$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8c1ead-bc9f-3793-b1ab-d7e2f2fb34b5.roa File: 8b8c1ead-bc9f-3793-b1ab-d7e2f2fb34b5.roa (raw, json) Hash identifier: FWnkoqfzLD4uPF87TZcQExmxfA8OX8Rdq3dAPF/SLNE= Subject key identifier: 87:90:57:7D:22:F0:C5:E2:73:4B:C6:B2:42:D8:62:E8:38:23:2C:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C801D11548E173FCEF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8c1ead-bc9f-3793-b1ab-d7e2f2fb34b5.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.34.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c8:01:d1:15:48:e1:73:fc:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=e0c4e40b-d1aa-4851-b9b9-eae1b3d034d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:78:c3:13:98:83:21:6f:5d:db:d3:c3:3d: 8f:6f:12:60:fc:0f:32:fa:d0:1c:2b:99:9c:35:ad: 0d:65:6c:f8:24:ac:51:74:c2:0e:bf:97:23:21:ae: fc:79:41:39:e2:22:d1:b8:e6:e5:cf:50:d1:cf:91: 59:4f:5a:ee:ca:56:e8:37:39:17:07:2b:f7:7d:15: 7a:22:6c:04:77:9d:93:48:df:3d:2c:0f:26:f2:50: af:6b:bd:13:5f:05:77:b2:3f:a2:a5:0c:fa:98:b4: d7:48:83:2e:da:26:9a:63:cc:5e:7d:de:d9:ad:a7: bb:5f:1f:ad:d7:56:c2:ed:5d:47:17:77:33:40:04: aa:a8:75:ca:88:d5:1e:b7:43:95:a5:73:0c:1f:70: f6:f3:79:3d:fc:32:5a:26:19:a9:59:24:87:49:71: 1e:86:a2:15:3a:b2:54:c6:a4:4c:c6:b1:ab:58:1c: c9:83:76:d5:8f:46:5d:34:b2:be:86:19:d8:6d:07: 53:6d:5f:68:68:38:46:1f:31:80:93:35:fe:b6:1e: e9:f0:90:30:60:6d:87:15:30:d5:43:26:f0:92:66: ef:5c:5d:7f:ed:70:32:db:c9:c6:f3:e0:2b:11:e4: 8f:39:41:f1:7e:8d:60:98:02:c4:13:bc:6d:3e:a2: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:90:57:7D:22:F0:C5:E2:73:4B:C6:B2:42:D8:62:E8:38:23:2C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b8c1ead-bc9f-3793-b1ab-d7e2f2fb34b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:ad:3d:a3:18:64:f3:04:65:f4:0d:ab:13:9b:1b:3b:34:bc: 1c:e1:47:a1:27:d8:bf:df:f6:b2:a1:3a:e3:5f:d2:f9:5a:4f: 68:2b:88:64:b8:54:d9:5b:c9:fb:18:7f:f3:b5:35:91:a8:ab: 9a:29:b2:81:64:08:2b:0d:b0:a1:2a:5d:7f:31:0c:fd:ca:ed: 77:e3:d8:a1:2b:d1:44:d8:4c:d2:c1:04:98:d7:80:54:f6:17: 66:cf:6b:65:4f:68:12:66:37:17:00:d0:c1:a8:15:fc:5f:69: 4f:24:f4:71:0c:e5:8d:8e:2b:25:60:fa:2a:99:71:40:c6:6d: 64:76:00:02:97:e7:40:24:33:ed:88:26:1d:19:45:0d:98:67: 4b:d1:2a:2a:1d:c5:b1:25:06:13:45:3b:da:74:5c:70:95:59: c2:34:01:83:6b:7d:3e:ae:20:90:c6:b1:2b:d3:04:74:19:f3: 17:ee:62:39:08:0a:6d:7b:ca:57:26:c7:3e:74:6a:1b:51:77: 14:62:f9:5a:d8:d0:94:39:90:3f:26:6d:cc:a1:66:86:ae:23: 65:98:c3:95:e2:b4:68:5d:54:63:db:63:a9:d3:55:d1:69:af: cf:88:df:c3:c9:4d:be:d1:57:14:5e:03:a2:74:a6:05:7f:54: 26:83:07:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98gB0RVI4XP874AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTBjNGU0MGItZDFhYS00ODUxLWI5YjktZWFlMWIzZDAzNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBt4wxOYgyFvXdvTwz2PbxJg/A8y+tAcK5mc Na0NZWz4JKxRdMIOv5cjIa78eUE54iLRuOblz1DRz5FZT1ruylboNzkXByv3fRV6 ImwEd52TSN89LA8m8lCva70TXwV3sj+ipQz6mLTXSIMu2iaaY8xefd7Zrae7Xx+t 11bC7V1HF3czQASqqHXKiNUet0OVpXMMH3D283k9/DJaJhmpWSSHSXEehqIVOrJU xqRMxrGrWBzJg3bVj0ZdNLK+hhnYbQdTbV9oaDhGHzGAkzX+th7p8JAwYG2HFTDV QybwkmbvXF1/7XAy28nG8+ArEeSPOUHxfo1gmALEE7xtPqK/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeQV30i8MXic0vGskLYYug4IyzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI4YzFlYWQtYmM5Zi0z NzkzLWIxYWItZDdlMmYyZmIzNGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKtPaMYZPMEZfQNqxObGzs0vBzhR6En2L/f9rKhOuNf0vlaT2griGS4 VNlbyfsYf/O1NZGoq5opsoFkCCsNsKEqXX8xDP3K7Xfj2KEr0UTYTNLBBJjXgFT2 F2bPa2VPaBJmNxcA0MGoFfxfaU8k9HEM5Y2OKyVg+iqZcUDGbWR2AAKX50AkM+2I Jh0ZRQ2YZ0vRKiodxbElBhNFO9p0XHCVWcI0AYNrfT6uIJDGsSvTBHQZ8xfuYjkI Cm17ylcmxz50ahtRdxRi+VrY0JQ5kD8mbcyhZoauI2WYw5XitGhdVGPbY6nTVdFp r8+I38PJTb7RVxReA6J0pgV/VCaDBx0= -----END CERTIFICATE-----Generated at Wed Sep 23 00:01:15 2026 by rpki-client