$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa File: cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa (raw, json) Hash identifier: EZn6gfNwSgbZ7dzzPj1hNqdvl/HJRrVuS5etUkZ+mfs= Subject key identifier: E3:6A:1F:D8:CE:9D:CE:17:3A:DB:C0:8C:2E:D7:6D:5A:4B:D2:48:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3E47F3B9F8AAE4F57ED6CAD8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16625 IP address blocks: 23.40.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:f3:b9:f8:aa:e4:f5:7e:d6:ca:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=46e4fb60-d055-4275-a5df-dc0159efbaf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:50:72:e4:f7:38:6e:56:c5:74:ba:e7:db:97: f2:47:d2:7f:dc:a4:47:c4:67:bd:45:fb:56:e3:84: 20:49:49:66:1a:3f:61:6b:02:2b:18:71:6f:f3:70: d9:8e:f3:4f:09:16:ba:3f:4e:0e:82:15:92:f4:c0: 88:06:5c:8f:1a:b4:60:97:30:b9:39:4a:ec:e5:7e: 08:f7:32:93:59:0e:63:22:78:94:46:61:ab:e7:02: 89:05:cb:93:3e:4c:09:01:93:13:a9:9e:35:36:30: 82:e5:65:a2:45:44:8f:53:c6:aa:6b:f7:64:ac:de: 76:aa:f8:0f:31:12:7d:dd:b0:57:7f:5a:d5:1a:54: bd:b5:f9:5a:4a:8c:cd:d4:4f:eb:85:44:6a:c5:93: 00:76:96:d4:03:84:a3:68:ef:1d:4c:1c:6b:1c:0d: 84:10:d2:2c:7e:78:4c:38:dd:fb:cc:a7:61:c4:18: 48:a6:f6:05:09:c8:18:8e:e0:38:cc:80:4f:c3:b1: c1:20:e0:4f:8b:61:1b:8d:92:f3:df:35:7a:08:70: 69:a0:3a:b1:50:e6:b2:e7:1c:23:6b:c9:96:67:82: a8:47:1e:67:c0:ae:05:96:94:d9:dc:41:a9:97:3d: 61:1f:b6:3c:03:fb:8e:22:4a:2c:09:1a:e3:aa:9d: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6A:1F:D8:CE:9D:CE:17:3A:DB:C0:8C:2E:D7:6D:5A:4B:D2:48:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:e8:dd:1c:93:30:c7:f3:a7:56:86:c4:d4:ea:60:01:06:24: ef:3e:7b:9b:3f:e9:e2:e6:c9:f0:a0:44:18:8f:6f:5d:c1:80: 4c:05:1f:f5:ad:e8:06:fc:fa:0b:c3:92:60:9b:5d:11:51:06: 28:eb:ac:38:b4:63:8b:81:d3:cf:f1:bc:bd:a8:e6:7a:c0:aa: 19:e6:27:cd:4a:8c:89:19:d6:94:18:df:65:de:68:51:87:9d: ed:52:dd:34:ef:69:9d:fa:9a:e7:f0:a4:02:77:ac:d7:1d:62: f4:3c:d9:da:84:8d:9b:81:e3:4e:e9:b3:c8:e4:28:8a:a6:05: 8a:48:c5:7d:7f:26:fe:b5:de:47:28:a5:5c:a5:a5:74:02:93: 14:1f:d3:69:c2:3e:f1:62:ca:35:be:a9:72:32:55:60:11:74: 4a:cb:78:13:26:0a:49:5c:1c:a7:db:98:64:48:9f:c4:47:a7: 82:9e:01:0f:17:fd:f9:fa:ae:cf:22:d1:1d:2f:0a:21:54:df: 4c:e0:ff:c2:2b:4d:2e:5c:e8:c4:b2:8a:3c:5f:4d:e0:8c:6c: a3:7e:af:77:06:59:7a:43:b9:b8:f9:11:b2:5a:fc:b7:90:d2: 83:e8:79:3b:d3:e0:39:2a:7b:fa:a5:5e:af:c7:87:3a:4c:5d: ae:51:80:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R/O5+Krk9X7WytgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NDZlNGZiNjAtZDA1NS00Mjc1LWE1ZGYtZGMwMTU5ZWZiYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VBy5Pc4blbFdLrn25fyR9J/3KRHxGe9RftW 44QgSUlmGj9hawIrGHFv83DZjvNPCRa6P04OghWS9MCIBlyPGrRglzC5OUrs5X4I 9zKTWQ5jIniURmGr5wKJBcuTPkwJAZMTqZ41NjCC5WWiRUSPU8aqa/dkrN52qvgP MRJ93bBXf1rVGlS9tflaSozN1E/rhURqxZMAdpbUA4SjaO8dTBxrHA2EENIsfnhM ON37zKdhxBhIpvYFCcgYjuA4zIBPw7HBIOBPi2EbjZLz3zV6CHBpoDqxUOay5xwj a8mWZ4KoRx5nwK4FlpTZ3EGplz1hH7Y8A/uOIkosCRrjqp3ofwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONqH9jOnc4XOtvAjC7XbVpL0kj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RmMTVkNjAtMGI1YS0z MTQxLTgzMjctMTBmYjMyMTFmZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPo3RyTMMfzp1aGxNTqYAEGJO8+e5s/6eLmyfCgRBiPb13BgEwFH/Wt 6Ab8+gvDkmCbXRFRBijrrDi0Y4uB08/xvL2o5nrAqhnmJ81KjIkZ1pQY32XeaFGH ne1S3TTvaZ36mufwpAJ3rNcdYvQ82dqEjZuB407ps8jkKIqmBYpIxX1/Jv613kco pVylpXQCkxQf02nCPvFiyjW+qXIyVWARdErLeBMmCklcHKfbmGRIn8RHp4KeAQ8X /fn6rs8i0R0vCiFU30zg/8IrTS5c6MSyijxfTeCMbKN+r3cGWXpDubj5EbJa/LeQ 0oPoeTvT4Dkqe/qlXq/HhzpMXa5RgDA= -----END CERTIFICATE-----Generated at Tue Sep 22 15:07:27 2026 by rpki-client