$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac8a2b57-c791-3476-993e-39ff9f5fd909.roa File: ac8a2b57-c791-3476-993e-39ff9f5fd909.roa (raw, json) Hash identifier: oSsx9fmpYweuUFbeNY0K36ahzCmRcSm15zTVaoCOsbg= Subject key identifier: 7E:1C:0C:E8:AD:52:35:55:B1:C4:5D:F7:91:54:B1:8C:57:77:1A:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47FD7FC9C0A733FFB39BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac8a2b57-c791-3476-993e-39ff9f5fd909.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.42.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:fd:7f:c9:c0:a7:33:ff:b3:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=5e69b690-0b96-43e6-9f79-ab2f1d5e13a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:96:22:5a:3f:c9:e0:6f:b5:bc:a1:e2:82: cb:ca:2d:8a:0d:b0:a2:4c:27:17:57:1a:36:6e:ef: 2e:cf:76:37:93:19:17:76:d8:27:34:a3:f3:33:44: e5:70:fe:34:65:62:56:c7:b3:b6:bf:d0:51:71:de: 40:41:d6:6f:9f:c2:ad:8c:e3:6d:58:3a:a6:87:bc: d7:91:ad:6b:c3:1e:cc:85:53:c1:05:ca:5c:6d:0c: a1:ea:39:58:b5:0b:53:b3:15:5e:ae:54:bd:bb:97: 33:d8:7d:19:38:0e:45:b4:f0:01:17:d0:69:b1:73: 93:20:fb:0e:80:f3:dc:aa:8e:c2:e1:41:45:42:1f: 5a:5f:44:62:bf:d5:0e:62:8f:49:ac:76:77:36:b5: 7f:53:5c:71:81:4a:40:aa:08:7f:64:eb:b3:6b:5b: 10:d1:2c:e2:d3:9b:bc:19:f2:92:1f:e4:bf:e8:c7: cf:90:e4:f3:6f:e7:29:65:75:b1:b1:99:d3:e5:ed: 1b:1f:64:84:fb:ce:31:8e:90:77:c2:78:2d:ab:5a: 68:e1:c9:30:90:54:e6:50:60:77:d7:16:64:37:1b: 8b:53:29:85:38:7c:c8:77:fe:83:e7:28:ec:7c:43: fa:f0:35:fb:25:d7:a6:7a:44:64:ec:ce:6b:65:56: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1C:0C:E8:AD:52:35:55:B1:C4:5D:F7:91:54:B1:8C:57:77:1A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac8a2b57-c791-3476-993e-39ff9f5fd909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5a:a0:36:ec:ae:f3:62:b3:e7:25:fc:2b:77:7c:fc:66:c3: ed:5d:c8:89:4b:63:b4:51:03:0b:e0:55:03:8f:c1:73:75:be: 6f:23:1b:0c:c1:c3:22:57:45:06:28:c8:d7:aa:ff:ac:2d:67: 86:4a:cc:f3:4c:34:f1:e4:d4:c0:db:e8:f0:eb:05:91:d9:2c: 9f:2e:cd:9c:ef:96:64:b1:8c:50:a7:ad:41:bb:fa:d7:8c:23: cb:9c:95:a9:9c:fd:cd:f0:17:b8:5d:75:75:b0:ee:48:ad:16: 6b:af:9f:15:81:ec:9d:01:e9:2c:cc:37:80:bb:30:aa:12:3e: 0c:cf:74:00:d2:fd:6f:0f:86:6a:55:5d:cb:f5:66:96:3a:a8: 57:96:a5:d0:b5:a7:a8:cb:f2:b0:49:3e:b3:ed:c5:39:48:7b: 21:3b:c4:43:83:07:eb:05:c7:be:a9:76:7a:cb:8f:0c:c3:f5: b2:c8:51:6b:db:ca:10:a9:00:ce:91:11:d7:40:82:dd:bd:03: 53:88:d5:71:d4:d6:80:1a:ac:58:2e:7e:e3:f1:da:ff:bf:0d: c8:94:d8:84:cc:7d:f1:09:12:fe:c8:5c:d3:ec:21:51:19:78: de:74:7f:09:1b:2e:2a:e7:1a:a4:13:2c:90:11:ee:c8:2e:5f: ab:7e:b9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/1/ycCnM/+zm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NWU2OWI2OTAtMGI5Ni00M2U2LTlmNzktYWIyZjFkNWUxM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOiWIlo/yeBvtbyh4oLLyi2KDbCiTCcXVxo2 bu8uz3Y3kxkXdtgnNKPzM0TlcP40ZWJWx7O2v9BRcd5AQdZvn8KtjONtWDqmh7zX ka1rwx7MhVPBBcpcbQyh6jlYtQtTsxVerlS9u5cz2H0ZOA5FtPABF9BpsXOTIPsO gPPcqo7C4UFFQh9aX0Riv9UOYo9JrHZ3NrV/U1xxgUpAqgh/ZOuza1sQ0Szi05u8 GfKSH+S/6MfPkOTzb+cpZXWxsZnT5e0bH2SE+84xjpB3wngtq1po4ckwkFTmUGB3 1xZkNxuLUymFOHzId/6D5yjsfEP68DX7JdemekRk7M5rZVbXcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4cDOitUjVVscRd95FUsYxXdxozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWM4YTJiNTctYzc5MS0z NDc2LTk5M2UtMzlmZjlmNWZkOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFypQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxaoDbsrvNis+cl/Ct3fPxmw+1dyIlLY7RRAwvgVQOPwXN1vm8jGwzB wyJXRQYoyNeq/6wtZ4ZKzPNMNPHk1MDb6PDrBZHZLJ8uzZzvlmSxjFCnrUG7+teM I8uclamc/c3wF7hddXWw7kitFmuvnxWB7J0B6SzMN4C7MKoSPgzPdADS/W8PhmpV Xcv1ZpY6qFeWpdC1p6jL8rBJPrPtxTlIeyE7xEODB+sFx76pdnrLjwzD9bLIUWvb yhCpAM6REddAgt29A1OI1XHU1oAarFgufuPx2v+/DciU2ITMffEJEv7IXNPsIVEZ eN50fwkbLirnGqQTLJAR7sguX6t+uVA= -----END CERTIFICATE-----Generated at Tue Sep 22 12:39:29 2026 by rpki-client