$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd3c8cf4-5e9d-34da-b0ca-15408bc4681d.roa File: cd3c8cf4-5e9d-34da-b0ca-15408bc4681d.roa (raw, json) Hash identifier: l0mJprwpFXlaIJKBOFe8+l4Xp85k2XNUgszd0uRDR/w= Subject key identifier: 4E:B1:C3:11:00:64:A7:0F:3C:6C:7F:F1:3C:34:F9:CB:B6:CD:40:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4112B92A2193E0FABBF7CC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd3c8cf4-5e9d-34da-b0ca-15408bc4681d.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.46.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b9:2a:21:93:e0:fa:bb:f7:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=e953b1cb-7c4d-4d99-aa78-787159a986cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:96:02:c5:a5:5d:43:b6:d4:2e:5c:4d:f0: 7e:da:bc:52:3e:9e:ab:25:3f:44:db:3e:17:fb:ed: d9:f9:d4:01:90:e8:a0:c6:b0:df:ff:1a:71:e3:24: d2:fe:f1:7e:f0:76:d5:34:67:71:f3:c6:fd:ee:24: aa:d9:9c:4b:57:a3:6e:90:1e:ed:88:2c:f8:8c:6c: 91:b4:cc:90:cc:4e:b6:49:b6:3d:de:9f:99:2a:ff: 33:f5:c6:3d:82:df:c8:18:ce:4a:e5:3f:cf:dd:84: b2:43:e7:00:c3:3a:4f:ac:71:ad:f7:05:4f:18:88: 1b:2d:a1:fd:55:a0:47:1a:8e:d5:0d:cf:04:f8:da: 72:62:dc:bd:66:e1:2c:1c:aa:83:2d:30:aa:1b:db: ad:0e:c1:ec:e1:24:3a:79:cf:36:69:6c:3c:28:29: cf:3f:a4:5d:5b:38:82:b4:22:7f:4a:43:63:ae:2a: 11:9d:9b:1b:d3:28:5b:28:94:6f:8c:a1:a8:8c:89: 01:2c:58:fc:1e:4b:8f:3f:8f:19:3e:a3:0f:8d:74: 06:74:17:35:93:d5:38:bb:bf:bb:4f:64:8d:ef:f8: 8f:7b:76:a4:3c:04:70:af:75:95:a5:b7:7a:86:a9: 9a:c5:4b:58:aa:67:76:71:1e:83:b7:66:da:86:98: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B1:C3:11:00:64:A7:0F:3C:6C:7F:F1:3C:34:F9:CB:B6:CD:40:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd3c8cf4-5e9d-34da-b0ca-15408bc4681d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.46.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5e:f3:42:fb:67:6c:b6:22:a3:46:61:22:ed:13:5b:56:e2: ea:e2:af:45:68:2a:22:66:c7:d5:da:67:60:7a:ae:52:e4:ac: db:b8:89:7a:fa:ed:68:a8:8e:60:51:94:ed:76:69:7f:2b:18: 5c:12:f0:cd:30:d3:50:78:f5:1d:c5:e1:e0:ef:6b:d5:b8:53: cd:f5:df:24:31:1c:ef:94:de:3d:de:2c:ad:8a:08:35:d5:96: 7d:7b:6a:9c:1b:ce:ce:6e:9d:b7:74:bb:f2:2a:aa:3f:71:18: 6e:5e:29:21:c8:8c:d8:1b:6e:a5:c9:bf:96:66:4b:40:f4:e5: 71:fa:74:3e:a3:d2:a9:10:18:1d:98:7e:f6:c0:a7:e6:ed:b7: 59:17:e9:f2:8e:33:98:5f:5e:a2:92:ce:46:c2:0d:aa:08:03: 64:31:ac:55:b1:66:c9:8b:a7:c3:ae:23:aa:e5:d7:49:70:a0: 5c:45:5c:ca:9f:90:3f:81:37:2b:1d:1b:2a:36:fb:0a:cc:47: bb:6f:1f:73:10:13:13:3e:31:bf:5e:9c:b1:ba:5b:b1:e9:bf: ee:ca:fb:25:3f:a1:63:dd:20:68:48:0b:87:57:b9:ab:9f:ab: 81:c0:80:ab:29:de:7b:26:ec:17:e1:a7:ce:b8:9b:b2:1f:eb: eb:ad:28:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErkqIZPg+rv3zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZTk1M2IxY2ItN2M0ZC00ZDk5LWFhNzgtNzg3MTU5YTk4NmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3qWAsWlXUO21C5cTfB+2rxSPp6rJT9E2z4X ++3Z+dQBkOigxrDf/xpx4yTS/vF+8HbVNGdx88b97iSq2ZxLV6NukB7tiCz4jGyR tMyQzE62SbY93p+ZKv8z9cY9gt/IGM5K5T/P3YSyQ+cAwzpPrHGt9wVPGIgbLaH9 VaBHGo7VDc8E+NpyYty9ZuEsHKqDLTCqG9utDsHs4SQ6ec82aWw8KCnPP6RdWziC tCJ/SkNjrioRnZsb0yhbKJRvjKGojIkBLFj8HkuPP48ZPqMPjXQGdBc1k9U4u7+7 T2SN7/iPe3akPARwr3WVpbd6hqmaxUtYqmd2cR6Dt2bahphAtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6xwxEAZKcPPGx/8Tw0+cu2zUAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2QzYzhjZjQtNWU5ZC0z NGRhLWIwY2EtMTU0MDhiYzQ2ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZe80L7Z2y2IqNGYSLtE1tW4urir0VoKiJmx9XaZ2B6rlLkrNu4iXr6 7WiojmBRlO12aX8rGFwS8M0w01B49R3F4eDva9W4U8313yQxHO+U3j3eLK2KCDXV ln17apwbzs5unbd0u/Iqqj9xGG5eKSHIjNgbbqXJv5ZmS0D05XH6dD6j0qkQGB2Y fvbAp+btt1kX6fKOM5hfXqKSzkbCDaoIA2QxrFWxZsmLp8OuI6rl10lwoFxFXMqf kD+BNysdGyo2+wrMR7tvH3MQExM+Mb9enLG6W7Hpv+7K+yU/oWPdIGhIC4dXuauf q4HAgKsp3nsm7Bfhp864m7If6+utKEI= -----END CERTIFICATE-----Generated at Tue Sep 22 08:59:26 2026 by rpki-client