$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5758ae20-60b3-3fbf-9a64-b1cae3afd0da.roa File: 5758ae20-60b3-3fbf-9a64-b1cae3afd0da.roa (raw, json) Hash identifier: TTiFOS1uSX5yWBXViq+u4WvCEr6C2LmIMv7G1uNxuL0= Subject key identifier: 07:6B:B7:43:C5:85:F3:5D:BF:42:B2:73:B5:F6:BD:4C:37:A0:3B:1A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F30528337CD9C24635EAB9C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5758ae20-60b3-3fbf-9a64-b1cae3afd0da.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.32.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:83:37:cd:9c:24:63:5e:ab:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=e5bfc262-7a99-4bed-b8d6-336c70294152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:11:55:a0:69:c2:dc:d6:3a:d7:db:49:b4: f0:b1:b7:ea:b1:6a:40:66:bd:45:6f:f1:f7:45:0c: 77:0d:0b:42:2d:d0:9f:b6:7f:2e:72:0f:ac:5b:1b: 83:d1:09:46:42:7d:45:66:7d:3b:81:28:ad:d1:96: 5e:33:82:45:7c:be:27:fa:50:bc:c0:1d:5d:ba:5b: ed:f8:b3:45:30:37:f5:4e:1c:5d:b3:6d:57:15:0d: 3a:00:b3:c9:8a:c4:41:2c:ee:e5:51:6c:ef:d0:10: 07:c6:cf:dd:f8:a0:41:ef:1f:c5:84:21:ec:46:3c: 05:6e:73:15:c7:99:d1:c3:8f:6a:a8:cf:4a:59:23: 28:a5:e4:45:f0:a9:26:83:67:9d:ee:54:56:93:18: c9:aa:ea:30:6e:88:9e:d6:e2:45:3e:5b:6b:1f:9c: 95:10:1d:27:e7:d7:ba:c7:c2:a1:91:4f:a2:12:91: df:1d:fd:58:82:06:36:da:99:df:0e:17:4a:67:15: 41:62:ce:8f:da:52:4d:50:d9:d3:b6:18:ae:4f:99: 56:00:4c:41:66:1b:7e:1b:01:d2:5a:8d:05:58:af: d3:4c:2d:e2:6f:9f:53:59:60:5a:4b:e4:bd:bc:0f: 51:1c:d2:e8:d1:5e:b3:5f:8b:45:85:00:31:d1:67: 4d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6B:B7:43:C5:85:F3:5D:BF:42:B2:73:B5:F6:BD:4C:37:A0:3B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5758ae20-60b3-3fbf-9a64-b1cae3afd0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7d:d1:ba:5a:43:69:9b:ef:f7:76:f9:08:61:b3:93:ba:16: 5b:b1:9e:cc:a8:58:34:d7:ff:dd:f4:32:de:df:9a:98:96:7b: d2:69:c4:17:47:b3:80:a5:1c:49:2d:12:1e:79:48:30:23:ef: 54:22:5a:c0:f8:95:8e:e8:c1:10:72:b3:fc:3d:7a:ff:4b:19: 0b:b3:e8:7d:2d:e2:74:50:30:3e:3a:4b:bb:c0:fe:9d:e3:9f: c0:f5:af:41:bf:62:f3:e4:92:14:c3:8c:b2:34:46:f3:e4:98: 78:46:15:61:27:a3:dd:ae:56:2d:be:66:15:34:80:35:67:96: d1:0d:7d:25:e7:05:63:cf:0f:f1:5a:84:0e:9c:57:dc:0f:72: 1c:88:ee:d4:72:76:c7:0d:bf:c5:fc:8e:59:6e:f9:ba:08:06: fe:f7:40:4b:64:23:d7:2a:82:a8:44:16:ac:c0:b2:8a:7c:68: 37:da:f1:c7:d2:15:71:3a:83:7d:82:4d:da:e4:30:21:e2:30: 76:f2:31:fe:6b:88:0b:99:85:fd:56:86:d2:1a:fe:38:43:ba: f7:19:24:76:c0:77:fc:6c:82:3c:bf:86:c6:c0:cb:45:e8:dc: 34:8e:04:fc:0c:fb:98:78:e4:19:f9:12:db:22:00:ce:34:00: dd:26:d7:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoM3zZwkY16rnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZTViZmMyNjItN2E5OS00YmVkLWI4ZDYtMzM2YzcwMjk0MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwYRVaBpwtzWOtfbSbTwsbfqsWpAZr1Fb/H3 RQx3DQtCLdCftn8ucg+sWxuD0QlGQn1FZn07gSit0ZZeM4JFfL4n+lC8wB1dulvt +LNFMDf1Thxds21XFQ06ALPJisRBLO7lUWzv0BAHxs/d+KBB7x/FhCHsRjwFbnMV x5nRw49qqM9KWSMopeRF8Kkmg2ed7lRWkxjJquowboie1uJFPltrH5yVEB0n59e6 x8KhkU+iEpHfHf1YggY22pnfDhdKZxVBYs6P2lJNUNnTthiuT5lWAExBZht+GwHS Wo0FWK/TTC3ib59TWWBaS+S9vA9RHNLo0V6zX4tFhQAx0WdNaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdrt0PFhfNdv0Kyc7X2vUw3oDsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc1OGFlMjAtNjBiMy0z ZmJmLTlhNjQtYjFjYWUzYWZkMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyCIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl90bpaQ2mb7/d2+Qhhs5O6FluxnsyoWDTX/930Mt7fmpiWe9JpxBdH s4ClHEktEh55SDAj71QiWsD4lY7owRBys/w9ev9LGQuz6H0t4nRQMD46S7vA/p3j n8D1r0G/YvPkkhTDjLI0RvPkmHhGFWEno92uVi2+ZhU0gDVnltENfSXnBWPPD/Fa hA6cV9wPchyI7tRydscNv8X8jllu+boIBv73QEtkI9cqgqhEFqzAsop8aDfa8cfS FXE6g32CTdrkMCHiMHbyMf5riAuZhf1WhtIa/jhDuvcZJHbAd/xsgjy/hsbAy0Xo 3DSOBPwM+5h45Bn5EtsiAM40AN0m1xg= -----END CERTIFICATE-----Generated at Tue Sep 22 10:38:52 2026 by rpki-client