$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9155c0a5-59b2-3083-b6f4-a1b91d027937.roa File: 9155c0a5-59b2-3083-b6f4-a1b91d027937.roa (raw, json) Hash identifier: xxkAHM/sJnTm8SHyTrHiwHFx5mnTzhV2d+ESLcuwi4E= Subject key identifier: D4:FC:76:60:4A:F6:8F:CC:4F:23:4C:51:D4:C1:2C:DA:50:91:B3:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C778F6F55A03DAD28800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9155c0a5-59b2-3083-b6f4-a1b91d027937.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.34.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c7:78:f6:f5:5a:03:da:d2:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=258171ed-c3d8-496a-8b72-b23ba722c8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:63:08:39:b9:83:40:81:25:15:dd:5b:5e: 16:f6:9a:2e:50:84:dd:8d:93:b1:12:ff:17:03:58: 26:d0:87:ad:85:9e:08:83:60:54:58:07:54:5e:1e: 8b:f3:8a:f5:bc:53:f1:a3:23:ef:b3:b7:98:51:e7: 3d:98:7e:8f:15:fc:b3:dc:de:db:78:92:71:26:23: 79:fe:0b:32:59:fd:66:5d:8c:32:61:41:d1:a7:7a: 8c:d8:c1:e9:fd:68:62:6a:4c:5f:06:1c:e9:2e:6d: 52:8c:a6:96:9c:99:84:e4:1d:a5:d6:31:7b:df:0f: eb:84:fc:dd:8c:3a:19:a2:75:1f:5f:78:4d:25:0f: 6a:ac:ac:90:3a:aa:87:55:d8:a9:e9:ad:ee:cf:cb: 53:b4:9a:4d:d5:7b:d1:60:48:ea:2f:03:91:31:b4: af:8a:0b:d8:bb:28:a6:8f:e0:3a:4c:27:0c:ac:89: f4:6d:79:5d:f3:28:e9:ba:56:bf:26:75:20:3e:2b: 6c:45:a9:d9:1e:28:29:7d:df:3b:5a:bf:ce:40:f3: 23:1f:bb:8b:62:e3:a5:97:78:4e:14:b4:c8:e7:3f: a5:f8:87:c1:79:6c:e7:f6:f2:a0:b4:d2:b4:30:cc: ab:49:73:b1:10:8f:18:ec:2b:75:17:8f:e2:4b:20: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FC:76:60:4A:F6:8F:CC:4F:23:4C:51:D4:C1:2C:DA:50:91:B3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9155c0a5-59b2-3083-b6f4-a1b91d027937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6c:7e:df:00:19:eb:12:aa:f3:d0:0c:15:78:85:a1:c5:58: fc:ef:74:0a:5a:e6:f3:6a:c4:f9:50:29:d7:15:3f:2f:7b:4c: 28:b7:80:1b:ec:1e:04:0c:66:6b:16:81:39:58:0f:47:0c:9c: 20:ea:de:83:72:cf:17:4f:9e:79:2d:41:67:55:84:52:aa:96: 7b:1b:c2:db:0b:fe:91:d8:18:a7:93:75:eb:d8:c8:28:45:e5: 77:98:13:7f:f0:ff:ee:75:05:08:d6:08:e0:07:07:e1:b9:64: 76:24:e8:0a:49:07:36:6b:80:1d:ff:14:52:ef:b8:30:78:02: 6b:2a:03:b7:72:f7:6d:bc:a3:f9:95:a5:2a:e7:c2:f5:67:77: 05:d1:59:cf:d9:31:dd:ab:2b:19:27:5e:dd:49:5f:d5:55:50: 87:77:56:72:24:75:03:70:ab:6b:e7:4c:ff:69:d4:6a:fb:fb: 54:bf:63:81:2d:af:c3:91:0c:1b:aa:e7:d1:88:29:40:b6:6f: ef:18:a0:f3:2b:6f:d2:c5:dd:72:d3:a1:16:c6:1a:d6:88:18: 41:0a:bb:a9:42:f8:01:12:67:db:47:2a:cc:a0:9d:3a:0b:78: 28:49:7d:59:88:7b:a6:47:e5:e9:fb:97:9b:61:0a:c1:19:52: 57:23:cb:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8d49vVaA9rSiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MjU4MTcxZWQtYzNkOC00OTZhLThiNzItYjIzYmE3MjJjOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV5jCDm5g0CBJRXdW14W9pouUITdjZOxEv8X A1gm0IethZ4Ig2BUWAdUXh6L84r1vFPxoyPvs7eYUec9mH6PFfyz3N7beJJxJiN5 /gsyWf1mXYwyYUHRp3qM2MHp/WhiakxfBhzpLm1SjKaWnJmE5B2l1jF73w/rhPzd jDoZonUfX3hNJQ9qrKyQOqqHVdip6a3uz8tTtJpN1XvRYEjqLwORMbSvigvYuyim j+A6TCcMrIn0bXld8yjpula/JnUgPitsRanZHigpfd87Wr/OQPMjH7uLYuOll3hO FLTI5z+l+IfBeWzn9vKgtNK0MMyrSXOxEI8Y7Ct1F4/iSyA8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT8dmBK9o/MTyNMUdTBLNpQkbOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTE1NWMwYTUtNTliMi0z MDgzLWI2ZjQtYTFiOTFkMDI3OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhsft8AGesSqvPQDBV4haHFWPzvdApa5vNqxPlQKdcVPy97TCi3gBvs HgQMZmsWgTlYD0cMnCDq3oNyzxdPnnktQWdVhFKqlnsbwtsL/pHYGKeTdevYyChF 5XeYE3/w/+51BQjWCOAHB+G5ZHYk6ApJBzZrgB3/FFLvuDB4AmsqA7dy9228o/mV pSrnwvVndwXRWc/ZMd2rKxknXt1JX9VVUId3VnIkdQNwq2vnTP9p1Gr7+1S/Y4Et r8ORDBuq59GIKUC2b+8YoPMrb9LF3XLToRbGGtaIGEEKu6lC+AESZ9tHKsygnToL eChJfVmIe6ZH5en7l5thCsEZUlcjy4Y= -----END CERTIFICATE-----Generated at Tue Sep 22 00:09:55 2026 by rpki-client