$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bae7286c-55a4-3a0e-9e06-91eba33207b9.roa File: bae7286c-55a4-3a0e-9e06-91eba33207b9.roa (raw, json) Hash identifier: KfDiQjmZlFarC4rvV464rWhFkPnf97qG7WAb+DjYT8w= Subject key identifier: 6E:79:49:9D:7B:CC:48:77:5E:7D:C6:34:04:BA:86:05:02:5D:F2:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F356401C1186A5BF9580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bae7286c-55a4-3a0e-9e06-91eba33207b9.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 20940 IP address blocks: 23.40.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f3:56:40:1c:11:86:a5:bf:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=7f3c1f4d-9f0d-4b60-9c95-44cb650bc723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e2:ca:9b:01:2d:f8:60:ab:8a:76:4a:cb:ba: 7d:a4:23:87:8d:1f:ae:a3:69:73:5f:4c:90:13:62: 11:f3:2a:51:d5:6b:95:90:20:f2:e8:db:8b:0d:7a: c2:66:86:be:cb:0b:40:de:e8:aa:aa:3b:ac:de:eb: 8e:04:72:66:71:57:6e:9c:98:f0:25:dd:2d:55:5a: 69:e3:7a:64:c8:4d:08:79:f3:be:30:58:a4:cb:c0: 32:1d:f6:5a:9e:d5:30:26:87:28:cc:29:75:9f:d7: bd:18:2a:65:06:46:c3:80:4b:5f:1c:0f:05:45:39: 1e:98:5b:3c:01:d3:98:f8:63:f4:1d:7f:8e:67:55: 94:fc:4d:ee:a4:31:f0:26:d6:2a:14:12:39:c0:cc: 27:24:d7:52:e4:ab:93:d9:65:bf:1c:8c:4e:00:18: b7:e4:87:f0:ba:9a:1c:58:d2:be:ed:5f:50:2a:06: f1:25:7b:4d:21:3c:96:45:85:73:41:04:ce:b6:6a: b2:14:ce:7b:6b:46:66:34:c8:4b:08:16:2f:08:fc: 38:5f:7c:bc:69:cd:aa:2e:97:94:6a:e4:04:b7:49: 4c:af:18:32:70:2b:55:8f:13:cb:a6:12:0e:89:3b: 0d:66:af:74:e7:1f:f7:7d:1b:b3:e4:7f:c9:41:a3: 81:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:79:49:9D:7B:CC:48:77:5E:7D:C6:34:04:BA:86:05:02:5D:F2:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bae7286c-55a4-3a0e-9e06-91eba33207b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ab:0f:75:a0:c8:cc:61:46:61:25:b7:8f:56:9e:aa:1f:a2: f5:5f:00:2b:aa:8d:ff:29:59:67:6d:c7:96:be:36:c4:86:d1: 51:7b:63:a3:0a:8c:21:d5:ce:9f:b7:57:37:bf:77:de:2a:89: f1:57:80:47:07:3c:b4:19:8f:21:2b:4e:01:bc:f2:cd:61:bc: 06:d6:9a:ac:9b:51:66:65:a4:d2:ad:fd:ee:71:d4:3d:5b:44: ab:52:38:5a:de:d4:41:29:86:82:83:d8:5e:0e:b3:9f:63:3b: 8e:69:c1:bd:aa:e7:9b:49:72:43:d3:7e:e1:ee:58:b7:d6:b0: 93:87:c0:4d:66:ba:1c:72:d3:d5:d3:39:f4:c0:38:9c:20:e1: 0b:bd:07:48:3a:ec:71:b9:30:34:f3:44:3a:e5:4e:5b:31:ae: 86:82:da:ac:49:8e:52:f8:bc:b1:42:0d:09:0d:de:21:80:e0: 9e:0d:8e:f5:b6:07:d4:42:50:52:72:c7:dc:59:30:14:b8:72: df:a8:ea:e1:b8:a3:99:7f:6b:3e:9a:c9:5b:47:7f:3b:f4:11: 6b:4b:ae:38:af:57:29:ff:60:26:00:cd:fb:81:e3:b9:ac:3a: 05:f9:e3:6b:6f:a2:14:19:6b:8f:55:ad:28:b6:51:c5:2f:d8: 34:25:32:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/NWQBwRhqW/lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk N2YzYzFmNGQtOWYwZC00YjYwLTljOTUtNDRjYjY1MGJjNzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluLKmwEt+GCrinZKy7p9pCOHjR+uo2lzX0yQ E2IR8ypR1WuVkCDy6NuLDXrCZoa+ywtA3uiqqjus3uuOBHJmcVdunJjwJd0tVVpp 43pkyE0IefO+MFiky8AyHfZantUwJocozCl1n9e9GCplBkbDgEtfHA8FRTkemFs8 AdOY+GP0HX+OZ1WU/E3upDHwJtYqFBI5wMwnJNdS5KuT2WW/HIxOABi35Ifwupoc WNK+7V9QKgbxJXtNITyWRYVzQQTOtmqyFM57a0ZmNMhLCBYvCPw4X3y8ac2qLpeU auQEt0lMrxgycCtVjxPLphIOiTsNZq905x/3fRuz5H/JQaOB+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG55SZ17zEh3Xn3GNAS6hgUCXfJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmFlNzI4NmMtNTVhNC0z YTBlLTllMDYtOTFlYmEzMzIwN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSrD3WgyMxhRmElt49WnqofovVfACuqjf8pWWdtx5a+NsSG0VF7Y6MK jCHVzp+3Vze/d94qifFXgEcHPLQZjyErTgG88s1hvAbWmqybUWZlpNKt/e5x1D1b RKtSOFre1EEphoKD2F4Os59jO45pwb2q55tJckPTfuHuWLfWsJOHwE1muhxy09XT OfTAOJwg4Qu9B0g67HG5MDTzRDrlTlsxroaC2qxJjlL4vLFCDQkN3iGA4J4NjvW2 B9RCUFJyx9xZMBS4ct+o6uG4o5l/az6ayVtHfzv0EWtLrjivVyn/YCYAzfuB47ms OgX542tvohQZa49VrSi2UcUv2DQlMhQ= -----END CERTIFICATE-----Generated at Mon Sep 21 22:58:18 2026 by rpki-client