$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa File: c646d1f6-aaea-3038-bf20-421eb2a50335.roa (raw, json) Hash identifier: VRUdEreBqQGazBDqeBM29N8z/9mIfd3yMYLHUy+Y++c= Subject key identifier: BC:4A:3F:E3:B3:66:17:DA:DA:98:3E:A6:FF:FA:5E:A9:14:22:D6:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093D033B7C6C58DDD4C7B9C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.3.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:03:3b:7c:6c:58:dd:d4:c7:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=5d444f1e-eec1-42bb-88fb-ee2382dc6f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:e0:30:f8:c2:1d:11:77:5a:94:96:68:e0: ec:60:a9:ba:47:a1:cf:a5:cd:cd:17:f9:13:06:19: 56:9a:6a:2e:c6:95:93:2e:c5:2b:25:41:f6:79:de: 35:65:c9:86:3f:61:05:65:49:e0:23:85:89:5f:9b: 75:fb:8c:b7:f0:b7:3e:cf:df:40:74:c6:c1:b1:4d: 80:b1:4d:fe:7b:2f:48:18:cb:26:c2:0c:ca:8b:26: 72:23:86:1c:1b:f8:ce:01:c4:b5:79:b7:4e:94:35: 39:e5:27:49:fc:e0:43:73:76:67:6d:47:61:cb:6c: 92:bd:37:fd:a8:dd:d7:7e:db:10:da:69:fc:97:33: 4d:c7:14:b9:13:13:53:0a:a2:c2:c8:ce:f0:0d:66: 06:79:0f:e4:45:e9:05:20:18:37:16:e1:3a:33:af: b2:1f:dd:9d:53:34:82:e0:29:ca:c5:9e:bd:bb:75: 29:d0:ca:ca:23:3f:d3:af:10:48:16:ad:f2:25:7a: 8a:fb:03:b9:68:d2:48:40:88:26:64:1c:21:a7:83: ce:f6:2e:03:8e:4a:5b:3f:0e:2c:5e:5b:db:c9:d2: 88:5b:74:12:ab:0a:10:55:bc:0b:a4:28:7b:c0:f6: d0:bd:ac:14:7b:75:36:6d:40:09:e7:70:74:91:29: 19:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4A:3F:E3:B3:66:17:DA:DA:98:3E:A6:FF:FA:5E:A9:14:22:D6:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3f:f1:78:61:d0:55:3c:28:99:a3:cd:36:3b:17:2f:15:87: 1c:d2:c2:92:5b:c5:29:c5:d0:13:c5:01:a4:b2:ac:55:95:9f: f4:30:d2:aa:f9:a1:ae:cc:2f:5b:df:93:68:6a:3e:99:9b:9d: 85:95:35:e5:09:0f:4c:6c:fc:a2:e6:e0:f9:4d:3f:1e:db:cc: 81:6d:c7:3d:9c:69:b2:4e:da:b4:33:65:bf:8b:7e:f6:44:62: 2b:c2:a9:c0:0f:37:45:6f:ee:24:55:ea:c8:b3:41:11:fb:af: b2:94:fa:97:d3:9f:0d:9a:67:95:4a:a3:38:0d:58:4e:21:97: 4f:98:1f:9f:7e:20:c6:05:5f:d0:04:04:cc:1b:31:67:14:e3: 73:87:30:c2:aa:29:15:4a:dd:3d:65:84:90:9c:81:82:72:fa: 78:81:51:7a:12:44:cb:da:2c:47:36:4d:b6:6e:32:e4:21:81: 5a:e1:8b:49:af:c0:16:d6:64:c1:39:a5:3a:a6:05:db:9b:ce: dd:0e:6b:6a:85:f1:47:81:22:10:b7:c4:5a:2a:43:a5:a1:d1: a8:79:cd:4c:99:3e:b2:29:e1:d6:50:91:a4:40:95:9b:73:54: 07:7f:34:d7:34:fd:01:02:5a:54:9a:fd:3e:85:25:8c:6f:93: 98:e8:2f:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQM7fGxY3dTHucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NWQ0NDRmMWUtZWVjMS00MmJiLTg4ZmItZWUyMzgyZGM2ZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0DgMPjCHRF3WpSWaODsYKm6R6HPpc3NF/kT BhlWmmouxpWTLsUrJUH2ed41ZcmGP2EFZUngI4WJX5t1+4y38Lc+z99AdMbBsU2A sU3+ey9IGMsmwgzKiyZyI4YcG/jOAcS1ebdOlDU55SdJ/OBDc3ZnbUdhy2ySvTf9 qN3XftsQ2mn8lzNNxxS5ExNTCqLCyM7wDWYGeQ/kRekFIBg3FuE6M6+yH92dUzSC 4CnKxZ69u3Up0MrKIz/TrxBIFq3yJXqK+wO5aNJIQIgmZBwhp4PO9i4DjkpbPw4s XlvbydKIW3QSqwoQVbwLpCh7wPbQvawUe3U2bUAJ53B0kSkZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxKP+OzZhfa2pg+pv/6XqkUItbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzY0NmQxZjYtYWFlYS0z MDM4LWJmMjAtNDIxZWIyYTUwMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFwOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc/8Xhh0FU8KJmjzTY7Fy8VhxzSwpJbxSnF0BPFAaSyrFWVn/Qw0qr5 oa7ML1vfk2hqPpmbnYWVNeUJD0xs/KLm4PlNPx7bzIFtxz2cabJO2rQzZb+LfvZE YivCqcAPN0Vv7iRV6sizQRH7r7KU+pfTnw2aZ5VKozgNWE4hl0+YH59+IMYFX9AE BMwbMWcU43OHMMKqKRVK3T1lhJCcgYJy+niBUXoSRMvaLEc2TbZuMuQhgVrhi0mv wBbWZME5pTqmBdubzt0Oa2qF8UeBIhC3xFoqQ6Wh0ah5zUyZPrIp4dZQkaRAlZtz VAd/NNc0/QECWlSa/T6FJYxvk5joL0s= -----END CERTIFICATE-----Generated at Tue Sep 22 20:40:41 2026 by rpki-client