$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fc619d8-416f-3d8c-a33c-620d0a4b079c.roa File: 9fc619d8-416f-3d8c-a33c-620d0a4b079c.roa (raw, json) Hash identifier: aHBG+S8qySCyKfct5ZQXcX4sHRKDDXQdxrnhh79tbfU= Subject key identifier: DF:7F:A9:F0:6E:72:EF:B1:17:8F:81:1B:CC:EC:A2:B8:6A:3B:D5:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F02423AC1EA0D006F0279E700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fc619d8-416f-3d8c-a33c-620d0a4b079c.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 16625 IP address blocks: 23.211.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:3a:c1:ea:0d:00:6f:02:79:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=7b8d8928-f5c5-4cdc-ae64-dd8ffd8fb867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:88:28:48:b3:5c:df:ba:31:e5:aa:88:ac: b1:d1:55:44:f7:c8:e0:a1:c2:0b:2f:17:af:8a:bb: d3:20:17:fc:44:ad:81:76:10:53:89:aa:b4:f1:52: cd:30:32:af:8e:77:17:b6:c3:4a:ef:ec:0a:90:cd: 21:22:f6:99:4f:67:39:b4:0d:8f:14:0b:ad:a9:f3: 6e:6c:08:63:4c:73:89:e6:13:21:9d:60:d1:46:cb: 34:fa:3b:65:cb:b7:6a:74:45:42:b8:55:a1:df:b3: 84:a0:30:8d:f6:89:9c:dd:2c:ef:60:4f:04:fc:14: c8:cf:99:df:39:2a:51:dc:c2:fa:c3:e6:f1:53:35: 44:da:05:f0:cb:88:af:be:4b:6d:52:8c:0c:b9:d1: 7b:ad:61:2d:95:71:cb:eb:61:27:f9:5d:b3:05:43: 86:c9:bf:29:df:0a:ad:22:8a:3f:1a:ad:80:75:a5: 5f:05:98:76:6e:87:8e:28:c9:79:40:25:77:87:14: 13:a9:63:e9:b4:d5:45:1d:03:89:28:93:13:50:f2: de:19:b9:d1:27:03:57:b1:fa:57:cc:de:dc:10:f5: 25:ab:a2:11:5f:15:08:d0:a4:79:ff:30:5c:c0:94: cc:86:ca:b9:93:2c:07:e7:67:d9:da:7d:a8:96:cf: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7F:A9:F0:6E:72:EF:B1:17:8F:81:1B:CC:EC:A2:B8:6A:3B:D5:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fc619d8-416f-3d8c-a33c-620d0a4b079c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:fe:52:9d:d8:f1:48:24:6d:79:ab:49:f0:e7:90:81:90:73: 86:16:13:7e:46:40:77:f7:f3:42:09:4e:80:40:8e:b1:08:d6: de:e7:57:a6:8c:35:1d:95:54:b6:f0:9c:da:6f:33:83:dc:92: 7d:7a:4a:ba:63:3c:ea:6e:62:01:61:23:16:0c:e2:c6:8f:9a: 04:07:41:1c:e6:4b:62:97:37:96:69:1b:72:45:51:bc:1c:4d: ee:78:7a:9c:82:5d:3b:94:0c:26:5a:bb:69:d8:11:45:83:91: f9:2c:af:c2:b3:7c:69:2e:23:81:f7:62:70:70:36:6e:ca:14: f3:bb:b0:a6:9f:61:1c:bb:2a:de:c0:11:0d:6b:5e:20:90:a6: 5b:0a:50:46:c7:6a:8f:c2:6d:9c:56:d8:46:55:6e:6d:ad:fc: 08:a4:a5:cf:ba:ff:46:07:75:20:26:77:aa:54:b8:85:65:6d: 58:5c:4a:ea:52:67:08:b1:16:5f:c7:62:e3:fe:f2:a8:1d:b9: dd:0e:85:db:c2:0f:f9:c7:4d:06:0c:c9:12:41:e8:a8:bf:c2: a7:72:8f:6a:c7:3a:79:9c:0f:45:06:d7:76:0d:ae:8f:e4:2d: 36:07:ad:df:54:ff:a0:33:bc:4e:d4:d5:f2:9e:1a:d2:f3:7e: 1c:1d:49:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjrB6g0AbwJ55wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk N2I4ZDg5MjgtZjVjNS00Y2RjLWFlNjQtZGQ4ZmZkOGZiODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgOIKEizXN+6MeWqiKyx0VVE98jgocILLxev irvTIBf8RK2BdhBTiaq08VLNMDKvjncXtsNK7+wKkM0hIvaZT2c5tA2PFAutqfNu bAhjTHOJ5hMhnWDRRss0+jtly7dqdEVCuFWh37OEoDCN9omc3SzvYE8E/BTIz5nf OSpR3ML6w+bxUzVE2gXwy4ivvkttUowMudF7rWEtlXHL62En+V2zBUOGyb8p3wqt Ioo/Gq2AdaVfBZh2boeOKMl5QCV3hxQTqWPptNVFHQOJKJMTUPLeGbnRJwNXsfpX zN7cEPUlq6IRXxUI0KR5/zBcwJTMhsq5kywH52fZ2n2ols/PIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9/qfBucu+xF4+BG8zsorhqO9UeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZjNjE5ZDgtNDE2Zi0z ZDhjLWEzM2MtNjIwZDBhNGIwNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9MwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb+Up3Y8UgkbXmrSfDnkIGQc4YWE35GQHf380IJToBAjrEI1t7nV6aM NR2VVLbwnNpvM4Pckn16SrpjPOpuYgFhIxYM4saPmgQHQRzmS2KXN5ZpG3JFUbwc Te54epyCXTuUDCZau2nYEUWDkfksr8KzfGkuI4H3YnBwNm7KFPO7sKafYRy7Kt7A EQ1rXiCQplsKUEbHao/CbZxW2EZVbm2t/Aikpc+6/0YHdSAmd6pUuIVlbVhcSupS ZwixFl/HYuP+8qgdud0OhdvCD/nHTQYMyRJB6Ki/wqdyj2rHOnmcD0UG13YNro/k LTYHrd9U/6AzvE7U1fKeGtLzfhwdSXk= -----END CERTIFICATE-----Generated at Tue Sep 22 14:00:51 2026 by rpki-client