$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1e4fd83-4e0d-3b3e-abf0-ef18fa9bf65a.roa File: d1e4fd83-4e0d-3b3e-abf0-ef18fa9bf65a.roa (raw, json) Hash identifier: wWLeWbT1nnb2fqkMKFnKLy3yOTAc697ePIXJQRrq6XE= Subject key identifier: 26:51:03:4D:54:69:20:CD:81:3C:43:D6:86:76:C3:E6:40:E2:36:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF87CD6E1F5E8261EA39CB87A Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1e4fd83-4e0d-3b3e-abf0-ef18fa9bf65a.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.65.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:d6:e1:f5:e8:26:1e:a3:9c:b8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=89740682-9b29-4e06-8dfb-42fc35de7ace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:94:89:bb:90:f2:99:a5:6f:2a:5e:c3:e2:be: 93:ff:08:31:e1:ac:eb:6e:8e:10:5f:81:73:98:3f: 17:6c:74:eb:11:78:78:c9:5d:97:7e:ca:28:7b:16: 22:78:41:2d:77:a2:43:78:b5:30:0a:d4:0e:75:7e: d3:a5:93:39:3a:3b:5c:02:32:1e:91:5b:fe:57:ca: 05:01:e4:fe:97:e6:25:8a:b4:d9:cb:36:95:cc:4b: 36:b9:c3:99:43:68:eb:5f:1b:c4:d8:08:04:e5:44: 53:15:65:05:19:b0:94:a4:09:80:48:db:15:dd:c9: b3:26:a0:9c:80:37:bb:af:54:2a:72:f8:aa:cf:20: 52:a3:d3:b1:4a:70:62:83:90:44:49:b3:c7:1a:e4: 2f:dc:6d:b6:f2:e5:34:54:d2:e6:99:8e:c3:8f:cd: e1:c6:a2:2f:03:ec:5c:ec:37:ae:4d:64:68:79:3f: b5:24:02:31:96:16:a2:bf:87:30:b3:8d:71:60:e7: d5:fe:7c:bb:c6:0a:31:c8:8c:d3:0a:28:2f:a8:76: 27:d1:5c:b8:f5:f8:43:80:f1:27:89:43:cc:10:a1: f6:c5:d4:47:98:71:1a:a2:fa:c4:d3:5c:9d:b9:c6: 33:c6:6c:55:0e:a3:27:ca:64:b5:76:c7:5b:7c:f0: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:51:03:4D:54:69:20:CD:81:3C:43:D6:86:76:C3:E6:40:E2:36:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1e4fd83-4e0d-3b3e-abf0-ef18fa9bf65a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9c:04:e8:d0:b0:90:b3:c5:b0:ee:32:c8:21:cc:3c:1e:d3: bd:b8:7c:3a:32:50:8d:1d:8c:39:66:1c:25:59:e2:67:0a:9d: 9f:64:34:c9:42:99:63:2f:71:0f:a3:5c:a6:34:26:1e:1d:52: 4a:99:61:12:16:43:92:86:8a:1c:5e:50:77:d3:e9:2d:8d:69: 94:90:32:6d:0a:39:96:72:da:09:87:a8:b1:32:0b:05:87:9c: 87:78:86:1c:de:6d:9c:5e:ea:41:9a:45:aa:86:94:80:2b:0c: 5c:7b:16:20:ec:73:25:1f:52:05:72:21:6b:3d:0b:30:1e:4b: ed:90:cb:fd:59:81:ff:91:29:7c:66:fd:0d:66:95:4b:b1:87: f5:f1:0f:6d:e7:5d:e8:4e:06:98:6d:72:74:cb:e9:fd:12:cb: 03:47:bd:4a:9e:76:d8:4f:1a:9d:ca:dc:3b:fc:cc:68:f6:2d: 24:1b:a7:3b:9f:55:b3:cd:81:7a:a7:c2:9b:e3:bc:14:d8:9c: 66:73:2b:a9:fe:c0:4f:78:1f:40:d7:3f:f8:44:87:d5:24:ac: 68:85:2e:47:5f:36:86:5c:3e:17:82:fc:a7:da:5d:1d:f3:23: b5:3c:d8:93:1a:65:6b:27:54:ae:3c:08:44:15:4d:09:e0:8e: 8f:bf:8e:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fNbh9egmHqOcuHowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ODk3NDA2ODItOWIyOS00ZTA2LThkZmItNDJmYzM1ZGU3YWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpSJu5DymaVvKl7D4r6T/wgx4azrbo4QX4Fz mD8XbHTrEXh4yV2XfsooexYieEEtd6JDeLUwCtQOdX7TpZM5OjtcAjIekVv+V8oF AeT+l+YlirTZyzaVzEs2ucOZQ2jrXxvE2AgE5URTFWUFGbCUpAmASNsV3cmzJqCc gDe7r1QqcviqzyBSo9OxSnBig5BESbPHGuQv3G228uU0VNLmmY7Dj83hxqIvA+xc 7DeuTWRoeT+1JAIxlhaiv4cws41xYOfV/ny7xgoxyIzTCigvqHYn0Vy49fhDgPEn iUPMEKH2xdRHmHEaovrE01yducYzxmxVDqMnymS1dsdbfPD1FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZRA01UaSDNgTxD1oZ2w+ZA4jZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDFlNGZkODMtNGUwZC0z YjNlLWFiZjAtZWYxOGZhOWJmNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0EQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGcBOjQsJCzxbDuMsghzDwe0724fDoyUI0djDlmHCVZ4mcKnZ9kNMlC mWMvcQ+jXKY0Jh4dUkqZYRIWQ5KGihxeUHfT6S2NaZSQMm0KOZZy2gmHqLEyCwWH nId4hhzebZxe6kGaRaqGlIArDFx7FiDscyUfUgVyIWs9CzAeS+2Qy/1Zgf+RKXxm /Q1mlUuxh/XxD23nXehOBphtcnTL6f0SywNHvUqedthPGp3K3Dv8zGj2LSQbpzuf VbPNgXqnwpvjvBTYnGZzK6n+wE94H0DXP/hEh9UkrGiFLkdfNoZcPheC/KfaXR3z I7U82JMaZWsnVK48CEQVTQngjo+/jsY= -----END CERTIFICATE-----Generated at Tue Sep 22 16:04:56 2026 by rpki-client