$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6afbecd-1fee-3bee-bc9b-9aad50b046ec.roa File: a6afbecd-1fee-3bee-bc9b-9aad50b046ec.roa (raw, json) Hash identifier: wpcEQXIsIJzCAft6AoZt3V1WJX/T6jlfjnHXu7543bY= Subject key identifier: 23:32:72:AD:92:F4:45:B4:17:33:7B:7D:9F:7D:8A:94:FA:82:59:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47FA38A4CE38F1B4E8D900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6afbecd-1fee-3bee-bc9b-9aad50b046ec.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.39.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fa:38:a4:ce:38:f1:b4:e8:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=c2ed52b9-ccb2-48ac-a332-4bd024dbfcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:50:a4:3a:7a:86:3b:82:a1:2a:c9:43:24: 02:21:f0:ab:f6:3d:40:1f:7b:e0:ce:ca:dd:a3:7c: 28:02:19:7e:78:d8:7e:15:70:6e:d3:20:3c:da:1f: bd:67:ab:0f:ba:0f:26:65:e9:e2:05:05:3f:d2:23: 0b:9b:cf:0a:be:b3:10:09:42:83:7f:1d:26:dd:36: ca:a9:c1:a7:22:b6:ab:47:93:6b:6d:52:6b:a4:73: 4a:28:9b:9b:66:91:da:f8:60:ba:3d:49:0f:4b:28: e3:e2:f2:08:ef:3e:c9:2e:f2:79:b2:42:b9:bc:f7: d9:5e:ba:8e:1c:dd:cb:9d:ac:0d:9a:8b:13:3e:7c: 12:37:4a:c3:86:88:c8:d7:3f:ab:f1:0d:1b:ff:13: 31:d3:ab:a3:24:cc:1c:82:de:d4:a5:fa:05:30:f7: 86:82:e9:a4:7e:eb:00:7b:bd:8b:72:c7:6b:23:09: 61:7c:bb:f9:b1:05:bd:c1:a1:d5:52:4f:45:4e:6a: 30:41:9a:13:eb:ec:3e:35:81:61:33:5c:8d:25:8b: 08:1f:96:c3:b3:4d:54:72:c7:6f:16:b8:0e:27:8b: 59:c9:fa:eb:cc:c5:d8:8f:a7:57:fd:89:95:48:63: 37:2a:7c:1e:40:b8:d4:63:bc:61:b0:c7:a5:42:23: 9a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:32:72:AD:92:F4:45:B4:17:33:7B:7D:9F:7D:8A:94:FA:82:59:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6afbecd-1fee-3bee-bc9b-9aad50b046ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2c:f5:c8:0c:ba:a9:3a:b1:ae:11:d6:b4:cb:25:3a:9f:d5: b2:cc:4b:dd:cf:af:c2:27:cc:95:01:04:4a:bb:55:d9:a3:7a: 54:47:07:aa:c5:c7:54:22:2d:60:3c:5f:a1:2f:6f:f8:dd:2e: c1:64:ed:05:0f:47:5a:3d:31:ff:e1:5d:4d:12:da:1f:52:3b: 8c:1e:ea:b2:67:3d:48:59:b1:38:fd:62:27:0c:84:2b:76:8a: 14:52:a6:db:81:d3:51:0c:bd:dc:fb:6d:65:ed:97:b5:87:8b: 3a:94:74:d0:fe:e4:e5:54:dd:44:4d:e6:ef:d6:b3:a1:b5:62: ac:d1:b3:81:20:2b:15:ea:e3:6d:95:3b:86:36:ab:69:0b:67: 0b:79:7c:af:ec:53:21:84:4c:36:66:1d:a8:16:5a:83:6f:d0: bc:c6:4b:43:fb:ca:98:7e:98:18:4b:eb:8f:41:fe:d5:1c:cb: 34:66:ca:b5:33:24:31:7e:83:a0:4b:dd:bd:71:96:3b:88:e5: 58:d0:25:bc:91:d1:cd:30:16:07:28:e0:de:85:20:38:05:0b: 74:ab:8d:08:67:7c:18:6e:46:71:f6:c3:57:69:d8:43:ba:e2: b9:39:d8:f1:8d:bb:4c:f2:1a:29:de:d5:5e:21:2a:dd:dd:82: 84:fc:4e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/o4pM448bTo2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YzJlZDUyYjktY2NiMi00OGFjLWEzMzItNGJkMDI0ZGJmY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztJQpDp6hjuCoSrJQyQCIfCr9j1AH3vgzsrd o3woAhl+eNh+FXBu0yA82h+9Z6sPug8mZeniBQU/0iMLm88KvrMQCUKDfx0m3TbK qcGnIrarR5NrbVJrpHNKKJubZpHa+GC6PUkPSyjj4vII7z7JLvJ5skK5vPfZXrqO HN3LnawNmosTPnwSN0rDhojI1z+r8Q0b/xMx06ujJMwcgt7UpfoFMPeGgumkfusA e72LcsdrIwlhfLv5sQW9waHVUk9FTmowQZoT6+w+NYFhM1yNJYsIH5bDs01Ucsdv FrgOJ4tZyfrrzMXYj6dX/YmVSGM3KnweQLjUY7xhsMelQiOakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMycq2S9EW0FzN7fZ99ipT6gll7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTZhZmJlY2QtMWZlZS0z YmVlLWJjOWItOWFhZDUwYjA0NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMs9cgMuqk6sa4R1rTLJTqf1bLMS93Pr8InzJUBBEq7VdmjelRHB6rF x1QiLWA8X6Evb/jdLsFk7QUPR1o9Mf/hXU0S2h9SO4we6rJnPUhZsTj9YicMhCt2 ihRSptuB01EMvdz7bWXtl7WHizqUdND+5OVU3URN5u/Ws6G1YqzRs4EgKxXq422V O4Y2q2kLZwt5fK/sUyGETDZmHagWWoNv0LzGS0P7yph+mBhL649B/tUcyzRmyrUz JDF+g6BL3b1xljuI5VjQJbyR0c0wFgco4N6FIDgFC3SrjQhnfBhuRnH2w1dp2EO6 4rk52PGNu0zyGine1V4hKt3dgoT8TmU= -----END CERTIFICATE-----Generated at Tue Sep 22 09:53:30 2026 by rpki-client