$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f897acc6-a7d4-3d98-a462-0860f7cc4426.roa File: f897acc6-a7d4-3d98-a462-0860f7cc4426.roa (raw, json) Hash identifier: 98t6EEyApUrZcHdKuAKvbuTt8lGaHdvy0mygWDzbaiU= Subject key identifier: 56:F4:68:80:80:54:CA:1F:6C:41:F3:28:07:45:ED:94:08:3D:E3:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C49167E47187A5007130 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f897acc6-a7d4-3d98-a462-0860f7cc4426.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.36.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c4:91:67:e4:71:87:a5:00:71:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=ca7db20d-f1d3-45c4-9233-bfb837e3ba0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4f:30:9e:0f:82:b8:9e:3a:48:e1:6e:ec:2f: e6:13:c0:13:9d:f2:3a:b2:d0:30:27:3e:bf:ba:87: a8:77:6a:87:60:57:c6:ca:1f:bc:ef:a1:bc:0f:19: da:bd:e0:98:2d:d8:b0:13:d5:3c:0a:85:a1:1e:3f: 75:fe:c5:b0:69:10:37:2c:70:31:76:4a:c7:bb:b7: 12:cf:00:26:b5:94:2e:27:c0:6d:33:83:6f:3e:8f: 76:72:82:e9:84:12:15:81:97:a4:a3:28:ff:30:c8: aa:6c:66:70:81:13:b0:84:f0:fd:e1:83:1e:f1:80: 3f:70:88:a8:3f:1c:b0:55:48:e0:00:b6:22:05:f6: fb:a1:fb:9b:0e:35:96:8f:88:19:cc:06:14:56:8e: 82:93:39:b0:b4:c9:d0:78:a8:e2:84:bb:9d:c2:80: 7d:a7:59:1e:00:17:d6:2c:59:a6:8b:29:0c:f5:95: 00:7d:e8:ce:da:d3:e7:73:84:f9:6a:ed:a0:85:cf: 1f:84:31:21:fd:71:b4:a7:35:a1:1f:29:d3:5e:4c: b5:b3:5a:4d:7d:6b:a1:c5:06:32:1d:4d:91:ab:e1: a4:54:53:9c:38:18:b0:52:6a:7c:4b:a4:9d:3d:cb: ae:60:91:23:2a:97:0a:a8:dd:10:82:96:63:40:a0: e6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F4:68:80:80:54:CA:1F:6C:41:F3:28:07:45:ED:94:08:3D:E3:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f897acc6-a7d4-3d98-a462-0860f7cc4426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f7:23:bd:1c:a8:2a:57:72:f2:81:51:08:27:71:0a:3a:ee: cf:5e:ce:5c:6f:89:db:73:db:8d:83:7d:48:84:a1:20:97:27: b3:1b:73:1f:ad:ea:2b:0f:82:a5:8b:f6:80:54:75:84:4f:20: 6f:a9:ef:0b:1b:4b:f3:63:2b:58:01:a6:24:49:ec:df:1f:6d: c3:0e:c0:e3:dc:21:50:e7:0c:75:9b:c7:c5:0d:c3:e6:bc:2d: f1:20:a2:99:a7:02:68:11:0e:98:56:a9:b7:14:4f:66:ab:f6: 01:b5:27:67:d1:95:cb:8c:06:ee:b6:1c:75:53:6a:b4:13:67: 6e:60:63:ee:f5:ad:2a:c7:a7:e8:8a:6b:f4:1a:e7:52:25:63: 7c:71:96:5a:6c:95:ea:29:99:58:6c:10:a7:66:a9:49:61:e4: db:39:73:38:04:d0:1c:5e:c9:43:5b:08:7d:37:1c:e1:41:6f: 49:64:81:58:c3:e5:8e:65:7d:1c:fa:0a:32:81:b2:31:50:49: d9:aa:60:1d:6f:cc:03:26:58:26:7d:95:84:16:42:aa:5e:d7: cd:4d:0f:be:b2:e7:bb:55:70:63:34:ad:1d:d7:b7:93:1e:a1: 30:b6:b8:54:c7:42:a7:1b:8e:3b:a5:fb:23:9e:39:20:64:61: 43:d8:c8:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98SRZ+Rxh6UAcTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk Y2E3ZGIyMGQtZjFkMy00NWM0LTkyMzMtYmZiODM3ZTNiYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU8wng+CuJ46SOFu7C/mE8ATnfI6stAwJz6/ uoeod2qHYFfGyh+876G8DxnaveCYLdiwE9U8CoWhHj91/sWwaRA3LHAxdkrHu7cS zwAmtZQuJ8BtM4NvPo92coLphBIVgZekoyj/MMiqbGZwgROwhPD94YMe8YA/cIio PxywVUjgALYiBfb7ofubDjWWj4gZzAYUVo6CkzmwtMnQeKjihLudwoB9p1keABfW LFmmiykM9ZUAfejO2tPnc4T5au2ghc8fhDEh/XG0pzWhHynTXky1s1pNfWuhxQYy HU2Rq+GkVFOcOBiwUmp8S6SdPcuuYJEjKpcKqN0QgpZjQKDmvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb0aICAVMofbEHzKAdF7ZQIPePgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjg5N2FjYzYtYTdkNC0z ZDk4LWE0NjItMDg2MGY3Y2M0NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL3I70cqCpXcvKBUQgncQo67s9ezlxvidtz242DfUiEoSCXJ7Mbcx+t 6isPgqWL9oBUdYRPIG+p7wsbS/NjK1gBpiRJ7N8fbcMOwOPcIVDnDHWbx8UNw+a8 LfEgopmnAmgRDphWqbcUT2ar9gG1J2fRlcuMBu62HHVTarQTZ25gY+71rSrHp+iK a/Qa51IlY3xxllpsleopmVhsEKdmqUlh5Ns5czgE0BxeyUNbCH03HOFBb0lkgVjD 5Y5lfRz6CjKBsjFQSdmqYB1vzAMmWCZ9lYQWQqpe181ND76y57tVcGM0rR3Xt5Me oTC2uFTHQqcbjjul+yOeOSBkYUPYyGc= -----END CERTIFICATE-----Generated at Sun Sep 20 20:21:12 2026 by rpki-client