$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa9f564-cb1a-355a-a55b-32163c36b5ad.roa File: 7aa9f564-cb1a-355a-a55b-32163c36b5ad.roa (raw, json) Hash identifier: /AxFYxt8r42agHkQJy1xHOl0X3gf88a+oViWjxhjuOc= Subject key identifier: 38:2D:C3:43:DF:3B:A6:B4:E1:31:F3:7D:CF:0C:92:C4:4F:3B:BD:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47FBAB67F9CEB7CFEC3CE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa9f564-cb1a-355a-a55b-32163c36b5ad.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.40.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fb:ab:67:f9:ce:b7:cf:ec:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=5b57d4f0-bd5d-4b55-9661-c1a402f7615d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:61:7e:c1:f1:82:37:62:57:9e:04:ac:27:ce: d8:92:b3:2a:ea:ad:4c:30:0e:24:0e:a7:a5:0b:6a: 68:72:66:bc:b5:fe:d9:5d:52:42:c4:f3:35:0f:73: ff:fb:21:08:48:79:e6:b4:c7:ed:49:9c:df:61:d7: cb:9d:1a:5f:cc:92:35:57:03:2c:87:f7:d2:b7:b0: 69:f1:4f:4a:2a:5f:57:b1:4c:88:20:19:81:0c:d3: fe:ef:92:8b:34:b6:a8:d4:16:da:71:d6:78:84:52: 32:ec:0f:e8:b9:7f:82:08:9f:77:22:48:6e:6e:b6: 10:16:9b:dd:4c:49:32:d9:60:e0:c2:7c:89:87:26: 1e:54:cd:39:fb:16:0e:a3:a7:82:98:63:49:4f:f0: b9:cb:68:25:d8:6e:01:72:68:97:83:07:ab:ef:30: f3:b8:3a:7a:89:8b:9a:75:f9:6e:a4:cb:99:19:7b: a1:13:7c:5e:d5:ba:cc:c9:a4:d6:32:77:d9:5e:b8: 7e:2e:4d:b8:04:12:a6:e7:e7:c8:35:dc:97:78:57: 17:e4:b6:1d:3e:8d:31:63:66:87:5a:36:d9:1b:ec: 6d:01:68:89:29:57:b4:61:b9:81:bd:58:9a:e8:79: 7d:3f:6d:67:3d:67:4f:df:2e:c7:29:2b:15:f6:b7: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:C3:43:DF:3B:A6:B4:E1:31:F3:7D:CF:0C:92:C4:4F:3B:BD:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7aa9f564-cb1a-355a-a55b-32163c36b5ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fb:d6:11:36:e8:9b:5d:d2:8f:20:f7:bc:5f:3e:c9:9d:8b: 95:a5:a1:35:09:a6:b2:d9:18:27:b3:2e:54:cd:d7:25:48:09: 36:c7:9f:e1:d0:cd:e4:37:76:f2:e3:e9:ee:f2:ac:74:18:74: 79:af:23:d2:f2:81:06:50:44:c7:f1:74:49:c3:aa:71:55:42: b8:5a:9a:13:4f:fc:66:62:78:3f:05:3e:f9:04:b9:4d:30:4c: 21:d0:f5:f8:c0:99:8f:5e:1f:b8:04:75:be:d2:ae:0d:c4:74: 43:30:86:3a:1f:78:4b:ad:00:02:6b:37:71:31:6e:d9:16:e2: 8c:2e:63:fd:1e:de:d0:0f:ec:34:e8:14:ab:c8:a5:fa:e8:58: 85:7c:cb:51:14:e0:c2:f0:77:c9:33:1a:1a:cf:03:e5:e0:d6: 5d:8c:bf:63:5e:a5:e7:e9:0c:7b:97:6f:f5:fa:ba:d0:fe:49: 74:ca:01:b5:1f:31:2e:5f:ea:4b:e8:b5:36:19:0b:cf:9e:94: 82:71:50:0a:41:57:eb:01:1e:b9:9d:af:bf:fc:90:68:fb:99: 36:5b:f3:e0:2e:f4:54:9e:81:6e:37:c8:27:67:8c:06:67:02: db:de:ae:bd:f5:a4:cc:23:e0:42:37:21:18:51:fb:2f:a5:04: d9:43:32:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/urZ/nOt8/sPOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NWI1N2Q0ZjAtYmQ1ZC00YjU1LTk2NjEtYzFhNDAyZjc2MTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGF+wfGCN2JXngSsJ87YkrMq6q1MMA4kDqel C2pocma8tf7ZXVJCxPM1D3P/+yEISHnmtMftSZzfYdfLnRpfzJI1VwMsh/fSt7Bp 8U9KKl9XsUyIIBmBDNP+75KLNLao1BbacdZ4hFIy7A/ouX+CCJ93IkhubrYQFpvd TEky2WDgwnyJhyYeVM05+xYOo6eCmGNJT/C5y2gl2G4BcmiXgwer7zDzuDp6iYua dflupMuZGXuhE3xe1brMyaTWMnfZXrh+Lk24BBKm5+fINdyXeFcX5LYdPo0xY2aH WjbZG+xtAWiJKVe0YbmBvVia6Hl9P21nPWdP3y7HKSsV9relxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgtw0PfO6a04THzfc8MksRPO71hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2FhOWY1NjQtY2IxYS0z NTVhLWE1NWItMzIxNjNjMzZiNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD771hE26Jtd0o8g97xfPsmdi5WloTUJprLZGCezLlTN1yVICTbHn+HQ zeQ3dvLj6e7yrHQYdHmvI9LygQZQRMfxdEnDqnFVQrhamhNP/GZieD8FPvkEuU0w TCHQ9fjAmY9eH7gEdb7Srg3EdEMwhjofeEutAAJrN3ExbtkW4owuY/0e3tAP7DTo FKvIpfroWIV8y1EU4MLwd8kzGhrPA+Xg1l2Mv2NepefpDHuXb/X6utD+SXTKAbUf MS5f6kvotTYZC8+elIJxUApBV+sBHrmdr7/8kGj7mTZb8+Au9FSegW43yCdnjAZn Atverr31pMwj4EI3IRhR+y+lBNlDMk4= -----END CERTIFICATE-----Generated at Sat Sep 26 04:29:33 2026 by rpki-client