$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a35f3386-5775-34c6-82b9-c019c927fffb.roa File: a35f3386-5775-34c6-82b9-c019c927fffb.roa (raw, json) Hash identifier: yk+20FFS/4B5t+FUt08I6afYnmopSXM6J6nGGq7R6Kg= Subject key identifier: 91:81:7D:7F:32:96:A6:C5:25:D8:1D:0C:83:5B:D4:55:40:BA:BD:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7CBBF77989167DE6A9400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a35f3386-5775-34c6-82b9-c019c927fffb.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.35.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:cb:bf:77:98:91:67:de:6a:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=c26ba0da-038b-4d45-b1c1-1da4e041aa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:07:4a:bb:5c:6a:c4:69:98:3e:d3:8f:79: ae:3a:37:39:de:b8:bf:2e:09:9f:d9:74:b6:0f:f8: 13:b9:bf:61:c9:ab:37:08:ee:b4:61:1e:40:90:b5: ae:ce:ca:ff:62:4d:9d:22:26:03:82:eb:b5:37:68: e2:e1:72:47:36:54:c7:5a:a3:69:d9:ea:42:6e:ba: b7:68:e0:f8:18:9a:f3:d8:70:95:96:03:b9:82:78: dd:25:db:61:5a:b4:eb:fe:df:6a:a9:2e:c6:c8:00: 80:7c:89:36:1e:79:66:4e:77:51:1e:cd:a0:a5:88: bc:74:94:79:65:ae:de:bd:94:ce:0c:07:09:c6:c4: b6:41:66:5f:50:ef:7f:38:47:01:d3:34:59:58:f8: 2d:b2:25:98:93:6d:b6:1b:f9:61:1f:cc:c1:8b:f3: 20:b6:97:18:d7:ea:25:01:08:ff:48:2d:09:46:5e: 47:47:3f:de:af:b8:21:20:31:df:eb:00:35:6f:35: ad:0c:7f:38:9b:09:01:94:94:b6:b4:04:2a:79:1d: 0a:9d:0f:06:c7:bb:e2:f5:65:2d:a3:2b:cc:e3:28: 9b:75:d7:a2:3b:12:11:6e:24:3b:fc:5b:51:13:e2: a4:a1:e9:c2:19:45:2c:db:c2:40:70:89:f6:da:92: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:81:7D:7F:32:96:A6:C5:25:D8:1D:0C:83:5B:D4:55:40:BA:BD:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a35f3386-5775-34c6-82b9-c019c927fffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:89:9a:fb:89:0b:91:d3:af:04:04:4b:ce:4d:da:f8:5c:ed: a5:9f:5d:f7:ea:38:db:35:43:97:67:03:c6:1f:89:a3:f5:d2: 28:51:4a:00:d7:3c:ba:6a:4e:b9:1e:91:f0:74:9f:36:4c:d6: e0:99:2f:2c:c1:e3:42:e5:88:c1:14:03:93:91:0b:be:1c:0c: 79:09:70:c8:c0:11:51:b7:dc:d2:be:bd:23:6f:77:30:e4:bd: 0c:83:7e:38:82:2f:8f:a6:d0:d8:73:7b:77:74:b6:3d:ed:e7: 3e:a0:8c:9a:07:a6:d4:d2:17:39:7a:52:28:9d:ed:de:df:7a: 2d:d0:1d:54:9f:74:49:cb:24:53:f7:43:e8:18:ab:9d:00:52: 01:11:fa:0d:3e:29:31:f8:12:51:db:05:7d:ca:4c:d6:62:bf: 41:98:2c:c4:ff:d1:d2:b6:ef:5f:bd:3d:bc:73:18:ef:bf:4c: 90:b2:66:a5:74:0f:06:20:7a:b6:23:4b:a0:ab:bc:3e:cb:67: 92:a7:0b:1b:b9:26:99:04:74:bb:93:85:57:41:8a:5f:fe:b9: 6b:83:cc:33:78:79:4e:dc:d7:0d:99:aa:f2:a3:fc:a4:9e:a0: 25:dd:52:e6:f7:36:21:87:c6:5e:ff:93:a6:1e:d4:57:45:c2: 41:59:12:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8u/d5iRZ95qlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk YzI2YmEwZGEtMDM4Yi00ZDQ1LWIxYzEtMWRhNGUwNDFhYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WkHSrtcasRpmD7Tj3muOjc53ri/Lgmf2XS2 D/gTub9hyas3CO60YR5AkLWuzsr/Yk2dIiYDguu1N2ji4XJHNlTHWqNp2epCbrq3 aOD4GJrz2HCVlgO5gnjdJdthWrTr/t9qqS7GyACAfIk2HnlmTndRHs2gpYi8dJR5 Za7evZTODAcJxsS2QWZfUO9/OEcB0zRZWPgtsiWYk222G/lhH8zBi/MgtpcY1+ol AQj/SC0JRl5HRz/er7ghIDHf6wA1bzWtDH84mwkBlJS2tAQqeR0KnQ8Gx7vi9WUt oyvM4yibddeiOxIRbiQ7/FtRE+KkoenCGUUs28JAcIn22pJQxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGBfX8ylqbFJdgdDINb1FVAur1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTM1ZjMzODYtNTc3NS0z NGM2LTgyYjktYzAxOWM5MjdmZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaJmvuJC5HTrwQES85N2vhc7aWfXffqONs1Q5dnA8YfiaP10ihRSgDX PLpqTrkekfB0nzZM1uCZLyzB40LliMEUA5ORC74cDHkJcMjAEVG33NK+vSNvdzDk vQyDfjiCL4+m0Nhze3d0tj3t5z6gjJoHptTSFzl6Uiid7d7fei3QHVSfdEnLJFP3 Q+gYq50AUgER+g0+KTH4ElHbBX3KTNZiv0GYLMT/0dK271+9PbxzGO+/TJCyZqV0 DwYgerYjS6CrvD7LZ5KnCxu5JpkEdLuThVdBil/+uWuDzDN4eU7c1w2ZqvKj/KSe oCXdUub3NiGHxl7/k6Ye1FdFwkFZEjc= -----END CERTIFICATE-----Generated at Mon Sep 21 18:42:52 2026 by rpki-client