJFa91but74lQ9Se0wLn6xSDk5SQcpiFFIrnLJ V6x1INJ1R0JYJ9EFwKrQ4UFXgY0CXsJsNGBXIusO3xVWqsjfcHSuG+eKLtsgy69l fO6I8UvBpUmrtmBWwLdXexlz3C7eIlpVSjHU7IOUtTakZVCMEtCWroT06QdcSC7u 3NHKq0fiSwQdN9gW60iPNujEWz326BxxnzUHeC90ybJ4asXtHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0zyCwY8Klk/+wZ/tXOp9XeKDDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTA4NzY3M2YtMTEyOC0z ODYwLWIyYjItMjE3OTY2NWIzYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9LEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnsRA0ufsuVnCkv9vCLOUikaiuUO4k0o57IB2uFr0y/UoVJtXTEfW8q NDPgaIXweUp+hYqp0Uooa4O87BTv62JIg4m9TxO1rAJ9fPQL3jSFZu/Iofg+gw8M SJAeWoUDvZfgmgR7YkJXTxje9wsb5DtXBMR3FcliIxJb8A6ovERVdMSdavJobMYW 70SjC2dUUAN9rq0aYaPn/iAGzdotWcnsR/AGJnpOSNw935pd2FfG5qho30/cdFLF cWwKyo7g5iBMgBN71KQLqTg5rzR37TLs6w0TcQaHkxgN8RdHFLjtVlHdfPBsItwe c8lMh9+w7bosxoElCxQluO9g5Er9NpQ= -----END CERTIFICATE-----Generated at Tue Sep 22 22:57:42 2026 by rpki-client