$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b661471-59dd-30f6-bd4f-25cc8427e2f9.roa File: 8b661471-59dd-30f6-bd4f-25cc8427e2f9.roa (raw, json) Hash identifier: mozRZYW2CECdMDy5wKTvb28s+uPudr4csnh0q8DcGAw= Subject key identifier: 6F:1B:92:64:80:02:39:16:21:5E:81:EB:0F:67:41:4E:05:AD:0B:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47FC92E1FB701FAB288620 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b661471-59dd-30f6-bd4f-25cc8427e2f9.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.41.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fc:92:e1:fb:70:1f:ab:28:86:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=ada73074-c66d-4114-9877-e4b9abb36227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4f:82:13:01:81:d2:bb:63:56:9e:4a:ac:0d: 63:81:3c:bf:6c:53:01:36:9d:8d:0a:ee:03:15:66: 2c:3e:c0:2d:69:83:2a:b7:76:d2:22:bc:3b:90:1e: 0f:0d:db:85:61:ae:ac:5c:5d:55:fe:8e:83:58:d2: 10:a4:45:d9:76:fe:75:5d:04:91:61:28:26:af:a0: 81:0a:84:8b:29:e8:b5:e3:bc:83:58:4f:2e:3e:bd: 4d:2e:0f:5f:33:96:88:75:3e:26:8d:b6:42:78:24: f5:80:23:8e:e8:3e:1d:41:f3:77:1b:c8:93:c9:38: 52:b0:32:fa:6f:ac:92:d6:98:63:db:f6:14:3d:7e: a5:84:0e:f4:ed:fa:24:54:5b:1f:d4:10:08:13:6a: 98:3b:8a:bd:48:a4:02:f7:34:49:70:32:71:d1:83: bc:52:63:c7:bb:85:34:bc:5a:8a:40:ee:52:d5:78: 84:0b:6e:0d:2c:b4:93:ec:75:28:d7:43:e6:e9:02: 6b:e4:05:dd:6b:24:8b:94:16:4b:57:b8:65:86:2b: 58:60:00:a6:6c:80:75:c0:bf:f8:19:c3:44:ab:75: a0:78:e0:5e:7c:f5:0c:35:33:7a:24:05:5a:3d:8a: 99:64:84:b5:0a:11:16:8e:37:71:a2:60:4a:50:11: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1B:92:64:80:02:39:16:21:5E:81:EB:0F:67:41:4E:05:AD:0B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b661471-59dd-30f6-bd4f-25cc8427e2f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d0:84:36:88:69:36:b6:a9:7d:47:1b:31:be:3b:05:a4:7c: 7b:ef:93:9c:a7:6c:4c:94:1b:59:51:2c:37:f9:eb:7b:c4:61: 1d:5f:3e:a1:19:b9:d5:4e:96:38:7b:ae:8a:57:7f:8a:d0:33: 7e:1d:31:1a:90:67:fe:8b:4f:83:b4:06:6c:e8:eb:cc:f4:9f: 22:4a:9d:e0:b5:30:1e:d7:ac:8f:b1:40:3a:c4:4a:96:a5:25: 4a:2a:2d:15:4c:14:f0:b9:00:99:dd:a5:86:07:a0:04:aa:5b: 50:43:43:67:6f:d2:89:68:5b:47:19:28:a6:57:bc:79:f0:4f: 98:03:41:77:e4:52:b8:97:cf:92:26:07:62:7c:c8:57:41:98: 26:17:87:9b:87:50:d8:93:bc:6a:6e:07:ab:2b:3f:07:82:61: 3e:69:39:ae:b5:a1:bc:be:f2:9d:b1:b3:ca:3e:72:67:9c:69: bb:3c:55:44:44:07:8e:85:2c:63:8d:98:83:1e:a0:4a:d6:9d: f4:09:20:25:07:5f:e9:df:05:6c:ec:65:f1:01:91:7c:1d:4e: a8:d6:74:79:1d:44:f2:f6:55:26:e3:45:cd:6e:46:6a:42:bf: ae:99:9a:8b:21:51:c3:c4:43:42:b1:59:41:d2:98:ee:31:57: 30:f7:9b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/yS4ftwH6sohiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YWRhNzMwNzQtYzY2ZC00MTE0LTk4NzctZTRiOWFiYjM2MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU+CEwGB0rtjVp5KrA1jgTy/bFMBNp2NCu4D FWYsPsAtaYMqt3bSIrw7kB4PDduFYa6sXF1V/o6DWNIQpEXZdv51XQSRYSgmr6CB CoSLKei147yDWE8uPr1NLg9fM5aIdT4mjbZCeCT1gCOO6D4dQfN3G8iTyThSsDL6 b6yS1phj2/YUPX6lhA707fokVFsf1BAIE2qYO4q9SKQC9zRJcDJx0YO8UmPHu4U0 vFqKQO5S1XiEC24NLLST7HUo10Pm6QJr5AXdaySLlBZLV7hlhitYYACmbIB1wL/4 GcNEq3WgeOBefPUMNTN6JAVaPYqZZIS1ChEWjjdxomBKUBF53QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8bkmSAAjkWIV6B6w9nQU4FrQv6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI2NjE0NzEtNTlkZC0z MGY2LWJkNGYtMjVjYzg0MjdlMmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFykUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXQhDaIaTa2qX1HGzG+OwWkfHvvk5ynbEyUG1lRLDf563vEYR1fPqEZ udVOljh7ropXf4rQM34dMRqQZ/6LT4O0Bmzo68z0nyJKneC1MB7XrI+xQDrESpal JUoqLRVMFPC5AJndpYYHoASqW1BDQ2dv0oloW0cZKKZXvHnwT5gDQXfkUriXz5Im B2J8yFdBmCYXh5uHUNiTvGpuB6srPweCYT5pOa61oby+8p2xs8o+cmecabs8VURE B46FLGONmIMeoErWnfQJICUHX+nfBWzsZfEBkXwdTqjWdHkdRPL2VSbjRc1uRmpC v66ZmoshUcPEQ0KxWUHSmO4xVzD3m78= -----END CERTIFICATE-----Generated at Tue Sep 22 06:28:07 2026 by rpki-client