$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7152b7a9-e650-34ee-a3f9-96e91b35471e.roa File: 7152b7a9-e650-34ee-a3f9-96e91b35471e.roa (raw, json) Hash identifier: CP9nj/pcvUKEG64I5gbXBmUZPWlm6v3yVTVhkpEksS8= Subject key identifier: 67:BB:80:DB:97:7F:CF:43:AF:59:AC:2A:78:67:C5:51:82:38:D3:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C43A254B4629B732F080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7152b7a9-e650-34ee-a3f9-96e91b35471e.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.34.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c4:3a:25:4b:46:29:b7:32:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=04382e7b-8aa0-4f04-85ba-60ef7f881572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:65:43:10:2c:15:ec:19:c1:26:8d:e7:b0: 3f:e4:3f:3f:9e:9c:ef:a9:eb:b5:d5:6a:44:d8:45: c6:56:53:99:90:6b:db:7d:1a:bd:6d:e1:e5:44:ab: fd:c8:06:26:36:b4:4f:23:8b:56:0a:56:e4:92:61: ea:59:66:11:21:8d:97:fc:fa:f2:30:ea:a2:42:b4: 89:c1:85:2b:c9:22:c7:21:09:5e:6c:9a:30:ed:9c: 69:25:7e:1e:97:ec:ef:91:77:b1:b4:eb:74:f2:39: 34:c1:73:bf:9d:e5:66:a1:5b:21:34:41:d6:7a:02: ad:19:ee:6e:30:bc:f6:13:22:03:aa:ab:12:4f:51: 0e:65:9f:71:6d:f0:56:68:11:1c:b2:30:ea:d2:a3: 58:16:7c:ec:b0:ef:f8:40:93:5f:88:e7:01:b9:26: 32:f6:a2:b9:86:8d:f2:8a:ad:ca:1a:20:4b:03:ab: 45:1d:13:97:a9:79:23:0c:c2:98:24:32:be:79:3a: 6e:28:f2:8e:67:d5:97:1e:d0:6e:55:e3:d2:04:68: 84:43:7f:ab:80:ad:45:05:6e:c5:c9:f8:6c:1a:7c: 54:4d:64:a5:0f:78:16:61:76:2a:18:de:3f:54:25: 24:0f:07:2c:73:a4:2c:3a:27:1c:10:35:4a:59:ca: bf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BB:80:DB:97:7F:CF:43:AF:59:AC:2A:78:67:C5:51:82:38:D3:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7152b7a9-e650-34ee-a3f9-96e91b35471e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e0:ca:30:d3:33:09:0e:39:f5:e0:f6:64:f9:c3:b6:d2:66: b7:fd:93:9c:00:fa:79:95:8a:29:1f:26:29:76:0a:46:42:3a: 9b:c9:8a:f1:30:72:5b:7a:00:5b:aa:df:4e:ca:d6:82:cd:40: a0:d8:4c:48:54:e0:05:bf:4e:0a:87:50:6d:31:24:c9:9e:85: d8:0f:85:1f:26:4d:73:b0:3c:74:87:c0:a6:1e:d8:7c:ad:91: ea:8a:76:6e:d3:7a:4c:f3:e0:b2:8c:3d:b4:3b:6f:78:af:28: 60:4b:da:77:79:a8:5c:9f:32:df:aa:99:42:53:03:18:48:af: d6:1a:9c:35:14:8b:01:b8:5d:43:07:f2:a6:71:06:7c:67:1e: 03:71:30:93:10:93:75:3b:10:17:81:1e:49:d9:d5:22:85:28: a7:97:1f:51:f3:32:31:e1:dc:76:71:7c:32:d5:e3:43:2e:be: ae:6a:50:25:2f:99:35:57:48:75:b3:aa:38:65:a2:5b:df:2d: be:54:4b:36:23:0f:e1:9d:54:df:ea:01:2e:7e:21:1e:e4:b1: c3:57:6c:35:6c:7f:77:3c:95:d0:db:84:10:af:fe:4e:aa:6f: 88:c0:43:05:f2:0c:20:bd:81:06:c1:41:5d:9b:cd:f6:66:86: fd:67:5e:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98Q6JUtGKbcy8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MDQzODJlN2ItOGFhMC00ZjA0LTg1YmEtNjBlZjdmODgxNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIFlQxAsFewZwSaN57A/5D8/npzvqeu11WpE 2EXGVlOZkGvbfRq9beHlRKv9yAYmNrRPI4tWClbkkmHqWWYRIY2X/PryMOqiQrSJ wYUrySLHIQlebJow7ZxpJX4el+zvkXextOt08jk0wXO/neVmoVshNEHWegKtGe5u MLz2EyIDqqsST1EOZZ9xbfBWaBEcsjDq0qNYFnzssO/4QJNfiOcBuSYy9qK5ho3y iq3KGiBLA6tFHROXqXkjDMKYJDK+eTpuKPKOZ9WXHtBuVePSBGiEQ3+rgK1FBW7F yfhsGnxUTWSlD3gWYXYqGN4/VCUkDwcsc6QsOiccEDVKWcq/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe7gNuXf89Dr1msKnhnxVGCONN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzE1MmI3YTktZTY1MC0z NGVlLWEzZjktOTZlOTFiMzU0NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTgyjDTMwkOOfXg9mT5w7bSZrf9k5wA+nmViikfJil2CkZCOpvJivEw clt6AFuq307K1oLNQKDYTEhU4AW/TgqHUG0xJMmehdgPhR8mTXOwPHSHwKYe2Hyt keqKdm7Tekzz4LKMPbQ7b3ivKGBL2nd5qFyfMt+qmUJTAxhIr9YanDUUiwG4XUMH 8qZxBnxnHgNxMJMQk3U7EBeBHknZ1SKFKKeXH1HzMjHh3HZxfDLV40Muvq5qUCUv mTVXSHWzqjhlolvfLb5USzYjD+GdVN/qAS5+IR7kscNXbDVsf3c8ldDbhBCv/k6q b4jAQwXyDCC9gQbBQV2bzfZmhv1nXpQ= -----END CERTIFICATE-----Generated at Tue Sep 22 19:33:13 2026 by rpki-client