$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65688926-85e9-3b98-8a36-0ddca3b41341.roa File: 65688926-85e9-3b98-8a36-0ddca3b41341.roa (raw, json) Hash identifier: 2L/zN1eQwWoAO1vFt4U4CgWZ1Y5pA+p6vVSmeHhK8Lg= Subject key identifier: CF:24:42:6C:45:05:43:DE:52:D2:42:E8:C4:5E:FB:BD:2C:77:BA:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C65AB2C1021DB5D9E420 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65688926-85e9-3b98-8a36-0ddca3b41341.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.33.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c6:5a:b2:c1:02:1d:b5:d9:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=e3d18efb-4bd1-4bb6-9093-0ce2f41fb0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:5b:12:0a:72:a3:90:db:43:de:37:e0:8d: 73:22:e2:bb:30:29:e1:99:1e:44:fd:60:d4:72:cd: 30:45:b3:3c:a2:3d:b6:21:ca:60:d3:b5:85:72:2d: 8e:ba:da:cb:9b:45:6a:4f:96:ba:5d:18:0a:1b:8e: bf:41:52:9a:92:72:e2:97:30:87:d4:d0:ec:fa:26: 15:ef:3b:e0:4b:b5:9d:54:a0:42:56:f0:4c:4b:dd: 31:04:5e:f3:28:73:c5:55:ed:96:5c:32:5b:02:21: 97:8f:de:92:ed:6f:0c:8d:0e:e2:4a:78:87:81:dc: b2:ee:6c:66:a9:1b:d9:3a:f1:83:43:3b:99:eb:37: ad:c3:03:2f:61:a9:87:8a:4d:c6:67:e6:cc:7c:16: 4c:06:b7:df:d1:45:8f:dc:5a:c2:3b:80:1f:20:3f: c8:56:79:66:95:ea:25:76:68:04:64:4a:f3:2e:40: d0:81:eb:b9:b7:09:75:30:43:ee:44:08:75:cd:dc: a9:f4:e6:54:ef:e3:e9:32:b0:44:08:33:c4:29:aa: 1c:13:4e:fa:1d:86:0d:ba:95:c5:c7:f6:39:7f:25: 77:1f:52:44:b0:ad:06:e4:7a:35:06:1e:ca:4f:b3: ce:b8:ea:6e:b5:51:8c:c8:3d:36:19:d2:c3:a7:76: 4c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:24:42:6C:45:05:43:DE:52:D2:42:E8:C4:5E:FB:BD:2C:77:BA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65688926-85e9-3b98-8a36-0ddca3b41341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ab:6d:f6:54:5e:fc:82:2f:2f:95:7b:13:32:61:b1:ba:6c: 1e:b2:63:63:fa:90:d5:01:cd:73:62:29:62:da:6a:50:16:4a: a8:18:4a:09:12:68:7b:ad:05:01:99:20:ae:df:4b:3b:e5:7d: 78:c7:64:e3:0b:c5:96:e8:63:c4:45:87:cf:52:cd:11:80:92: a1:f5:f1:01:54:04:77:b4:62:23:45:69:92:65:4d:58:8a:68: 3e:a1:96:90:d3:19:61:7d:b7:19:36:39:55:a8:76:db:82:91: fd:58:a3:a0:cf:94:c8:77:4c:4a:4f:ae:84:94:00:ea:9d:63: f6:5e:2f:b3:82:da:0b:9b:00:1c:e5:d0:1e:64:e5:8a:a0:04: ab:ea:c0:73:19:38:eb:38:5f:31:da:70:4c:d6:45:90:8b:21: e4:a2:62:e3:60:cb:0e:07:f3:35:1e:f0:90:08:45:b4:b8:fe: 50:18:f2:b3:92:3c:45:73:cc:c2:49:0e:bb:71:20:8e:2a:24: 98:92:b5:23:5a:eb:c5:1c:3f:96:15:5c:64:97:da:c2:af:91: 66:39:e7:c7:c2:41:7e:13:a2:83:71:f9:06:93:02:9e:ce:39: b9:f6:e0:f9:d3:ab:72:a7:da:92:0e:42:7b:50:2c:ff:83:30: 57:b1:02:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8ZassECHbXZ5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZTNkMThlZmItNGJkMS00YmI2LTkwOTMtMGNlMmY0MWZiMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOxbEgpyo5DbQ9434I1zIuK7MCnhmR5E/WDU cs0wRbM8oj22Icpg07WFci2OutrLm0VqT5a6XRgKG46/QVKaknLilzCH1NDs+iYV 7zvgS7WdVKBCVvBMS90xBF7zKHPFVe2WXDJbAiGXj96S7W8MjQ7iSniHgdyy7mxm qRvZOvGDQzuZ6zetwwMvYamHik3GZ+bMfBZMBrff0UWP3FrCO4AfID/IVnlmleol dmgEZErzLkDQgeu5twl1MEPuRAh1zdyp9OZU7+PpMrBECDPEKaocE076HYYNupXF x/Y5fyV3H1JEsK0G5Ho1Bh7KT7POuOputVGMyD02GdLDp3ZMqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8kQmxFBUPeUtJC6MRe+70sd7qDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjU2ODg5MjYtODVlOS0z Yjk4LThhMzYtMGRkY2EzYjQxMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyG8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADirbfZUXvyCLy+VexMyYbG6bB6yY2P6kNUBzXNiKWLaalAWSqgYSgkS aHutBQGZIK7fSzvlfXjHZOMLxZboY8RFh89SzRGAkqH18QFUBHe0YiNFaZJlTViK aD6hlpDTGWF9txk2OVWodtuCkf1Yo6DPlMh3TEpProSUAOqdY/ZeL7OC2gubABzl 0B5k5YqgBKvqwHMZOOs4XzHacEzWRZCLIeSiYuNgyw4H8zUe8JAIRbS4/lAY8rOS PEVzzMJJDrtxII4qJJiStSNa68UcP5YVXGSX2sKvkWY558fCQX4TooNx+QaTAp7O Obn24PnTq3Kn2pIOQntQLP+DMFexAvE= -----END CERTIFICATE-----Generated at Tue Sep 22 13:15:11 2026 by rpki-client