$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c868029c-4de2-3e1e-a537-6b6c45ee323d.roa File: c868029c-4de2-3e1e-a537-6b6c45ee323d.roa (raw, json) Hash identifier: PKpZfnRUOlGtBPQQVRCqYWd+Jqhd7u0zQf93PmjmdK4= Subject key identifier: 26:98:13:2A:AD:B5:BD:8E:F5:DB:14:22:FF:3C:3A:6B:C8:13:2E:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF87CDA6188362D3484D2EE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c868029c-4de2-3e1e-a537-6b6c45ee323d.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.64.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:da:61:88:36:2d:34:84:d2:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=e8173b7c-9ae7-4c37-80b5-42866a5446a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:32:54:ae:2e:d2:eb:5a:e0:dd:5a:dd:b7:32: e4:2c:00:2a:53:ec:1d:ee:1b:2e:b1:3b:78:3a:62: a8:a6:09:e0:a2:00:a3:45:01:b8:0b:de:08:0e:d7: db:be:42:5c:b2:5f:85:5e:79:a3:a6:a3:54:e2:86: 50:14:8d:87:10:6e:b4:a4:31:e9:29:58:3f:6e:78: f3:b6:06:81:09:07:c0:ab:94:ca:24:31:76:fe:15: 01:89:11:bc:5a:0d:dc:77:18:8c:ee:85:62:ee:84: 83:ac:74:1f:6e:a0:1b:9a:62:99:42:38:89:c9:48: 78:5e:d7:21:2a:c2:c3:34:04:3e:db:77:94:6c:1d: 1f:5d:89:d4:99:1f:21:23:77:4f:0d:b0:2e:17:01: 5f:fc:c0:29:ff:45:4d:39:95:96:36:78:2e:20:36: 99:27:27:0e:f6:44:50:0c:c5:c2:2e:33:82:2f:c6: 00:a4:d5:c5:72:be:0b:08:47:e4:a2:17:1c:d5:f8: 86:01:fb:7e:85:2f:d9:a3:fd:d5:10:9e:53:88:6e: 98:87:30:e6:b9:d0:01:79:57:30:8d:9a:0d:b9:cc: cb:d3:43:8f:82:96:fc:3d:45:ac:ca:0d:be:79:b4: 2d:60:bb:c2:79:98:23:45:05:10:15:46:28:02:83: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:98:13:2A:AD:B5:BD:8E:F5:DB:14:22:FF:3C:3A:6B:C8:13:2E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c868029c-4de2-3e1e-a537-6b6c45ee323d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:47:6e:be:8a:e3:9a:d0:33:a3:22:15:8d:76:69:53:75:50: d1:8a:42:ea:28:f0:1b:19:21:d4:d3:fc:92:0c:5f:2a:59:e6: 9c:83:0f:e8:2a:3b:cf:7e:9d:c6:d8:ac:87:23:ec:31:53:19: b5:fa:94:20:ff:0c:b8:f5:53:aa:32:2e:ef:e5:84:5d:58:10: 4c:a8:7f:74:55:83:f2:ed:e8:80:2e:98:f6:5a:29:a5:30:e0: e3:4b:df:1b:cc:a5:f0:46:a3:21:e0:de:56:43:0c:f0:07:e4: 63:53:cd:58:c8:c4:03:ee:aa:f9:d6:c2:a8:60:e2:d4:14:f7: 3e:84:d5:60:ac:48:87:48:6b:ce:e9:95:89:a0:0a:3c:23:65: 77:b4:92:7b:9e:cf:2e:ca:5f:2e:cf:78:c2:53:6e:2e:62:77: d3:10:1f:cb:05:4f:b5:e5:67:2a:b7:aa:1f:69:fd:bd:67:da: 21:df:db:dc:21:1a:3d:5b:74:84:92:bb:6d:6f:6c:c5:17:bf: c2:02:c4:79:41:19:a6:a5:95:65:71:eb:1e:87:5a:e1:63:6f: 31:65:ec:d7:3f:8e:b5:c5:73:62:b9:c1:82:ea:c4:c0:02:ff: 8d:6f:99:d9:2f:03:be:00:bc:ba:44:0f:24:1f:a6:7a:67:fd: c8:fa:67:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fNphiDYtNITS7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZTgxNzNiN2MtOWFlNy00YzM3LTgwYjUtNDI4NjZhNTQ0NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzJUri7S61rg3VrdtzLkLAAqU+wd7hsusTt4 OmKopgngogCjRQG4C94IDtfbvkJcsl+FXnmjpqNU4oZQFI2HEG60pDHpKVg/bnjz tgaBCQfAq5TKJDF2/hUBiRG8Wg3cdxiM7oVi7oSDrHQfbqAbmmKZQjiJyUh4Xtch KsLDNAQ+23eUbB0fXYnUmR8hI3dPDbAuFwFf/MAp/0VNOZWWNnguIDaZJycO9kRQ DMXCLjOCL8YApNXFcr4LCEfkohcc1fiGAft+hS/Zo/3VEJ5TiG6YhzDmudABeVcw jZoNuczL00OPgpb8PUWsyg2+ebQtYLvCeZgjRQUQFUYoAoNrwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaYEyqttb2O9dsUIv88OmvIEy4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg2ODAyOWMtNGRlMi0z ZTFlLWE1MzctNmI2YzQ1ZWUzMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0AEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVHbr6K45rQM6MiFY12aVN1UNGKQuoo8BsZIdTT/JIMXypZ5pyDD+gq O89+ncbYrIcj7DFTGbX6lCD/DLj1U6oyLu/lhF1YEEyof3RVg/Lt6IAumPZaKaUw 4ONL3xvMpfBGoyHg3lZDDPAH5GNTzVjIxAPuqvnWwqhg4tQU9z6E1WCsSIdIa87p lYmgCjwjZXe0knuezy7KXy7PeMJTbi5id9MQH8sFT7XlZyq3qh9p/b1n2iHf29wh Gj1bdISSu21vbMUXv8ICxHlBGaallWVx6x6HWuFjbzFl7Nc/jrXFc2K5wYLqxMAC /41vmdkvA74AvLpEDyQfpnpn/cj6Z0I= -----END CERTIFICATE-----Generated at Wed Sep 23 02:29:19 2026 by rpki-client