$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd33f4d9-4929-38ef-8538-0f044f0be78d.roa File: bd33f4d9-4929-38ef-8538-0f044f0be78d.roa (raw, json) Hash identifier: axmDcfD+FNjVwUUWwG1D74SE+DHYx6eGDk/bQPSxBRY= Subject key identifier: 64:75:EF:E0:1C:44:C2:28:18:4B:39:BD:5F:6B:0E:12:AE:D4:98:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD71F5D5094332D017A220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd33f4d9-4929-38ef-8538-0f044f0be78d.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.44.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:71:f5:d5:09:43:32:d0:17:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=0a1bdf8d-52ac-4f82-b69f-df30a523a6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e0:c7:f6:ec:ff:d3:e6:d1:71:48:96:4e:d2: 57:36:a8:dc:1d:90:bf:a8:53:48:df:86:e5:94:d9: 86:fd:fd:0f:72:ee:51:f6:ce:8d:16:b4:26:24:e6: 40:76:d0:21:1a:d8:2f:83:29:41:cb:62:11:5e:73: b7:ef:4e:ae:b7:fd:db:ae:4e:5d:ff:59:a4:d5:cf: 67:c4:29:37:22:0e:71:71:36:df:91:92:03:13:09: 1d:cf:c8:6f:8a:17:fb:d2:0e:34:ea:79:bb:c8:3f: 3c:e8:1f:d1:9d:67:2f:43:0f:84:12:bb:cf:e9:22: 69:ff:51:26:5c:de:9a:c4:68:f0:17:15:f9:92:5b: c1:3f:7a:45:a4:0b:0e:5a:95:cd:04:c3:44:39:ed: ff:32:e6:5c:b0:46:55:ca:60:ad:48:dc:dd:f0:77: 3e:fc:0b:ce:dc:a7:f0:cc:2b:81:84:a4:f5:75:83: 53:99:c8:6f:91:22:a9:55:46:10:12:0d:b9:a7:bb: 4f:56:46:1b:cd:dd:c9:62:20:ba:3c:91:55:6c:49: c7:8a:6d:73:c6:fc:b2:cc:9a:b2:93:f2:6a:5b:66: f9:4e:fc:3d:97:df:81:72:ed:b7:5f:9d:a8:bb:a2: df:b5:56:91:d5:fd:a2:98:19:9f:9f:6a:37:f1:6d: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:75:EF:E0:1C:44:C2:28:18:4B:39:BD:5F:6B:0E:12:AE:D4:98:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bd33f4d9-4929-38ef-8538-0f044f0be78d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:5c:87:59:2e:f6:e6:9f:a4:e0:4f:4e:91:44:43:09:4f:17: e0:a4:04:8d:dc:e7:13:b7:37:7d:c0:fa:a4:53:f7:ad:fb:44: e1:d9:e9:85:65:16:df:1a:b9:5a:68:a9:83:fb:d6:77:50:b0: 34:60:de:ed:0e:a6:30:ee:91:71:b5:87:2f:0a:3f:f0:46:80: 34:7b:62:c1:f0:f3:12:b7:73:8e:f0:54:01:38:ab:4c:09:82: 02:77:79:0d:ec:ef:96:ff:36:54:74:e2:a5:58:bc:eb:35:17: b4:94:6c:d2:85:60:2e:86:02:19:f1:4f:33:10:5e:56:08:9a: 6e:1c:56:14:4c:05:c4:56:1b:a7:85:9f:dd:b2:ac:99:6e:04: bb:88:2e:78:f7:76:76:0c:93:cb:5f:3d:b7:3c:ed:1a:3d:03: fa:91:db:41:4d:57:e2:be:8e:61:a8:e8:ba:14:1d:5e:89:a3: 05:d3:1a:e6:c3:f8:66:f0:b6:8d:d3:a9:c0:c3:7f:2b:56:eb: b4:8c:00:6a:cb:64:56:90:06:db:18:bb:04:b1:7e:2e:a6:78: 26:22:e7:82:e1:c7:82:c7:91:b2:7b:44:1e:ef:e0:ae:06:66: b3:8d:ba:3f:3f:07:19:1c:0e:93:57:6f:89:bd:9c:4a:5a:7c: b0:86:39:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rXH11QlDMtAXoiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MGExYmRmOGQtNTJhYy00ZjgyLWI2OWYtZGYzMGE1MjNhNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeDH9uz/0+bRcUiWTtJXNqjcHZC/qFNI34bl lNmG/f0Pcu5R9s6NFrQmJOZAdtAhGtgvgylBy2IRXnO3706ut/3brk5d/1mk1c9n xCk3Ig5xcTbfkZIDEwkdz8hvihf70g406nm7yD886B/RnWcvQw+EErvP6SJp/1Em XN6axGjwFxX5klvBP3pFpAsOWpXNBMNEOe3/MuZcsEZVymCtSNzd8Hc+/AvO3Kfw zCuBhKT1dYNTmchvkSKpVUYQEg25p7tPVkYbzd3JYiC6PJFVbEnHim1zxvyyzJqy k/JqW2b5Tvw9l9+Bcu23X52ou6LftVaR1f2imBmfn2o38W3pKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR17+AcRMIoGEs5vV9rDhKu1JgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmQzM2Y0ZDktNDkyOS0z OGVmLTg1MzgtMGYwNDRmMGJlNzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyzmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBch1ku9uafpOBPTpFEQwlPF+CkBI3c5xO3N33A+qRT9637ROHZ6YVl Ft8auVpoqYP71ndQsDRg3u0OpjDukXG1hy8KP/BGgDR7YsHw8xK3c47wVAE4q0wJ ggJ3eQ3s75b/NlR04qVYvOs1F7SUbNKFYC6GAhnxTzMQXlYImm4cVhRMBcRWG6eF n92yrJluBLuILnj3dnYMk8tfPbc87Ro9A/qR20FNV+K+jmGo6LoUHV6JowXTGubD +Gbwto3TqcDDfytW67SMAGrLZFaQBtsYuwSxfi6meCYi54Lhx4LHkbJ7RB7v4K4G ZrONuj8/BxkcDpNXb4m9nEpafLCGOcY= -----END CERTIFICATE-----Generated at Tue Sep 22 01:48:37 2026 by rpki-client