$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa File: 86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa (raw, json) Hash identifier: TJN/qAWtTqlyL1yEaBOqa2l8BUpF7DaWvMTxGP4SBF8= Subject key identifier: B4:FE:BE:C8:3E:19:18:62:EE:0F:25:A0:F5:9A:B9:B8:09:E1:11:F7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093D01A1A910D27BD1146530 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.0.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:01:a1:a9:10:d2:7b:d1:14:65:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=fc173e16-6759-4554-a063-62f0df086cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:6d:7f:71:3a:fe:71:14:e8:33:6d:2d:2b: 8d:77:38:bd:9d:ba:01:59:08:f0:cd:13:25:a0:19: 80:dd:62:b3:e9:b6:c6:bf:5b:cc:01:9d:ed:77:8b: 0c:47:46:08:a4:60:1d:88:31:d5:34:48:60:ab:6f: 6f:ce:c6:e2:21:4e:ee:13:82:c5:09:a2:c2:e2:d1: 22:b6:7b:2d:55:54:9e:6d:b6:69:21:dc:e3:4f:fe: f8:4f:e5:b9:6e:da:8e:11:13:f0:04:d3:72:bd:26: 5d:4e:ec:d8:c5:fd:0e:d6:72:2e:95:71:6f:9e:5b: 34:91:03:39:ee:47:7d:1b:90:11:9e:e8:51:e6:0b: 8d:4b:3f:15:29:cc:0f:75:62:34:eb:78:5b:52:85: f8:ce:8f:67:3d:15:be:48:1e:9a:80:92:ba:3e:02: 93:1b:a1:f4:b1:ee:75:92:d1:8a:27:51:ac:ce:f3: 48:b3:47:00:f8:24:40:d2:bc:29:84:e5:e3:3f:49: fe:63:b9:96:44:ae:23:30:06:43:4d:60:66:b8:61: 17:cf:d2:b6:72:1e:54:0b:16:87:03:81:82:c1:52: a9:2f:d3:1a:76:a9:f5:b0:83:99:b0:3c:72:3f:62: 84:31:aa:c8:ca:16:62:a1:50:b9:b9:eb:64:91:1f: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FE:BE:C8:3E:19:18:62:EE:0F:25:A0:F5:9A:B9:B8:09:E1:11:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86ae2dd1-46c9-31f2-b936-fa9f23c454d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a2:00:1c:40:63:97:23:9b:1f:2d:db:92:df:31:72:c1:0f: 86:cf:67:17:08:d2:b4:cb:16:c9:ed:f3:f4:bb:06:23:93:80: b3:61:e3:37:27:7a:15:f3:6a:34:8f:bc:8b:e6:bd:c1:96:70: 5d:1d:a3:01:8c:05:1e:c7:ea:3e:42:d6:1e:5b:a0:ab:32:8a: 1e:9c:31:6c:20:50:f0:a5:d0:72:d7:04:99:bc:6a:7e:49:9a: 5b:5e:86:26:af:c4:92:99:af:c2:14:db:eb:22:1e:30:e0:ad: 0a:fd:1a:3b:2e:65:36:0d:d8:79:5b:cd:1e:63:7f:3f:d3:fd: ef:4b:10:86:a0:69:6f:30:ef:d9:9a:45:28:af:25:28:76:66: 98:90:dd:d1:ab:6e:b3:c7:81:11:51:26:39:fe:e9:54:66:35: 74:df:09:6b:e8:8c:8a:8d:96:e0:72:73:e1:48:79:7e:e6:17: ca:7b:ca:2e:e3:27:8a:a4:fc:94:e0:dc:13:a0:f0:69:40:8a: f0:fc:75:af:95:eb:0d:36:f3:14:c2:37:53:63:ce:c8:c5:9f: bf:af:f7:f0:1c:6e:41:68:3b:9b:9e:37:13:d8:16:e0:f7:6e: 5b:7d:3d:9f:04:0b:15:f6:2a:b4:15:63:29:d1:ef:2c:3a:6d: f7:58:8c:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQGhqRDSe9EUZTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZmMxNzNlMTYtNjc1OS00NTU0LWEwNjMtNjJmMGRmMDg2Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSxtf3E6/nEU6DNtLSuNdzi9nboBWQjwzRMl oBmA3WKz6bbGv1vMAZ3td4sMR0YIpGAdiDHVNEhgq29vzsbiIU7uE4LFCaLC4tEi tnstVVSebbZpIdzjT/74T+W5btqOERPwBNNyvSZdTuzYxf0O1nIulXFvnls0kQM5 7kd9G5ARnuhR5guNSz8VKcwPdWI063hbUoX4zo9nPRW+SB6agJK6PgKTG6H0se51 ktGKJ1GszvNIs0cA+CRA0rwphOXjP0n+Y7mWRK4jMAZDTWBmuGEXz9K2ch5UCxaH A4GCwVKpL9Madqn1sIOZsDxyP2KEMarIyhZioVC5uetkkR/cnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLT+vsg+GRhi7g8loPWaubgJ4RH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZhZTJkZDEtNDZjOS0z MWYyLWI5MzYtZmE5ZjIzYzQ1NGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiiABxAY5cjmx8t25LfMXLBD4bPZxcI0rTLFsnt8/S7BiOTgLNh4zcn ehXzajSPvIvmvcGWcF0dowGMBR7H6j5C1h5boKsyih6cMWwgUPCl0HLXBJm8an5J mltehiavxJKZr8IU2+siHjDgrQr9GjsuZTYN2HlbzR5jfz/T/e9LEIagaW8w79ma RSivJSh2ZpiQ3dGrbrPHgRFRJjn+6VRmNXTfCWvojIqNluByc+FIeX7mF8p7yi7j J4qk/JTg3BOg8GlAivD8da+V6w028xTCN1NjzsjFn7+v9/AcbkFoO5ueNxPYFuD3 blt9PZ8ECxX2KrQVYynR7yw6bfdYjCo= -----END CERTIFICATE-----Generated at Tue Sep 22 18:25:47 2026 by rpki-client