$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/948bc23f-05df-35b3-96a1-0a623a2da157.roa File: 948bc23f-05df-35b3-96a1-0a623a2da157.roa (raw, json) Hash identifier: QVjyuWk/9fkVNrKZvIaaWlZ5y5ccf7nSQxggXAZ0PfU= Subject key identifier: B4:50:3E:34:27:D6:5E:6C:63:FB:BA:AE:3B:2D:83:84:37:39:FD:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C860677D02739EC94840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/948bc23f-05df-35b3-96a1-0a623a2da157.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.35.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c8:60:67:7d:02:73:9e:c9:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=3acabf36-daff-4554-a513-53d6bea9436c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b5:ce:c2:23:58:a3:e0:dc:0d:49:79:4a:2e: 37:25:03:b3:9d:6c:63:d5:0b:46:84:0f:d8:e3:c4: 37:46:e7:50:b0:9a:9a:25:e1:0a:c0:39:72:f1:04: ce:1f:30:06:43:04:a2:8c:65:57:fa:16:e9:78:7c: 06:55:98:43:55:df:d3:74:1f:be:38:12:4d:be:95: 72:12:8b:12:9f:3f:af:e8:c2:6f:4f:3c:38:c5:31: e1:54:71:da:43:88:9b:0d:69:3a:e9:fd:aa:c8:48: 98:fb:2b:10:57:a9:6d:3f:b6:17:61:b8:37:76:e3: de:fd:26:de:7c:42:3d:c0:73:20:b4:9d:4f:66:91: 8e:7a:9e:15:31:14:82:d4:cd:a1:ab:91:48:22:68: 19:19:55:13:72:e8:df:bc:5c:89:cf:d2:0e:59:3e: b5:71:16:63:3b:60:6f:51:39:24:36:4d:36:b0:c8: 5c:24:5b:ba:23:0f:45:32:5c:80:70:66:b8:1a:2e: ed:c5:e2:1e:55:eb:b0:d0:0e:09:b4:fc:38:80:ce: 20:ed:3c:e0:ef:a9:42:5c:29:0d:69:63:8f:92:8a: 63:3d:ac:77:aa:5b:86:d4:46:58:d9:01:fa:06:2d: 66:11:7d:2e:fb:d8:f8:12:39:2b:b1:2c:10:34:b2: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:50:3E:34:27:D6:5E:6C:63:FB:BA:AE:3B:2D:83:84:37:39:FD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/948bc23f-05df-35b3-96a1-0a623a2da157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3d:fc:c6:0c:d1:2b:9d:b9:53:4e:e9:1a:0f:80:cb:ef:9d: 1b:e0:c6:9f:92:cd:d4:08:7e:27:18:3d:b7:86:35:45:e7:23: a5:ae:34:d5:58:00:48:53:7c:ef:a0:05:42:96:74:b9:a0:09: 30:d0:c7:33:00:a1:58:e5:fd:1a:28:d0:b1:4c:91:5c:3d:ad: ec:51:9a:66:f1:e9:00:40:80:11:14:f9:9b:47:5f:bf:cc:37: c1:38:99:46:bf:ea:50:54:ca:34:30:2e:20:d4:8f:c7:a4:90: eb:07:21:ef:6d:4a:22:2e:cd:fe:a2:b5:ba:06:56:1e:42:d6: e8:32:34:43:ca:62:09:01:43:84:c2:e8:91:99:8a:1c:cf:b7: 9d:b6:6a:81:d4:ce:6d:c8:e8:0c:12:1c:b2:b5:fd:52:fc:06: 8f:a1:1e:05:ff:3a:7b:a7:54:4b:98:53:16:3a:2c:11:d5:18: 3f:49:95:ad:6a:cc:76:a7:49:49:ce:ac:61:75:90:3a:e1:91: 37:c6:4a:0b:fb:79:b7:48:01:de:0c:12:9e:2c:f3:47:52:2b: db:81:67:12:f4:90:26:c2:74:39:ce:54:94:f1:62:e8:71:a4: 03:49:4a:0d:62:fb:a7:ba:92:32:3d:1a:2e:20:e8:62:31:b9: 05:d9:70:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8hgZ30Cc57JSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk M2FjYWJmMzYtZGFmZi00NTU0LWE1MTMtNTNkNmJlYTk0MzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLXOwiNYo+DcDUl5Si43JQOznWxj1QtGhA/Y 48Q3RudQsJqaJeEKwDly8QTOHzAGQwSijGVX+hbpeHwGVZhDVd/TdB++OBJNvpVy EosSnz+v6MJvTzw4xTHhVHHaQ4ibDWk66f2qyEiY+ysQV6ltP7YXYbg3duPe/Sbe fEI9wHMgtJ1PZpGOep4VMRSC1M2hq5FIImgZGVUTcujfvFyJz9IOWT61cRZjO2Bv UTkkNk02sMhcJFu6Iw9FMlyAcGa4Gi7txeIeVeuw0A4JtPw4gM4g7Tzg76lCXCkN aWOPkopjPax3qluG1EZY2QH6Bi1mEX0u+9j4EjkrsSwQNLI01wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRQPjQn1l5sY/u6rjstg4Q3Of3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQ4YmMyM2YtMDVkZi0z NWIzLTk2YTEtMGE2MjNhMmRhMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc9/MYM0SuduVNO6RoPgMvvnRvgxp+SzdQIficYPbeGNUXnI6WuNNVY AEhTfO+gBUKWdLmgCTDQxzMAoVjl/Roo0LFMkVw9rexRmmbx6QBAgBEU+ZtHX7/M N8E4mUa/6lBUyjQwLiDUj8ekkOsHIe9tSiIuzf6itboGVh5C1ugyNEPKYgkBQ4TC 6JGZihzPt522aoHUzm3I6AwSHLK1/VL8Bo+hHgX/OnunVEuYUxY6LBHVGD9Jla1q zHanSUnOrGF1kDrhkTfGSgv7ebdIAd4MEp4s80dSK9uBZxL0kCbCdDnOVJTxYuhx pANJSg1i+6e6kjI9Gi4g6GIxuQXZcOQ= -----END CERTIFICATE-----Generated at Sat Sep 26 12:13:41 2026 by rpki-client