$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa File: c96909b2-99ca-31d9-90ff-7962438db4ab.roa (raw, json) Hash identifier: ST8jSh+wMPzE8FxP18CS6ZW1xU2BC+lmkr1eEUaY0pg= Subject key identifier: 34:DF:DC:9D:06:2B:3C:14:CA:01:96:F1:DC:FA:04:B8:45:D7:D7:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C9AF6F579324C92D7E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.33.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c9:af:6f:57:93:24:c9:2d:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=f32c7e84-55b0-4348-90bb-799c19d2e7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:44:71:9c:08:5e:47:90:a9:72:d7:42:2d: 13:10:2f:38:da:4f:57:c4:46:dd:29:1c:c4:a4:5c: e2:8b:6b:cc:e2:dc:de:e6:54:8a:1b:cf:67:e6:22: ee:1f:38:bc:b1:07:b6:7f:d7:84:57:31:38:1c:be: 5f:f4:87:10:c8:97:78:39:d9:57:2c:45:e9:91:46: e8:76:87:c5:26:62:b3:ee:ff:4a:40:9e:1f:17:7b: ba:21:55:23:ec:a4:e1:13:15:ac:d7:ac:0f:78:55: bb:2c:1d:70:c6:44:4e:fe:3b:1e:ab:62:c8:12:c7: 5a:4f:c0:30:2a:12:4d:dd:9c:1e:79:b3:01:7e:e7: 67:81:11:0b:d2:0f:6f:a2:91:b8:5e:64:e3:ac:14: 2f:23:65:a7:24:db:a4:b0:40:47:65:b4:5a:62:54: 21:66:c0:a4:cc:49:7f:9d:c2:09:53:f1:f1:92:40: 10:8c:cc:cb:42:48:45:0f:5d:83:66:5a:91:6e:70: 83:42:d9:fd:d9:71:a9:73:06:76:21:c6:7e:ee:29: a8:94:d0:35:66:4b:ed:18:3a:68:c3:92:ca:3b:39: 90:49:ac:3b:1e:f5:45:c7:e3:f2:af:6c:10:db:d1: 00:a1:34:71:f0:04:b7:04:ba:b4:40:fc:c3:45:37: 76:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DF:DC:9D:06:2B:3C:14:CA:01:96:F1:DC:FA:04:B8:45:D7:D7:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:bb:95:31:db:89:c5:95:80:08:44:4a:c5:ff:e5:76:7c:e6: b9:a1:73:73:72:2c:07:f2:97:3f:f3:ea:4c:d5:02:03:86:33: 4a:fe:c6:b3:a8:87:14:58:af:3c:3c:e3:62:b2:70:17:0a:3a: de:bb:25:ef:e4:ab:d4:e6:d8:66:23:ae:80:14:0a:1e:be:f8: 31:6d:fa:35:fe:1c:ee:df:c1:55:43:82:ff:cd:1e:bb:88:67: 9e:12:89:f6:6f:08:93:c2:db:fb:de:2a:15:00:ae:b6:da:34: e0:19:34:ef:b3:dc:7f:ac:43:b8:1a:2a:db:33:20:b5:e7:ce: 26:0a:97:32:b6:d2:b1:c9:b4:69:dd:5e:d1:1f:24:ab:aa:cb: e1:7b:3b:fe:a0:01:f2:f2:1f:c6:41:ef:3b:46:38:e2:e0:e8: 7e:aa:4c:23:a3:f4:26:cb:10:5b:1a:d4:bc:ef:a8:e3:14:6d: c6:7f:41:21:b3:e1:65:e6:2e:9d:22:c7:cd:39:20:94:61:0e: b7:3c:f7:8b:fe:e9:b6:6f:64:53:c9:21:1e:05:39:0a:df:38: c6:62:6a:73:37:f2:64:55:6b:ce:e8:e2:6a:6e:34:f9:a5:99: d2:86:3f:b2:28:9a:6a:f2:78:bc:f5:98:18:08:fe:e6:84:e0: c0:d9:7b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8mvb1eTJMktfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZjMyYzdlODQtNTViMC00MzQ4LTkwYmItNzk5YzE5ZDJlN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NZEcZwIXkeQqXLXQi0TEC842k9XxEbdKRzE pFzii2vM4tze5lSKG89n5iLuHzi8sQe2f9eEVzE4HL5f9IcQyJd4OdlXLEXpkUbo dofFJmKz7v9KQJ4fF3u6IVUj7KThExWs16wPeFW7LB1wxkRO/jseq2LIEsdaT8Aw KhJN3ZweebMBfudngREL0g9vopG4XmTjrBQvI2WnJNuksEBHZbRaYlQhZsCkzEl/ ncIJU/HxkkAQjMzLQkhFD12DZlqRbnCDQtn92XGpcwZ2IcZ+7imolNA1ZkvtGDpo w5LKOzmQSaw7HvVFx+Pyr2wQ29EAoTRx8AS3BLq0QPzDRTd28QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTf3J0GKzwUygGW8dz6BLhF19dAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk2OTA5YjItOTljYS0z MWQ5LTkwZmYtNzk2MjQzOGRiNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+7lTHbicWVgAhESsX/5XZ85rmhc3NyLAfylz/z6kzVAgOGM0r+xrOo hxRYrzw842KycBcKOt67Je/kq9Tm2GYjroAUCh6++DFt+jX+HO7fwVVDgv/NHruI Z54SifZvCJPC2/veKhUArrbaNOAZNO+z3H+sQ7gaKtszILXnziYKlzK20rHJtGnd XtEfJKuqy+F7O/6gAfLyH8ZB7ztGOOLg6H6qTCOj9CbLEFsa1LzvqOMUbcZ/QSGz 4WXmLp0ix805IJRhDrc894v+6bZvZFPJIR4FOQrfOMZianM38mRVa87o4mpuNPml mdKGP7IommryeLz1mBgI/uaE4MDZe+w= -----END CERTIFICATE-----Generated at Sun Sep 20 17:31:24 2026 by rpki-client