$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5841c8e-8689-3f3a-94bb-1cd2514ddf8d.roa File: b5841c8e-8689-3f3a-94bb-1cd2514ddf8d.roa (raw, json) Hash identifier: nKZCwklnvQ7GKuqJtLp7Dxuo6X7a9RkN5KVC8b2Oa6s= Subject key identifier: BD:DE:E6:9B:3A:D1:C7:31:61:79:47:8C:52:6F:6A:D8:E0:CA:8E:0B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C613F5AC88C5D16CE380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5841c8e-8689-3f3a-94bb-1cd2514ddf8d.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 24319 IP address blocks: 23.43.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c6:13:f5:ac:88:c5:d1:6c:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=2a0e4af4-956a-4a65-b3da-7afd83adeded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:f2:2b:9e:32:b4:83:ce:9f:89:bc:f5:ca: 49:77:cf:05:c6:50:8e:a4:f9:8c:ea:5d:69:67:56: cd:a4:cd:db:51:26:82:b3:1a:2c:eb:1e:53:85:30: e0:33:49:56:3e:b8:f9:a6:53:8b:b1:73:80:a1:61: 3a:5c:17:3e:5a:fe:cf:49:25:47:b2:bc:4d:39:24: 52:c2:ef:d8:c5:0c:81:14:2f:86:74:4c:05:4f:ed: 94:f4:85:32:73:67:62:30:14:8a:dc:67:8a:a2:92: b4:48:df:b7:68:1b:5c:86:b3:97:2b:99:76:7f:7b: bd:0a:d5:01:23:8b:3e:85:9d:11:21:b0:43:1f:75: bc:9d:c7:b1:27:53:b7:4d:ed:86:08:f9:d0:9e:46: ca:fb:92:9a:b7:80:50:40:6d:61:91:93:0a:6c:fa: 85:29:e6:4c:06:05:78:d7:43:9d:6d:84:68:27:7f: c0:73:f7:0b:57:c4:02:1a:e2:32:91:07:1d:15:13: b3:2f:c3:93:30:e8:5d:a7:ee:d2:2a:cf:11:4a:0d: 61:46:87:65:1f:ee:06:22:de:a4:59:77:c9:a0:8d: f2:5f:07:e8:d0:ca:ab:af:9e:45:9a:ed:13:a7:41: 79:6c:4b:47:67:64:05:a3:4c:20:b6:2e:45:43:09: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DE:E6:9B:3A:D1:C7:31:61:79:47:8C:52:6F:6A:D8:E0:CA:8E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5841c8e-8689-3f3a-94bb-1cd2514ddf8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2b:dc:91:5a:68:f8:68:71:7c:5b:8d:73:0d:87:c8:05:9f: 70:8e:a0:88:62:82:c4:fe:ae:f4:7f:aa:55:dd:1c:24:b8:7a: 37:9d:ad:f4:70:35:5e:35:f4:e6:5a:48:32:9b:dc:e9:7e:f9: cb:6d:61:b8:76:fe:ea:58:63:1a:a6:64:e8:4f:1a:b4:a4:3f: 9d:a8:9e:79:f8:f3:ec:f9:6d:1f:6f:21:fd:54:eb:37:4b:d8: 6b:3d:f6:f1:dc:bf:fd:15:d7:75:33:79:aa:57:16:66:55:34: b8:53:d9:c4:35:87:9b:b9:f9:69:bb:10:d0:72:34:28:30:26: 6a:49:ff:6b:26:2c:bf:c5:95:bf:37:16:6e:e6:d9:4b:0c:0d: 7f:b1:83:85:9e:e1:cf:a7:1f:4f:84:44:cb:41:1f:02:71:4b: 2b:16:40:ce:82:73:63:3c:fb:ad:97:99:7a:90:0c:10:89:91: bb:b1:ee:76:73:42:7e:75:eb:34:1e:c5:1f:75:59:cf:78:36: 68:c7:81:70:82:28:68:20:17:e7:9a:6e:d2:38:93:30:97:c7: ca:3f:44:34:d3:8d:67:ac:ee:67:ae:db:2e:7c:9e:80:17:fc: cb:06:38:aa:38:03:b0:dd:4b:03:c8:ea:b1:d5:14:3d:64:37: 39:15:e3:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98YT9ayIxdFs44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MmEwZTRhZjQtOTU2YS00YTY1LWIzZGEtN2FmZDgzYWRlZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzfyK54ytIPOn4m89cpJd88FxlCOpPmM6l1p Z1bNpM3bUSaCsxos6x5ThTDgM0lWPrj5plOLsXOAoWE6XBc+Wv7PSSVHsrxNOSRS wu/YxQyBFC+GdEwFT+2U9IUyc2diMBSK3GeKopK0SN+3aBtchrOXK5l2f3u9CtUB I4s+hZ0RIbBDH3W8ncexJ1O3Te2GCPnQnkbK+5Kat4BQQG1hkZMKbPqFKeZMBgV4 10OdbYRoJ3/Ac/cLV8QCGuIykQcdFROzL8OTMOhdp+7SKs8RSg1hRodlH+4GIt6k WXfJoI3yXwfo0Mqrr55Fmu0Tp0F5bEtHZ2QFo0wgti5FQwkWSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3e5ps60ccxYXlHjFJvatjgyo4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjU4NDFjOGUtODY4OS0z ZjNhLTk0YmItMWNkMjUxNGRkZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4r3JFaaPhocXxbjXMNh8gFn3COoIhigsT+rvR/qlXdHCS4ejedrfRw NV419OZaSDKb3Ol++cttYbh2/upYYxqmZOhPGrSkP52onnn48+z5bR9vIf1U6zdL 2Gs99vHcv/0V13UzeapXFmZVNLhT2cQ1h5u5+Wm7ENByNCgwJmpJ/2smLL/Flb83 Fm7m2UsMDX+xg4We4c+nH0+ERMtBHwJxSysWQM6Cc2M8+62XmXqQDBCJkbux7nZz Qn516zQexR91Wc94NmjHgXCCKGggF+eabtI4kzCXx8o/RDTTjWes7meu2y58noAX /MsGOKo4A7DdSwPI6rHVFD1kNzkV41c= -----END CERTIFICATE-----Generated at Wed Sep 23 08:46:38 2026 by rpki-client