$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/643b4633-a606-3854-b152-66f4818490a3.roa File: 643b4633-a606-3854-b152-66f4818490a3.roa (raw, json) Hash identifier: tG0y3Lzd0FlLOkkJ+AzJz0txLlLmFjaH4iVyBBlZSCo= Subject key identifier: 26:98:8C:D0:5E:7C:3F:32:7F:67:5E:39:62:06:C6:0F:09:CD:A0:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F305282CD8EC500E5E05C4BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/643b4633-a606-3854-b152-66f4818490a3.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.32.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:82:cd:8e:c5:00:e5:e0:5c:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=fb4c8fdb-45d5-40c2-a3fd-e268db24aa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:26:63:ff:c4:d9:86:2d:d4:c8:09:8d:3d: 04:9f:2e:f2:86:58:8e:87:04:fe:e3:41:4b:ad:e9: a3:29:45:21:9a:49:ee:1a:fe:fb:f9:16:a0:d8:21: 2c:71:be:e7:a1:92:ea:ce:dc:02:f0:64:01:d8:64: 07:d5:2b:de:3c:83:9e:32:37:11:67:5c:6a:25:0d: 4e:0d:3f:36:17:c7:60:6c:f8:b2:20:bc:44:cf:22: f2:d2:7e:4a:f3:09:6b:a8:d8:24:0b:2b:df:06:43: 3c:c8:d4:58:b2:da:ea:2f:d8:74:68:a9:b0:0c:74: 4b:29:89:3e:3b:66:3d:79:7a:be:bc:0e:79:c0:cd: 94:af:97:f0:b0:43:16:64:2c:17:64:ad:37:2a:24: ed:77:de:81:b4:ab:97:7f:d7:d9:6c:7c:76:f5:f9: ae:a9:bc:8b:fd:4f:2b:83:d6:9b:e8:02:bc:d7:2e: 08:4b:ff:bf:5c:cc:b2:14:30:bf:bf:be:31:1d:4d: 04:e2:7f:79:79:19:9f:20:47:b6:a8:df:e5:ae:9b: c4:1c:f2:63:4e:4d:d6:a9:49:44:a9:27:34:95:9d: bf:b5:5b:52:1a:34:da:3f:a6:b1:91:e8:bc:c7:0a: fa:8c:f5:0e:b7:47:e4:00:bd:19:46:b2:5f:bc:96: 29:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:98:8C:D0:5E:7C:3F:32:7F:67:5E:39:62:06:C6:0F:09:CD:A0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/643b4633-a606-3854-b152-66f4818490a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ab:d3:ce:ea:d5:87:54:39:b4:ef:8c:bb:d8:9b:d9:71:5f: 4b:9c:2e:d3:d0:3d:af:2f:df:34:b3:c8:86:32:15:63:46:96: 89:dc:81:2c:1c:39:3a:77:96:c8:54:56:58:c9:d8:c6:46:7a: 5c:d2:94:71:af:57:3c:d6:4b:f0:d5:e8:14:31:2c:98:55:5a: 55:2d:e8:eb:d4:4b:f9:16:90:2c:83:a8:ec:f6:fb:eb:51:39: bb:03:d0:5e:9f:a8:45:e0:b6:ab:f6:5e:04:33:a1:1e:a0:f4: 49:fb:f3:21:81:53:8d:d5:83:df:21:36:d7:98:84:a2:47:09: a7:77:d2:45:36:03:42:52:f1:6d:0e:20:a8:4b:f9:88:0f:0f: d2:bc:c8:51:fe:d7:a2:1d:8a:3d:41:5b:b4:cc:c3:a6:31:15: e0:46:e0:06:9c:7d:d4:dc:05:d3:14:fa:ee:30:62:17:7e:1a: 80:59:4c:98:77:d6:8e:24:2c:8e:b5:21:90:53:39:5e:02:ca: dc:1c:a9:4d:62:d4:d1:ef:ad:69:b9:65:94:6c:71:61:10:12: 37:ca:ce:8c:0f:c9:05:43:2f:2a:35:73:45:70:f9:e1:2e:c1: cb:68:47:bc:cd:47:3a:a7:ea:a6:e8:62:ba:c5:37:8f:91:4a: 7b:14:96:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoLNjsUA5eBcS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZmI0YzhmZGItNDVkNS00MGMyLWEzZmQtZTI2OGRiMjRhYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGQmY//E2YYt1MgJjT0Eny7yhliOhwT+40FL remjKUUhmknuGv77+Rag2CEscb7noZLqztwC8GQB2GQH1SvePIOeMjcRZ1xqJQ1O DT82F8dgbPiyILxEzyLy0n5K8wlrqNgkCyvfBkM8yNRYstrqL9h0aKmwDHRLKYk+ O2Y9eXq+vA55wM2Ur5fwsEMWZCwXZK03KiTtd96BtKuXf9fZbHx29fmuqbyL/U8r g9ab6AK81y4IS/+/XMyyFDC/v74xHU0E4n95eRmfIEe2qN/lrpvEHPJjTk3WqUlE qSc0lZ2/tVtSGjTaP6axkei8xwr6jPUOt0fkAL0ZRrJfvJYpiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaYjNBefD8yf2deOWIGxg8JzaBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQzYjQ2MzMtYTYwNi0z ODU0LWIxNTItNjZmNDgxODQ5MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2r087q1YdUObTvjLvYm9lxX0ucLtPQPa8v3zSzyIYyFWNGloncgSwc OTp3lshUVljJ2MZGelzSlHGvVzzWS/DV6BQxLJhVWlUt6OvUS/kWkCyDqOz2++tR ObsD0F6fqEXgtqv2XgQzoR6g9En78yGBU43Vg98hNteYhKJHCad30kU2A0JS8W0O IKhL+YgPD9K8yFH+16Idij1BW7TMw6YxFeBG4AacfdTcBdMU+u4wYhd+GoBZTJh3 1o4kLI61IZBTOV4CytwcqU1i1NHvrWm5ZZRscWEQEjfKzowPyQVDLyo1c0Vw+eEu wctoR7zNRzqn6qboYrrFN4+RSnsUluw= -----END CERTIFICATE-----Generated at Mon Sep 28 06:14:11 2026 by rpki-client