$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa File: 215471b5-2100-3f40-ae75-911f05bd076e.roa (raw, json) Hash identifier: TLNjD4ZgbuKAWz/1ysltgU6fCCNxhIDBJ+svQgsg3GQ= Subject key identifier: 1D:8C:5C:61:4A:39:16:D4:CC:BC:28:A2:19:30:87:BC:58:F4:8C:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F093CF7CC2F33F1B517E8C280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 20940 IP address blocks: 23.10.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f7:cc:2f:33:f1:b5:17:e8:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=a90a5626-f7cf-4273-9e84-3570a099fb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:7e:24:fc:4c:1a:e4:23:fa:9c:fd:84:47: 97:21:dc:b5:fb:c9:96:e0:57:86:57:91:f1:a8:4a: ad:b7:7a:f2:38:c9:fc:40:2c:11:be:38:12:b4:c0: 7c:87:12:a2:99:6c:b0:28:92:04:59:3d:d1:07:da: 96:fa:1a:a6:1e:8f:bc:55:bb:64:fb:de:ad:2c:a2: 9e:ef:6a:c4:7f:cc:86:cc:0a:2c:cf:25:1b:98:ff: 63:92:f1:4d:0c:da:5d:14:de:27:77:4d:d5:1c:19: 8c:91:98:89:2a:54:9a:9d:06:1f:6c:62:6c:36:52: dd:ff:fc:cb:8d:b7:cd:22:34:ff:5d:e5:2f:22:3d: 53:f2:fb:ec:b3:6b:2d:a4:55:65:25:8d:06:37:dd: 15:1d:a1:85:b9:20:d1:79:a4:db:e5:ef:af:b8:41: 71:c2:7b:9e:c3:75:53:df:8b:37:bf:5f:84:50:3c: a7:24:cd:85:96:62:34:09:ca:77:0d:77:ea:50:23: 30:ff:72:3f:b7:33:22:3f:a1:e2:da:48:1b:80:db: d5:f9:cd:1d:b0:24:e7:9a:89:a4:a9:5a:47:0d:3b: 37:b5:0c:d1:6b:c7:d8:8b:dd:e9:5c:b5:85:fa:79: 15:ef:70:0d:26:2b:d1:63:9a:27:c5:8e:a9:e8:25: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8C:5C:61:4A:39:16:D4:CC:BC:28:A2:19:30:87:BC:58:F4:8C:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/215471b5-2100-3f40-ae75-911f05bd076e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.10.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:73:45:13:bc:63:36:ab:0f:d8:84:25:99:2b:76:47:22:64: da:ce:ed:5f:55:99:25:ed:60:f5:ec:b5:da:35:76:d5:85:5d: ed:47:87:87:31:d8:3f:d1:bd:33:8b:86:9d:91:f7:79:b8:77: 09:3f:22:a9:94:fd:67:4a:fa:03:fd:4b:d4:b1:6b:3d:ee:d8: 38:00:8e:6d:3c:5c:19:4e:47:6a:c2:5f:87:71:04:d3:73:da: 0b:ed:b7:cb:8d:84:1c:8f:99:98:3e:0d:12:d0:01:8a:7e:30: fc:7b:e7:4e:36:e2:7f:81:13:12:5d:39:c7:8c:af:27:9b:85: 5d:d2:66:2f:66:7f:81:7f:ff:f6:cf:2a:88:df:80:d7:ba:94: b3:f9:b5:46:9e:f0:f6:3a:dc:63:86:ce:69:a6:f4:c2:b9:96: 09:ac:e2:4f:78:d0:d7:a6:22:83:37:50:b1:d1:43:52:f8:57: d6:af:b1:c7:b8:2e:90:37:2b:25:84:51:05:53:b8:14:bd:7a: 8b:bd:7d:9b:e4:68:86:9b:47:95:fa:55:37:e1:65:0c:3a:ef: 70:97:21:15:8b:58:33:27:0d:34:99:47:e2:75:1d:0b:81:31: 5d:ce:1c:8b:e5:6c:43:a3:a7:8b:76:64:f8:19:7e:d4:0b:bb: 93:65:7f:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPfMLzPxtRfowoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YTkwYTU2MjYtZjdjZi00MjczLTllODQtMzU3MGEwOTlmYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklJ+JPxMGuQj+pz9hEeXIdy1+8mW4FeGV5Hx qEqtt3ryOMn8QCwRvjgStMB8hxKimWywKJIEWT3RB9qW+hqmHo+8Vbtk+96tLKKe 72rEf8yGzAoszyUbmP9jkvFNDNpdFN4nd03VHBmMkZiJKlSanQYfbGJsNlLd//zL jbfNIjT/XeUvIj1T8vvss2stpFVlJY0GN90VHaGFuSDReaTb5e+vuEFxwnuew3VT 34s3v1+EUDynJM2FlmI0Ccp3DXfqUCMw/3I/tzMiP6Hi2kgbgNvV+c0dsCTnmomk qVpHDTs3tQzRa8fYi93pXLWF+nkV73ANJivRY5onxY6p6CWI4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2MXGFKORbUzLwoohkwh7xY9IwqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE1NDcxYjUtMjEwMC0z ZjQwLWFlNzUtOTExZjA1YmQwNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNzRRO8YzarD9iEJZkrdkciZNrO7V9VmSXtYPXstdo1dtWFXe1Hh4cx 2D/RvTOLhp2R93m4dwk/IqmU/WdK+gP9S9Sxaz3u2DgAjm08XBlOR2rCX4dxBNNz 2gvtt8uNhByPmZg+DRLQAYp+MPx750424n+BExJdOceMryebhV3SZi9mf4F///bP KojfgNe6lLP5tUae8PY63GOGzmmm9MK5lgms4k940NemIoM3ULHRQ1L4V9avsce4 LpA3KyWEUQVTuBS9eou9fZvkaIabR5X6VTfhZQw673CXIRWLWDMnDTSZR+J1HQuB MV3OHIvlbEOjp4t2ZPgZftQLu5Nlf9I= -----END CERTIFICATE-----Generated at Sat Sep 5 02:11:47 2026 by rpki-client