$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1704768-8032-3b53-834b-e262d24b587c.roa File: a1704768-8032-3b53-834b-e262d24b587c.roa (raw, json) Hash identifier: rTXfBDlv1mIqT1oagnuOmd9M6WuTMQ+/rxdN7MtpLX0= Subject key identifier: 60:E1:9E:B6:EE:FF:F1:C1:68:12:EA:AF:4C:11:0B:A0:DA:74:81:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F1241DC326B1A408BB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1704768-8032-3b53-834b-e262d24b587c.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.38.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f1:24:1d:c3:26:b1:a4:08:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=71c0c6d4-47c5-44ae-acac-ebd9560220a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:aa:a3:09:ba:64:b8:5a:93:74:74:fc:92: 82:96:63:fe:86:92:63:c8:7b:30:1b:98:87:77:d9: d9:44:45:1e:40:e6:02:a6:f9:56:07:fe:7b:e3:87: 53:9c:0d:2f:e6:e9:9d:25:07:e2:21:60:8b:aa:37: 86:a7:1d:36:26:aa:a7:d2:e4:d3:36:97:d9:ef:98: e8:a4:6d:4e:f6:63:d6:9e:c7:84:cd:33:2f:68:32: 17:cc:44:a7:75:fc:c9:31:fc:e3:c3:a2:f3:9e:29: 72:cf:7c:dc:fe:97:96:7c:0c:cc:18:9b:81:a0:06: 35:44:47:07:20:e9:70:f3:2f:c9:ed:f3:6c:54:61: 64:b5:5a:37:0c:a1:17:c5:88:41:5c:fa:bb:14:89: 30:4a:76:fb:10:bd:9b:af:b7:63:c0:8a:05:13:28: 39:dc:fe:88:ef:8d:12:b1:4d:f0:ec:27:58:d0:20: d4:3a:36:a4:6e:e8:55:32:d9:0b:a0:13:a1:c5:67: 07:12:63:a6:5e:00:07:d7:c9:dd:26:97:5c:c3:93: 48:90:7b:f8:07:12:96:a8:71:67:96:12:e5:cb:26: 31:61:81:06:db:5f:45:e9:03:64:bc:9d:16:9b:0b: a7:9b:b8:4b:e0:da:85:92:77:b8:62:38:a8:b7:82: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E1:9E:B6:EE:FF:F1:C1:68:12:EA:AF:4C:11:0B:A0:DA:74:81:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1704768-8032-3b53-834b-e262d24b587c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:5a:85:e4:22:a1:06:7e:36:88:5a:4c:cc:7f:8d:2e:0c:a2: 70:98:59:72:b7:55:5a:d0:bd:cf:0e:8b:35:2a:e4:d0:92:fa: 54:6a:59:a7:bc:76:53:d6:b0:ca:2c:77:75:bf:67:9b:82:cf: dc:83:b7:a9:a3:da:9d:ab:1a:d1:02:25:5d:c4:51:b9:ee:af: f7:9e:68:fb:d9:3e:5e:4f:33:4f:7f:48:56:3f:b3:7d:85:89: f7:53:66:5d:a2:61:15:91:94:e0:3f:a8:f2:44:46:41:6d:8a: fb:c1:ed:12:cf:4a:25:a6:2a:90:d4:a7:ce:3a:45:af:0f:31: b3:b4:16:63:e4:ad:d4:7b:d7:04:3b:80:3e:ae:a9:9b:ee:f4: c4:7b:30:db:cc:34:31:34:b6:2d:ce:67:63:3b:8c:89:69:69: 7e:d6:24:de:3b:45:5f:2b:a9:8d:1d:e2:29:81:5f:7a:6c:99: 62:f5:f6:c8:2c:cc:32:1b:9a:d0:4e:cb:8e:83:8c:03:62:81: 9a:87:ef:0c:f8:f9:09:2c:2e:f0:7e:22:23:0d:44:91:c8:f5: f1:bf:f4:97:ad:a6:cb:54:61:55:2f:6b:f1:8d:dd:ca:bf:bb: 72:93:ed:ea:9e:65:55:46:4d:84:fe:03:e7:98:9d:d6:71:a6: d8:d7:f6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/EkHcMmsaQIuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NzFjMGM2ZDQtNDdjNS00NGFlLWFjYWMtZWJkOTU2MDIyMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Kqowm6ZLhak3R0/JKClmP+hpJjyHswG5iH d9nZREUeQOYCpvlWB/5744dTnA0v5umdJQfiIWCLqjeGpx02Jqqn0uTTNpfZ75jo pG1O9mPWnseEzTMvaDIXzESndfzJMfzjw6Lznilyz3zc/peWfAzMGJuBoAY1REcH IOlw8y/J7fNsVGFktVo3DKEXxYhBXPq7FIkwSnb7EL2br7djwIoFEyg53P6I740S sU3w7CdY0CDUOjakbuhVMtkLoBOhxWcHEmOmXgAH18ndJpdcw5NIkHv4BxKWqHFn lhLlyyYxYYEG219F6QNkvJ0Wmwunm7hL4NqFkne4Yjiot4J45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDhnrbu//HBaBLqr0wRC6DadIENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTE3MDQ3NjgtODAzMi0z YjUzLTgzNGItZTI2MmQyNGI1ODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFya9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFaheQioQZ+NohaTMx/jS4MonCYWXK3VVrQvc8OizUq5NCS+lRqWae8 dlPWsMosd3W/Z5uCz9yDt6mj2p2rGtECJV3EUbnur/eeaPvZPl5PM09/SFY/s32F ifdTZl2iYRWRlOA/qPJERkFtivvB7RLPSiWmKpDUp846Ra8PMbO0FmPkrdR71wQ7 gD6uqZvu9MR7MNvMNDE0ti3OZ2M7jIlpaX7WJN47RV8rqY0d4imBX3psmWL19sgs zDIbmtBOy46DjANigZqH7wz4+QksLvB+IiMNRJHI9fG/9JetpstUYVUva/GN3cq/ u3KT7eqeZVVGTYT+A+eYndZxptjX9jQ= -----END CERTIFICATE-----Generated at Tue Sep 22 01:57:42 2026 by rpki-client