$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86145c16-ab55-39d3-9cbd-b2b4c20e3ea5.roa File: 86145c16-ab55-39d3-9cbd-b2b4c20e3ea5.roa (raw, json) Hash identifier: c0NdhrlMBsglIipJM7a9QvZJnHJxrFE6lsc5Px/8+04= Subject key identifier: 2C:B2:3E:BA:38:74:48:78:2D:B9:74:B7:46:1A:C8:0F:EA:1B:92:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F427823F7A9039731F2892640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86145c16-ab55-39d3-9cbd-b2b4c20e3ea5.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.48.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:23:f7:a9:03:97:31:f2:89:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=3d8f84da-0f9a-4876-8a2b-9914fa632245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:2a:e3:40:4c:f0:02:e6:09:93:4c:c4:a8: cd:47:94:df:fd:9e:27:12:78:47:2e:f3:5c:90:f7: 26:c5:66:f9:8d:dd:f1:61:e5:73:6f:f0:63:83:89: 87:9b:9a:a1:6d:4c:64:5b:ec:c0:2c:7b:ac:6a:0f: 2f:aa:12:96:95:9c:53:38:fb:2b:ef:dc:f2:0d:e9: 80:d7:fe:1a:07:08:34:e6:12:8c:3a:b0:60:ba:97: 15:75:c4:10:f5:6e:cc:4a:58:2a:15:54:a8:fd:c7: 58:51:d4:0b:67:72:91:db:2e:84:d9:f2:87:ce:9a: bb:fe:55:d0:97:49:23:0b:2c:10:87:08:db:d1:84: f9:84:c5:17:f0:ef:0c:5c:33:36:7e:98:97:3e:cd: 1e:4a:df:c2:63:c5:27:04:bb:0c:ef:98:3a:af:b2: e5:ce:11:2c:79:ca:e3:a2:ad:1e:7a:57:72:00:bc: 4f:66:aa:8a:d7:00:18:9f:08:53:00:71:b7:91:a6: 76:17:d8:06:07:2c:60:1b:9f:9d:96:8d:44:dc:59: ad:12:72:17:86:a8:ba:61:83:22:51:ee:8e:85:a9: 81:e1:f5:24:85:bc:66:2c:dc:fd:5d:ba:bf:e4:2d: be:37:1d:32:c1:c2:36:50:28:a7:96:9f:e9:d8:fa: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B2:3E:BA:38:74:48:78:2D:B9:74:B7:46:1A:C8:0F:EA:1B:92:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86145c16-ab55-39d3-9cbd-b2b4c20e3ea5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:73:24:0c:b8:92:cd:c7:a1:41:19:81:2d:16:d6:1a:33:94: 8a:3e:5b:6e:95:b4:ea:7d:d4:b5:98:2a:b7:27:ec:20:15:64: 50:af:f3:fc:00:b2:7a:b0:08:de:c2:37:d7:63:6f:16:ea:90: 76:b9:e8:a1:6d:30:48:1d:a4:0e:7e:3a:7a:50:ec:19:f9:48: c0:f6:63:d9:51:1a:0d:65:01:c2:24:91:48:5c:80:2b:0a:b2: bf:2b:87:45:8e:3f:40:f3:76:ec:8e:2a:e3:6d:48:6f:cc:47: bd:f5:5a:eb:59:f7:d7:6a:b1:73:f0:ea:b5:2d:1d:96:b5:dc: 83:52:0c:50:94:36:ef:ff:95:3e:6e:ba:d5:cc:40:75:16:20: f1:24:ae:53:76:73:48:e3:b6:d9:45:88:ca:f6:44:e8:57:45: 9b:4b:0e:41:fd:7f:6a:79:94:02:08:be:07:c5:b4:a2:01:63: a0:41:a2:fa:43:72:c9:c5:09:1a:79:8e:4a:d5:f3:1c:f0:98: 37:25:31:c2:70:97:cb:25:ad:38:23:09:e5:8c:0c:82:d1:9b: 21:f0:c0:39:6e:00:08:bb:0d:3f:fc:32:fd:ef:90:36:1e:d4: 24:44:c3:c9:23:d3:5e:01:ed:a0:63:a4:db:0e:cb:30:87:6a: a1:e3:4c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCP3qQOXMfKJJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk M2Q4Zjg0ZGEtMGY5YS00ODc2LThhMmItOTkxNGZhNjMyMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne4q40BM8ALmCZNMxKjNR5Tf/Z4nEnhHLvNc kPcmxWb5jd3xYeVzb/Bjg4mHm5qhbUxkW+zALHusag8vqhKWlZxTOPsr79zyDemA 1/4aBwg05hKMOrBgupcVdcQQ9W7MSlgqFVSo/cdYUdQLZ3KR2y6E2fKHzpq7/lXQ l0kjCywQhwjb0YT5hMUX8O8MXDM2fpiXPs0eSt/CY8UnBLsM75g6r7LlzhEsecrj oq0eeldyALxPZqqK1wAYnwhTAHG3kaZ2F9gGByxgG5+dlo1E3FmtEnIXhqi6YYMi Ue6OhamB4fUkhbxmLNz9Xbq/5C2+Nx0ywcI2UCinlp/p2PoE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyyPro4dEh4Lbl0t0YayA/qG5J5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYxNDVjMTYtYWI1NS0z OWQzLTljYmQtYjJiNGMyMGUzZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzAWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhzJAy4ks3HoUEZgS0W1hozlIo+W26VtOp91LWYKrcn7CAVZFCv8/wA snqwCN7CN9djbxbqkHa56KFtMEgdpA5+OnpQ7Bn5SMD2Y9lRGg1lAcIkkUhcgCsK sr8rh0WOP0DzduyOKuNtSG/MR731WutZ99dqsXPw6rUtHZa13INSDFCUNu//lT5u utXMQHUWIPEkrlN2c0jjttlFiMr2ROhXRZtLDkH9f2p5lAIIvgfFtKIBY6BBovpD csnFCRp5jkrV8xzwmDclMcJwl8slrTgjCeWMDILRmyHwwDluAAi7DT/8Mv3vkDYe 1CREw8kj014B7aBjpNsOyzCHaqHjTCs= -----END CERTIFICATE-----Generated at Wed Sep 23 15:29:44 2026 by rpki-client