$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa File: 5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa (raw, json) Hash identifier: LojE6q4vCq44Nm/Q7DWKD6HGUUJLS3Y5zUycbWDwJfY= Subject key identifier: 46:BB:8F:66:F2:DC:DC:44:FA:66:07:2A:02:22:B9:4A:EA:95:21:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C823B7BD1341DCBF2000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.35.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c8:23:b7:bd:13:41:dc:bf:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=284414c1-b844-4db4-8db1-b49e08d9b763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:e7:be:f6:0a:78:5a:c3:1d:62:a9:bb:41: 80:4b:2f:2d:2e:3f:ab:b1:98:09:c1:1f:05:6a:dd: 25:4d:a5:82:8d:fe:76:99:89:5c:a5:25:2d:38:73: 83:93:64:3f:d7:0c:fa:16:25:43:4f:cb:32:73:bc: bd:f1:c6:95:13:de:ec:9d:51:95:16:70:35:4f:74: cb:cb:c3:a8:b5:5c:86:e6:65:56:03:cb:d1:6d:82: 49:10:55:3d:e6:84:24:77:4f:b5:0d:3b:9f:18:ea: 2a:3b:94:97:78:33:4b:d8:d1:e1:58:d6:1f:8a:39: dc:63:6d:6c:64:8b:51:0e:4c:71:06:45:88:b3:c1: cd:5b:b1:84:91:dd:64:fa:53:9d:29:11:23:80:37: 35:a1:6a:00:e2:c9:55:be:af:05:54:e7:53:9f:b0: 53:cd:40:b7:e5:28:3b:e4:de:94:0c:e8:00:1d:7f: 5f:04:2b:f1:81:60:96:a1:c8:d1:15:e6:38:81:1b: 12:82:13:64:2e:65:4d:3a:e4:21:64:da:28:ec:6b: 16:71:5f:fb:ee:f5:d0:60:d8:82:2a:70:cd:c8:3f: 5e:4c:d2:e2:ee:d6:e6:e3:33:00:81:55:7f:d7:a1: 76:62:37:61:25:6d:dc:0f:c5:92:a4:54:93:70:d6: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BB:8F:66:F2:DC:DC:44:FA:66:07:2A:02:22:B9:4A:EA:95:21:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1b:0b:46:60:2f:c7:64:41:c2:1a:2a:16:4e:a5:6c:a9:fe: 18:de:c2:40:b5:85:dc:cb:f3:46:b5:fe:17:a1:79:58:b9:e6: 9d:5e:e8:7f:41:30:8d:63:84:99:53:40:09:e8:c8:57:cf:b1: 26:72:27:22:31:6f:4d:57:c9:e1:e5:91:48:0e:16:e6:99:d7: 46:20:3f:4a:a7:7d:a9:92:b7:36:96:f8:e9:35:fe:5e:e5:a8: f6:00:a4:0a:f7:1f:cd:03:c0:1e:bb:ab:f8:d2:c3:bb:65:99: 6f:81:e6:1c:95:f8:68:cd:9f:65:df:cf:49:6b:d6:6b:67:2c: 1a:28:db:17:b3:4d:97:ba:92:c8:2f:a7:45:6e:40:04:f0:0e: ce:75:fd:af:4b:e9:46:43:e4:77:3a:dc:c2:ac:00:08:f4:fa: eb:0a:a8:49:b8:5c:39:b7:3e:b8:42:e6:5d:ae:1e:51:f3:46: c5:0b:f7:45:68:e1:59:fe:d9:f9:25:b9:a7:d0:bd:c2:48:16: 1c:ea:5c:51:5f:60:f3:60:4d:c7:d9:b2:c6:2b:0d:71:d4:19: 3d:25:ff:47:35:ef:56:bc:a9:25:28:a8:aa:53:6b:ca:0d:b2: 34:b4:eb:3a:21:e9:24:9c:d0:b6:60:24:48:bd:88:08:a2:1e: 3a:b3:1e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8gjt70TQdy/IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk Mjg0NDE0YzEtYjg0NC00ZGI0LThkYjEtYjQ5ZTA4ZDliNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbjnvvYKeFrDHWKpu0GASy8tLj+rsZgJwR8F at0lTaWCjf52mYlcpSUtOHODk2Q/1wz6FiVDT8syc7y98caVE97snVGVFnA1T3TL y8OotVyG5mVWA8vRbYJJEFU95oQkd0+1DTufGOoqO5SXeDNL2NHhWNYfijncY21s ZItRDkxxBkWIs8HNW7GEkd1k+lOdKREjgDc1oWoA4slVvq8FVOdTn7BTzUC35Sg7 5N6UDOgAHX9fBCvxgWCWocjRFeY4gRsSghNkLmVNOuQhZNoo7GsWcV/77vXQYNiC KnDNyD9eTNLi7tbm4zMAgVV/16F2YjdhJW3cD8WSpFSTcNa2JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa7j2by3NxE+mYHKgIiuUrqlSGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ1MTE0ZWEtMjBiMS0z MjIzLTg0ZGUtZDlhNWQzY2ZhMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyNBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4bC0ZgL8dkQcIaKhZOpWyp/hjewkC1hdzL80a1/heheVi55p1e6H9B MI1jhJlTQAnoyFfPsSZyJyIxb01XyeHlkUgOFuaZ10YgP0qnfamStzaW+Ok1/l7l qPYApAr3H80DwB67q/jSw7tlmW+B5hyV+GjNn2Xfz0lr1mtnLBoo2xezTZe6ksgv p0VuQATwDs51/a9L6UZD5Hc63MKsAAj0+usKqEm4XDm3PrhC5l2uHlHzRsUL90Vo 4Vn+2fkluafQvcJIFhzqXFFfYPNgTcfZssYrDXHUGT0l/0c171a8qSUoqKpTa8oN sjS06zoh6SSc0LZgJEi9iAiiHjqzHsw= -----END CERTIFICATE-----Generated at Tue Sep 22 13:22:30 2026 by rpki-client