$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c191705-cd04-374e-94ba-a407f5c2a3bb.roa File: 8c191705-cd04-374e-94ba-a407f5c2a3bb.roa (raw, json) Hash identifier: zAgJOohuBj1UbM7fbmoCDTyH+I/M75kGP1fcYY7ha78= Subject key identifier: A1:65:AC:01:91:38:5C:8C:0C:9B:A8:A1:29:1C:A9:30:7F:7E:AC:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD704DEE1910A8FB5FC400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c191705-cd04-374e-94ba-a407f5c2a3bb.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.44.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:70:4d:ee:19:10:a8:fb:5f:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=53194ca1-d0ae-49a7-aa42-6aa2fbf1b134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2f:cf:35:1e:2d:57:a3:0e:9f:7e:2e:f8:8f: 1f:dd:d0:5c:e1:12:6a:d6:67:92:52:5f:2c:de:19: 28:39:95:f2:51:20:1c:86:fd:35:08:98:72:aa:f4: e6:4b:02:58:23:ff:8f:e3:b4:a3:49:92:ae:6f:9b: df:ee:a2:bf:e6:e7:51:64:38:27:2b:52:5e:56:e4: c0:c3:37:0b:eb:9c:57:34:c2:8d:32:72:69:18:c9: db:6f:55:2d:9f:d9:75:69:c5:e8:b5:da:16:2b:8a: 6b:e4:e0:58:c8:5c:07:c9:33:ca:b7:81:d8:1a:03: 93:d7:4e:31:4f:4e:f1:4b:6a:05:62:cf:a3:15:43: 0a:19:3a:92:a6:f7:f6:04:38:24:1b:9c:44:4d:2e: ce:9f:ff:6a:fc:1d:a9:cf:e2:64:f4:e3:d5:24:17: 92:11:0a:c0:fa:66:0e:cf:fb:c4:48:67:ef:15:05: 5a:79:9b:77:d8:2b:69:5f:72:be:52:ef:7a:0f:db: 6d:a2:2d:ae:12:c7:eb:c5:e4:8e:ba:10:11:a1:b5: f4:63:60:3e:37:d9:f7:81:61:a8:b2:b7:21:16:30: af:21:8a:81:74:40:ee:32:f5:e3:9d:c2:62:76:66: fc:5e:5b:48:c8:98:7e:ba:c2:30:32:95:a3:bb:96: 89:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:65:AC:01:91:38:5C:8C:0C:9B:A8:A1:29:1C:A9:30:7F:7E:AC:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c191705-cd04-374e-94ba-a407f5c2a3bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:4b:50:64:be:95:97:aa:bc:6f:aa:f0:f2:f0:6e:03:b7:16: c5:a2:b0:f7:c5:e1:4e:9e:15:81:bb:0d:ad:d5:7a:fb:37:25: b6:ca:fa:b5:19:9a:7a:b7:62:df:1f:fe:b9:fe:65:cb:55:a0: 19:ec:24:b1:ad:b6:7f:f7:af:be:c3:c1:86:e9:f5:d0:90:6c: 62:79:47:c5:fa:78:da:ab:49:80:ae:53:91:24:67:d1:b7:41: 22:8c:13:a0:c6:26:83:65:d4:3d:b1:0e:bb:17:b0:b6:61:60: e8:62:a4:33:e5:47:ee:a1:36:bd:9f:2b:0f:5f:c8:d2:52:77: 9b:07:66:52:62:0d:ad:52:21:f7:13:ab:c9:72:19:d5:fb:8f: 35:7d:6f:31:5a:b7:de:b5:89:ac:44:6c:29:a2:48:29:a9:82: 62:0f:c8:d5:8d:ae:4d:af:d2:db:6b:0c:4b:a9:d2:6e:be:71: 38:d2:e3:a8:06:cc:26:86:77:59:aa:f6:b0:9f:ed:f1:3c:f0: 31:23:5a:20:26:40:99:1b:e9:fa:50:36:33:48:81:e8:96:57: 7b:4c:91:0a:45:58:5f:03:97:41:70:77:c8:c3:96:65:85:a3: 5b:d6:d6:52:6b:f6:57:c7:b1:4b:71:5b:b8:e2:ee:db:77:22: 43:b2:ce:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rXBN7hkQqPtfxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NTMxOTRjYTEtZDBhZS00OWE3LWFhNDItNmFhMmZiZjFiMTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS/PNR4tV6MOn34u+I8f3dBc4RJq1meSUl8s 3hkoOZXyUSAchv01CJhyqvTmSwJYI/+P47SjSZKub5vf7qK/5udRZDgnK1JeVuTA wzcL65xXNMKNMnJpGMnbb1Utn9l1acXotdoWK4pr5OBYyFwHyTPKt4HYGgOT104x T07xS2oFYs+jFUMKGTqSpvf2BDgkG5xETS7On/9q/B2pz+Jk9OPVJBeSEQrA+mYO z/vESGfvFQVaeZt32CtpX3K+Uu96D9ttoi2uEsfrxeSOuhARobX0Y2A+N9n3gWGo srchFjCvIYqBdEDuMvXjncJidmb8XltIyJh+usIwMpWju5aJawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFlrAGROFyMDJuooSkcqTB/fqxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMxOTE3MDUtY2QwNC0z NzRlLTk0YmEtYTQwN2Y1YzJhM2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyxvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxLUGS+lZeqvG+q8PLwbgO3FsWisPfF4U6eFYG7Da3Vevs3JbbK+rUZ mnq3Yt8f/rn+ZctVoBnsJLGttn/3r77DwYbp9dCQbGJ5R8X6eNqrSYCuU5EkZ9G3 QSKME6DGJoNl1D2xDrsXsLZhYOhipDPlR+6hNr2fKw9fyNJSd5sHZlJiDa1SIfcT q8lyGdX7jzV9bzFat961iaxEbCmiSCmpgmIPyNWNrk2v0ttrDEup0m6+cTjS46gG zCaGd1mq9rCf7fE88DEjWiAmQJkb6fpQNjNIgeiWV3tMkQpFWF8Dl0Fwd8jDlmWF o1vW1lJr9lfHsUtxW7ji7tt3IkOyzks= -----END CERTIFICATE-----Generated at Tue Sep 22 00:37:24 2026 by rpki-client