$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de58d29d-6cd0-3704-8f2d-dd2bb2e3bde5.roa File: de58d29d-6cd0-3704-8f2d-dd2bb2e3bde5.roa (raw, json) Hash identifier: yo0x+Iq2iCXfHLZMCrURHR7DhFDiKCJJlMXM8zB98x8= Subject key identifier: 05:F5:A1:45:6B:6B:18:6F:1B:40:B9:EA:A4:AF:3D:04:33:EB:ED:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD6F3154A6D60374566200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de58d29d-6cd0-3704-8f2d-dd2bb2e3bde5.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.43.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:6f:31:54:a6:d6:03:74:56:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=22190b09-02e4-453b-aac3-3005053e5bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:70:00:93:06:e6:30:e5:ee:6a:71:ae:53: 31:7a:02:e4:29:a3:b3:c7:b1:7e:5b:2f:56:f2:5e: 1e:2a:cd:a6:75:2a:11:69:61:d3:7e:0e:7b:43:99: 20:0e:2e:30:9d:5a:74:c1:fc:fc:e0:dc:ef:16:83: f7:b9:15:9a:88:01:6c:20:20:7e:e5:68:b1:55:10: 29:33:54:34:1f:ab:13:00:18:fb:7f:c0:e9:85:29: 51:ca:ef:60:b9:a2:d3:41:8d:8a:12:d8:1f:36:24: ca:09:a1:a8:5d:89:10:d6:b8:6f:98:2c:30:10:ce: 8e:41:96:2a:4e:05:f6:2a:d1:b8:87:bc:95:c5:ce: fc:81:f2:c7:2d:87:10:19:15:70:af:16:15:8d:a4: 8c:c8:ed:24:88:3f:2a:6d:ae:b8:05:37:5f:36:a5: 24:ca:4b:ab:07:fe:ff:3b:b2:f8:08:7e:fa:b0:7e: c9:84:cf:62:ff:c8:4c:07:80:78:28:e2:a7:14:c8: 01:bb:67:34:7c:88:55:8d:31:01:3c:99:65:cd:f1: da:fe:84:5c:d9:74:a7:0a:09:3a:64:84:b8:23:50: 17:94:96:cc:94:b7:56:90:b4:eb:78:cd:24:be:73: 8d:69:4f:f8:d7:7b:74:97:1f:14:23:a8:53:7c:4c: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F5:A1:45:6B:6B:18:6F:1B:40:B9:EA:A4:AF:3D:04:33:EB:ED:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de58d29d-6cd0-3704-8f2d-dd2bb2e3bde5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:36:48:02:a2:a5:1e:a2:17:46:78:71:0d:bb:55:a0:3d:47: 3f:ed:14:55:05:f5:b8:1e:7e:3d:4f:ef:ec:23:d0:1d:aa:e5: 42:3e:70:39:cb:96:74:31:48:9f:68:8e:37:58:8c:30:66:ae: 92:96:de:c9:24:82:1d:76:8b:7f:f7:96:65:7d:67:69:52:84: c8:2c:c3:74:90:a0:18:65:a6:d3:ee:7e:5e:50:ff:39:e4:77: 44:fc:09:d4:f7:72:55:1c:2d:ee:45:33:69:f2:1f:52:4b:d6: d8:53:47:81:5e:8e:e8:43:8d:79:1e:78:08:0b:ec:78:03:ac: b6:a3:d2:a8:74:a4:2b:51:0e:0e:7a:17:45:93:90:80:b1:79: 98:38:03:c6:57:cb:92:d6:c1:31:10:51:30:ae:c1:ff:42:30: 91:a4:d2:1a:34:a0:93:92:9f:07:04:82:db:7a:c9:e5:0a:cf: 9c:31:fd:e6:e3:e7:49:91:58:ae:99:03:d0:67:81:0d:14:5b: 5a:53:89:e6:06:93:d3:20:e9:d9:5c:6e:0b:e6:d6:0b:ed:ab: 60:78:7d:76:56:10:df:02:d2:c7:5e:32:dc:de:87:6f:20:b6: 2e:55:c1:b3:bf:12:7c:ca:32:29:4f:09:35:91:1e:12:f0:7d: 85:35:a0:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rW8xVKbWA3RWYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MjIxOTBiMDktMDJlNC00NTNiLWFhYzMtMzAwNTA1M2U1YmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1klwAJMG5jDl7mpxrlMxegLkKaOzx7F+Wy9W 8l4eKs2mdSoRaWHTfg57Q5kgDi4wnVp0wfz84NzvFoP3uRWaiAFsICB+5WixVRAp M1Q0H6sTABj7f8DphSlRyu9guaLTQY2KEtgfNiTKCaGoXYkQ1rhvmCwwEM6OQZYq TgX2KtG4h7yVxc78gfLHLYcQGRVwrxYVjaSMyO0kiD8qba64BTdfNqUkykurB/7/ O7L4CH76sH7JhM9i/8hMB4B4KOKnFMgBu2c0fIhVjTEBPJllzfHa/oRc2XSnCgk6 ZIS4I1AXlJbMlLdWkLTreM0kvnONaU/413t0lx8UI6hTfEwy5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAX1oUVraxhvG0C56qSvPQQz6+3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGU1OGQyOWQtNmNkMC0z NzA0LThmMmQtZGQyYmIyZTNiZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI2SAKipR6iF0Z4cQ27VaA9Rz/tFFUF9bgefj1P7+wj0B2q5UI+cDnL lnQxSJ9ojjdYjDBmrpKW3skkgh12i3/3lmV9Z2lShMgsw3SQoBhlptPufl5Q/znk d0T8CdT3clUcLe5FM2nyH1JL1thTR4FejuhDjXkeeAgL7HgDrLaj0qh0pCtRDg56 F0WTkICxeZg4A8ZXy5LWwTEQUTCuwf9CMJGk0ho0oJOSnwcEgtt6yeUKz5wx/ebj 50mRWK6ZA9BngQ0UW1pTieYGk9Mg6dlcbgvm1gvtq2B4fXZWEN8C0sdeMtzeh28g ti5VwbO/EnzKMilPCTWRHhLwfYU1oDw= -----END CERTIFICATE-----Generated at Tue Sep 22 14:31:43 2026 by rpki-client