$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e33e3784-a850-37be-8bda-a9526777aa09.roa File: e33e3784-a850-37be-8bda-a9526777aa09.roa (raw, json) Hash identifier: vHPAaNr95XDi2tOJ6KjuFEFALRxE2GNLw1NyKNdzZMA= Subject key identifier: 7B:06:63:D7:D6:BE:34:B6:10:22:28:6F:0E:38:A3:57:92:53:04:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C4F047865E58937E6560 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e33e3784-a850-37be-8bda-a9526777aa09.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 35994 IP address blocks: 23.39.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c4:f0:47:86:5e:58:93:7e:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=bc3b4280-f65c-463e-9754-1ca76b33cfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ab:73:70:d2:45:4e:de:b2:4e:3e:8d:82:5c: 34:da:72:c6:9a:54:a9:70:32:46:86:5a:ce:6e:27: 9d:91:e0:7f:b2:21:a4:ea:fc:ea:11:78:c7:f1:d1: 71:c6:dc:ea:b7:f6:72:fe:f7:0b:da:e9:bb:af:2a: 23:df:cf:fc:97:39:36:59:ef:a4:51:f0:e0:25:07: 39:ae:57:16:82:59:5b:74:3f:fb:dc:84:d4:17:81: 7f:23:f7:e2:0c:7a:bf:c2:02:52:13:c6:2d:9f:ec: 59:41:cb:4d:6b:21:d6:8b:99:ca:c1:7a:73:9a:37: 87:0a:f3:62:fc:41:26:3c:58:dc:69:36:bd:b1:c0: ba:dd:78:2b:e9:6a:97:45:d3:61:10:6e:67:50:53: aa:5e:10:00:1a:9d:c5:d3:fb:b9:12:d0:9d:34:ef: dc:11:50:90:6a:6f:8a:d7:e5:81:9f:36:3c:fc:12: 6c:6a:6e:19:54:7e:ae:d3:a6:cb:37:d3:f8:0c:99: 3b:21:74:0e:12:96:33:c1:85:46:4f:c0:ea:81:c1: 37:c0:2d:16:f0:61:3f:62:5e:51:3e:c9:33:b7:58: f3:3f:e1:83:49:ee:b6:98:2c:02:cb:69:40:bd:d8: 6a:93:5f:ad:e8:14:32:0f:5b:61:3c:57:aa:a8:fb: 83:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:06:63:D7:D6:BE:34:B6:10:22:28:6F:0E:38:A3:57:92:53:04:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e33e3784-a850-37be-8bda-a9526777aa09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:56:98:e3:33:56:b6:5c:ea:5b:bf:b2:76:c1:03:ac:20:76: 2d:a5:aa:66:5e:93:40:f4:70:dc:33:07:1e:ee:d9:0c:7b:f2: 14:ef:f0:d2:73:cf:bb:ab:2c:af:90:99:b4:82:2a:9e:2d:79: 59:e8:a4:e9:5f:12:ab:cf:0b:42:66:2e:8f:b5:d5:35:ab:53: e1:ee:93:f8:9d:81:f5:27:4e:00:4e:40:01:52:77:47:15:55: 93:38:3a:1d:bb:6d:40:a0:a3:7f:8a:10:cb:f1:68:8b:b8:50: ee:6c:09:a4:78:68:49:3e:7d:66:c5:8c:da:61:80:ee:ef:11: 84:fd:0b:92:05:ad:5b:e4:27:e6:2c:d6:b8:67:f0:f5:80:57: 12:73:1c:7e:7c:a2:f2:8e:cb:9e:74:6d:6c:56:5f:a9:11:d6: ab:c7:73:9d:7c:07:d6:0d:79:d7:69:7b:d4:cd:84:13:6f:34: 78:bc:a4:48:3c:7b:02:28:6e:15:4b:e4:71:b1:d2:ec:b8:16: 2f:0d:a9:a5:06:bc:80:98:34:8f:5e:40:d7:cf:ef:c7:d3:8a: 67:61:76:99:2c:44:aa:6b:53:61:73:f4:ca:e3:e4:1d:1d:b8: 8f:be:37:d9:b8:fd:e1:30:c0:8b:e3:54:71:cc:eb:79:8f:2e: 5d:4a:24:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98TwR4ZeWJN+ZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmMzYjQyODAtZjY1Yy00NjNlLTk3NTQtMWNhNzZiMzNjZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6tzcNJFTt6yTj6Nglw02nLGmlSpcDJGhlrO biedkeB/siGk6vzqEXjH8dFxxtzqt/Zy/vcL2um7ryoj38/8lzk2We+kUfDgJQc5 rlcWgllbdD/73ITUF4F/I/fiDHq/wgJSE8Ytn+xZQctNayHWi5nKwXpzmjeHCvNi /EEmPFjcaTa9scC63Xgr6WqXRdNhEG5nUFOqXhAAGp3F0/u5EtCdNO/cEVCQam+K 1+WBnzY8/BJsam4ZVH6u06bLN9P4DJk7IXQOEpYzwYVGT8DqgcE3wC0W8GE/Yl5R Pskzt1jzP+GDSe62mCwCy2lAvdhqk1+t6BQyD1thPFeqqPuDdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsGY9fWvjS2ECIobw44o1eSUwT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTMzZTM3ODQtYTg1MC0z N2JlLThiZGEtYTk1MjY3NzdhYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyenMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1WmOMzVrZc6lu/snbBA6wgdi2lqmZek0D0cNwzBx7u2Qx78hTv8NJz z7urLK+QmbSCKp4teVnopOlfEqvPC0JmLo+11TWrU+Huk/idgfUnTgBOQAFSd0cV VZM4Oh27bUCgo3+KEMvxaIu4UO5sCaR4aEk+fWbFjNphgO7vEYT9C5IFrVvkJ+Ys 1rhn8PWAVxJzHH58ovKOy550bWxWX6kR1qvHc518B9YNeddpe9TNhBNvNHi8pEg8 ewIobhVL5HGx0uy4Fi8NqaUGvICYNI9eQNfP78fTimdhdpksRKprU2Fz9Mrj5B0d uI++N9m4/eEwwIvjVHHM63mPLl1KJG8= -----END CERTIFICATE-----Generated at Mon Sep 28 21:17:34 2026 by rpki-client