$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be8554bb-efd9-3249-84c5-849987d032fb.roa File: be8554bb-efd9-3249-84c5-849987d032fb.roa (raw, json) Hash identifier: K5e/6B7ibvxh6/szfI2uioR0WtQ5Oz/csiFfqT5yEfs= Subject key identifier: 93:2B:CE:80:7B:CE:1D:29:20:36:CA:D5:06:B4:5D:6B:D5:CE:E1:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C641C4E27CD4787B1AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be8554bb-efd9-3249-84c5-849987d032fb.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.33.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c6:41:c4:e2:7c:d4:78:7b:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=984dfe78-f27c-4f67-9acd-cab7120adbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:34:66:12:43:11:1a:cb:37:f1:64:d8:88: 94:85:12:39:6a:1e:f5:4c:3d:f4:c4:c7:f7:34:88: a4:3b:88:83:9e:80:e9:0d:b1:15:01:dd:9b:01:75: f8:77:84:d1:e3:61:81:f0:49:17:b2:26:0b:49:d7: 4a:3b:b9:0b:68:b2:93:3c:0e:53:f3:5f:cc:a3:fb: e0:96:b4:fc:9e:88:f3:80:52:5d:ce:f7:52:a0:ec: 50:f1:ee:8c:19:39:4f:38:b0:11:71:77:df:c1:51: b3:d3:08:a0:ad:4f:40:b1:fc:0c:ef:65:28:27:fd: fe:20:75:12:9d:9f:86:86:8e:ee:7a:1c:65:cf:78: ad:09:41:4f:c2:81:2d:fe:34:29:66:11:bd:29:0d: 07:eb:02:9f:f4:e0:c3:f5:a4:54:68:57:96:b2:b7: 76:55:7f:8e:72:21:ea:9e:91:1c:ef:e7:1d:bb:aa: 6a:5c:43:96:b1:e2:2b:3d:68:0f:0f:5d:76:29:5b: c6:77:7c:d9:ff:31:99:a5:d5:1f:8d:83:1b:d0:fa: 21:e0:88:9c:c2:87:e1:f5:db:8b:c0:90:88:93:de: 79:98:05:af:08:e7:bf:cf:ce:78:e5:28:20:0d:e6: d8:cb:cd:14:22:f6:07:aa:48:e4:f0:b6:c6:85:46: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2B:CE:80:7B:CE:1D:29:20:36:CA:D5:06:B4:5D:6B:D5:CE:E1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be8554bb-efd9-3249-84c5-849987d032fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:11:cd:25:57:17:62:7d:c7:01:ed:2f:43:de:60:a0:29:ad: 64:ff:1f:f0:54:5c:d2:21:3d:16:0b:d3:7c:9b:e0:b0:a5:a8: 31:d4:24:5e:e0:57:16:47:67:e1:da:ad:44:88:b2:da:29:f1: 5f:e5:6b:48:9c:34:75:b7:6d:db:8e:45:a0:37:2b:30:47:4f: 30:d0:9c:95:4a:d9:49:d5:98:14:d3:1d:62:32:20:37:f4:05: bd:f5:0c:e9:2b:d4:d7:39:eb:9c:3b:e1:42:b8:3b:63:fd:eb: b0:9e:28:2e:c6:65:d1:f1:12:6f:38:d2:09:41:f3:54:4f:24: da:87:a8:1c:e7:34:da:62:79:6d:c6:f0:4e:09:91:97:49:b3: 64:60:e5:cb:67:c4:e1:a0:00:c0:51:9e:ce:b4:9d:36:35:95: 23:b0:7b:0d:5b:cc:ab:34:d2:da:7a:70:4a:13:2d:b7:6c:dc: 00:13:28:53:d0:ca:41:ce:35:cd:42:a6:1e:a5:1c:68:c0:31: 4b:d1:3f:f5:9d:be:4b:19:bb:4d:08:15:5d:7f:14:d1:11:9a: 9f:26:ce:8b:a8:c7:da:c0:80:eb:7c:ce:f4:8f:26:90:36:8b: 91:58:59:94:75:fb:4c:d2:39:0e:a4:85:0f:ca:bf:3d:77:e7: 76:a3:f5:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8ZBxOJ81Hh7GsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk OTg0ZGZlNzgtZjI3Yy00ZjY3LTlhY2QtY2FiNzEyMGFkYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3Q0ZhJDERrLN/Fk2IiUhRI5ah71TD30xMf3 NIikO4iDnoDpDbEVAd2bAXX4d4TR42GB8EkXsiYLSddKO7kLaLKTPA5T81/Mo/vg lrT8nojzgFJdzvdSoOxQ8e6MGTlPOLARcXffwVGz0wigrU9AsfwM72UoJ/3+IHUS nZ+Gho7uehxlz3itCUFPwoEt/jQpZhG9KQ0H6wKf9ODD9aRUaFeWsrd2VX+OciHq npEc7+cdu6pqXEOWseIrPWgPD112KVvGd3zZ/zGZpdUfjYMb0Poh4Iicwofh9duL wJCIk955mAWvCOe/z8545SggDebYy80UIvYHqkjk8LbGhUboQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMrzoB7zh0pIDbK1Qa0XWvVzuHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmU4NTU0YmItZWZkOS0z MjQ5LTg0YzUtODQ5OTg3ZDAzMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEARzSVXF2J9xwHtL0PeYKAprWT/H/BUXNIhPRYL03yb4LClqDHUJF7g VxZHZ+HarUSIstop8V/la0icNHW3bduORaA3KzBHTzDQnJVK2UnVmBTTHWIyIDf0 Bb31DOkr1Nc565w74UK4O2P967CeKC7GZdHxEm840glB81RPJNqHqBznNNpieW3G 8E4JkZdJs2Rg5ctnxOGgAMBRns60nTY1lSOwew1bzKs00tp6cEoTLbds3AATKFPQ ykHONc1Cph6lHGjAMUvRP/WdvksZu00IFV1/FNERmp8mzouox9rAgOt8zvSPJpA2 i5FYWZR1+0zSOQ6khQ/Kvz1353aj9QA= -----END CERTIFICATE-----Generated at Sun Sep 20 22:01:13 2026 by rpki-client