$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8e826b6-9cb5-3ebb-89a1-1253c7272b19.roa File: d8e826b6-9cb5-3ebb-89a1-1253c7272b19.roa (raw, json) Hash identifier: ojvNQ304LqCOkKm9Kp/XWsNsNAG3N26L1bXOuCEi+g8= Subject key identifier: 2F:D5:DA:C1:D9:5A:C8:D8:1A:DA:99:51:D4:86:E4:D4:C7:CD:3C:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD6F4AD01DD391FF4A12C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8e826b6-9cb5-3ebb-89a1-1253c7272b19.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:6f:4a:d0:1d:d3:91:ff:4a:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=59ebd94c-35d1-4cf4-8f22-27aef26e3274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:4f:66:e6:5b:05:15:4a:11:e5:12:ec:e5: ee:1b:2e:59:fc:e7:dc:91:76:20:81:34:47:f1:3d: 68:34:49:c5:89:57:88:8b:a7:10:c5:e4:d2:ff:20: 79:63:00:90:83:4e:6b:54:09:24:12:b2:a8:ca:8b: a4:40:8d:8f:ff:46:13:5d:c0:e6:78:a5:d8:1d:97: 6b:20:eb:57:fa:26:8e:c9:a9:99:99:e8:a1:de:12: d4:e2:a0:26:bc:fb:30:cb:04:21:88:3c:36:d1:2e: cb:dc:66:5e:c6:42:d5:6d:98:ec:5f:f7:75:a4:c1: 6e:84:4d:69:c4:51:b8:9b:f8:a2:91:e6:83:a9:72: 10:21:1e:c0:49:f4:39:79:da:33:7f:7c:5f:e1:5f: 62:11:bb:e9:b9:15:23:c5:96:3c:e0:c1:4f:a1:58: a5:7c:e9:b0:66:a5:d3:61:63:f8:e1:8a:d2:18:97: 7a:e6:c9:85:41:50:7c:18:08:11:27:9e:26:27:e1: 50:0c:ed:92:98:0b:5f:4a:9c:d6:3b:55:0f:b0:a9: 93:30:46:60:02:8f:e0:ee:5b:16:6b:12:4a:48:f6: 66:4a:23:6b:bc:9a:4a:7e:0e:6d:b2:83:1e:01:0d: bb:a8:f3:f3:4f:d2:79:ad:c1:41:9f:51:35:ba:2d: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D5:DA:C1:D9:5A:C8:D8:1A:DA:99:51:D4:86:E4:D4:C7:CD:3C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8e826b6-9cb5-3ebb-89a1-1253c7272b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5b:7a:01:38:3a:72:d5:5b:c8:d2:7f:77:dd:3b:76:29:5c: e9:5f:63:16:c3:31:e6:a0:2a:3b:fd:b3:e1:fa:40:67:0e:e7: 58:71:2f:7a:7d:d1:9a:f2:25:e1:9a:ce:36:9a:32:f4:f5:1c: 94:5a:ca:f5:d1:df:3d:ab:56:06:dd:03:4a:ce:77:01:5f:7e: 7d:b1:d7:46:48:be:f9:38:88:9f:34:9c:ca:90:67:e4:ce:23: 91:96:8c:b1:dc:df:94:00:b9:4f:b2:82:5b:b9:dc:42:f7:4a: a7:5c:b1:d4:cc:14:34:48:c0:e5:94:f6:c7:b2:ef:a9:c8:da: aa:2e:3d:2b:45:26:bf:66:9d:7e:5e:f7:6f:e0:95:d4:ee:79: ff:a5:da:da:a6:1d:b6:5f:53:b7:a9:3a:a4:fa:9f:bd:6a:0d: e3:a6:27:ad:4a:8c:88:80:97:71:70:f4:e8:b4:f6:37:b5:31: 9c:74:5f:3c:61:3f:29:a7:a4:df:ce:1b:9b:b0:a7:6d:fa:9e: c0:18:42:ba:98:a3:7c:59:7e:42:6b:b2:03:6c:d7:4f:a9:b9: fe:1d:55:2e:d8:77:62:80:8b:12:24:e5:5e:c4:0b:32:73:1b: 82:fb:f2:9f:fc:5a:8a:bc:dd:d7:d5:fc:35:ce:1d:86:80:22: 10:ce:88:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rW9K0B3Tkf9KEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NTllYmQ5NGMtMzVkMS00Y2Y0LThmMjItMjdhZWYyNmUzMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyNPZuZbBRVKEeUS7OXuGy5Z/OfckXYggTRH 8T1oNEnFiVeIi6cQxeTS/yB5YwCQg05rVAkkErKoyoukQI2P/0YTXcDmeKXYHZdr IOtX+iaOyamZmeih3hLU4qAmvPswywQhiDw20S7L3GZexkLVbZjsX/d1pMFuhE1p xFG4m/iikeaDqXIQIR7ASfQ5edozf3xf4V9iEbvpuRUjxZY84MFPoVilfOmwZqXT YWP44YrSGJd65smFQVB8GAgRJ54mJ+FQDO2SmAtfSpzWO1UPsKmTMEZgAo/g7lsW axJKSPZmSiNrvJpKfg5tsoMeAQ27qPPzT9J5rcFBn1E1ui2J8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/V2sHZWsjYGtqZUdSG5NTHzTyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDhlODI2YjYtOWNiNS0z ZWJiLTg5YTEtMTI1M2M3MjcyYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJbegE4OnLVW8jSf3fdO3YpXOlfYxbDMeagKjv9s+H6QGcO51hxL3p9 0ZryJeGazjaaMvT1HJRayvXR3z2rVgbdA0rOdwFffn2x10ZIvvk4iJ80nMqQZ+TO I5GWjLHc35QAuU+yglu53EL3SqdcsdTMFDRIwOWU9sey76nI2qouPStFJr9mnX5e 92/gldTuef+l2tqmHbZfU7epOqT6n71qDeOmJ61KjIiAl3Fw9Oi09je1MZx0Xzxh PymnpN/OG5uwp236nsAYQrqYo3xZfkJrsgNs10+puf4dVS7Yd2KAixIk5V7ECzJz G4L78p/8Woq83dfV/DXOHYaAIhDOiBE= -----END CERTIFICATE-----Generated at Mon Sep 28 14:55:40 2026 by rpki-client