$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaa84690-2b73-30c2-b612-190d54a1eefc.roa File: aaa84690-2b73-30c2-b612-190d54a1eefc.roa (raw, json) Hash identifier: SDGZbK/ZPoGWKEMd1EXv/VdMd/kb7gwGFxErDExl0Zc= Subject key identifier: B3:E3:36:45:37:55:E4:D9:C3:9C:BC:F1:75:87:7A:15:84:53:09:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4278209CFE16A88A4ADC0B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaa84690-2b73-30c2-b612-190d54a1eefc.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.48.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:20:9c:fe:16:a8:8a:4a:dc:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=dc17130c-3221-4218-b87f-544b85ec04f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:26:dc:d1:ed:b3:ff:52:8b:cd:95:5c:e9: ca:2e:4b:04:59:6b:ad:7a:6e:b2:59:58:0f:ac:d4: 70:b9:8b:d8:e0:c2:6f:ea:94:2d:be:fd:e8:e1:1c: d6:ba:4d:30:02:4c:f1:04:ea:fe:c7:db:5b:76:53: b1:09:95:c6:6c:ff:1e:c6:c4:00:35:a2:0c:9a:1d: b0:50:eb:43:62:de:0a:4e:8f:4e:70:76:7f:73:ab: db:70:01:1f:5b:27:96:df:0a:31:ce:70:4e:de:8e: 6c:86:14:30:76:dd:3b:ee:60:d8:e8:25:80:48:52: e1:21:71:5f:1d:f8:6e:90:57:bb:ec:32:77:a6:cb: fd:fc:13:d2:a3:71:38:91:d9:3b:fe:bc:cd:6a:fe: 7b:22:ec:9b:85:4e:d5:ef:73:f0:49:2f:1f:57:85: 1d:1e:53:9c:97:12:93:59:48:de:38:dd:56:a9:29: 5d:44:79:6a:78:0c:5e:a9:eb:39:94:a5:3a:08:89: c2:7e:69:b7:e9:73:2a:45:43:78:f4:ba:65:0d:15: fe:34:b9:6d:d1:f8:9f:25:59:33:b9:44:24:0f:de: ad:a3:f7:6c:4a:f8:b0:69:5d:d2:b0:db:ef:1c:b0: b2:b3:2c:d4:cf:f4:17:22:d2:8f:47:80:89:05:a9: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E3:36:45:37:55:E4:D9:C3:9C:BC:F1:75:87:7A:15:84:53:09:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aaa84690-2b73-30c2-b612-190d54a1eefc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ce:3b:39:cd:cb:e0:5e:2d:39:ea:69:01:4e:f9:8e:f9:b6: e8:27:23:d3:45:b0:18:a2:b5:26:93:4c:e6:bc:dc:28:46:d6: 25:56:b3:05:91:20:07:f6:f4:d8:9b:32:63:14:06:f2:91:81: 76:3f:fd:32:69:15:47:a4:7c:29:78:ac:73:07:36:4b:4f:9e: 2b:2e:80:0c:3f:ae:81:d1:55:07:cd:01:1c:76:e7:fe:00:02: 25:2a:05:9e:c1:c3:f9:51:4a:90:4a:ba:5b:2b:2d:cf:52:66: ec:83:30:da:f2:00:a7:1b:8c:65:81:ac:cb:15:54:1e:db:69: a9:92:38:65:e6:a7:07:bb:73:b3:ba:b9:f0:bc:78:7a:1a:fa: 4a:d1:c1:53:67:95:97:6e:b1:e0:61:99:87:82:ad:dd:e4:c5: ae:c7:60:49:6f:19:68:97:ba:33:ae:31:10:49:46:07:63:0a: 4f:31:6e:76:84:38:75:b1:a3:b0:52:86:32:57:d2:df:8e:9e: 4d:ff:88:62:88:9d:35:00:15:71:56:6f:c5:49:28:92:29:8a: c3:2c:0b:6a:d4:29:58:49:22:d5:24:af:20:f3:a4:74:b0:ce: 74:50:e0:00:f7:2c:cd:4a:9a:91:eb:0b:21:d5:02:6d:9e:5c: 6c:4d:4c:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeCCc/haoikrcC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZGMxNzEzMGMtMzIyMS00MjE4LWI4N2YtNTQ0Yjg1ZWMwNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHcm3NHts/9Si82VXOnKLksEWWutem6yWVgP rNRwuYvY4MJv6pQtvv3o4RzWuk0wAkzxBOr+x9tbdlOxCZXGbP8exsQANaIMmh2w UOtDYt4KTo9OcHZ/c6vbcAEfWyeW3woxznBO3o5shhQwdt077mDY6CWASFLhIXFf HfhukFe77DJ3psv9/BPSo3E4kdk7/rzNav57IuybhU7V73PwSS8fV4UdHlOclxKT WUjeON1WqSldRHlqeAxeqes5lKU6CInCfmm36XMqRUN49LplDRX+NLlt0fifJVkz uUQkD96to/dsSviwaV3SsNvvHLCysyzUz/QXItKPR4CJBanUCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPjNkU3VeTZw5y88XWHehWEUwkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWFhODQ2OTAtMmI3My0z MGMyLWI2MTItMTkwZDU0YTFlZWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbOOznNy+BeLTnqaQFO+Y75tugnI9NFsBiitSaTTOa83ChG1iVWswWR IAf29NibMmMUBvKRgXY//TJpFUekfCl4rHMHNktPnisugAw/roHRVQfNARx25/4A AiUqBZ7Bw/lRSpBKulsrLc9SZuyDMNryAKcbjGWBrMsVVB7baamSOGXmpwe7c7O6 ufC8eHoa+krRwVNnlZduseBhmYeCrd3kxa7HYElvGWiXujOuMRBJRgdjCk8xbnaE OHWxo7BShjJX0t+Onk3/iGKInTUAFXFWb8VJKJIpisMsC2rUKVhJItUkryDzpHSw znRQ4AD3LM1KmpHrCyHVAm2eXGxNTO8= -----END CERTIFICATE-----Generated at Tue Sep 22 16:49:33 2026 by rpki-client