$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f1afc2b-7a46-3e1c-8f73-a01be38df4a1.roa File: 3f1afc2b-7a46-3e1c-8f73-a01be38df4a1.roa (raw, json) Hash identifier: bjVqHos0eixnfyOv+VLuzfTNL43AqX9UhOzL9lqNaUk= Subject key identifier: EB:95:E4:38:64:F9:4C:92:2D:25:76:D8:AD:7A:28:F5:85:AB:A3:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F02423149A8AC6668F0753B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f1afc2b-7a46-3e1c-8f73-a01be38df4a1.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 16625 IP address blocks: 23.32.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:31:49:a8:ac:66:68:f0:75:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=82c11ce5-c63c-426f-a8d4-301d3a011a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:34:95:25:e1:ef:31:c7:bb:43:ce:4b:de: f9:81:37:1e:37:43:56:8e:f0:c5:9a:1e:36:4d:5c: 54:f9:d5:96:c3:b9:75:89:09:6e:47:52:f8:a2:9d: 86:57:a7:ff:ec:79:b0:2e:35:b5:24:ad:1e:b3:e3: 5c:ad:3c:62:97:21:5e:96:8e:55:f7:d7:0f:22:e6: 8a:c6:d7:0a:28:8b:b9:27:eb:30:66:16:05:ae:f5: 08:91:08:7a:1b:4f:94:50:00:5e:d1:28:ec:de:ba: 01:b7:2e:aa:b1:50:0a:25:44:b8:6d:34:b9:8e:a0: 77:01:08:88:f3:12:ef:04:05:9f:84:fd:a4:21:4e: cf:22:3d:e5:f6:e4:c5:a5:ce:8d:3c:1f:4c:0f:9f: c9:4e:b3:19:75:db:d6:9a:e4:04:27:5e:b8:9a:85: a7:7b:98:54:b9:d4:f9:dd:12:40:b9:c3:e9:8b:92: 17:79:c6:53:6e:ff:59:d5:d7:d8:c8:19:f2:38:e2: 33:43:59:10:2d:cb:83:53:5c:4d:41:7b:46:a4:df: ad:88:af:a1:31:46:ac:69:8c:77:1c:5e:40:73:cb: 23:bf:92:99:39:4c:d4:c1:72:b3:88:40:db:e9:cd: 7f:61:24:95:3a:60:b2:41:bd:c7:00:5c:6e:fa:5a: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:95:E4:38:64:F9:4C:92:2D:25:76:D8:AD:7A:28:F5:85:AB:A3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f1afc2b-7a46-3e1c-8f73-a01be38df4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ba:1b:69:e4:49:1b:08:c1:8c:52:4d:58:11:bb:01:89:eb: 83:c5:d7:86:0f:d3:18:4e:1a:23:57:95:62:22:ef:c8:0c:bf: d5:7d:8c:bb:63:1c:63:6d:00:08:e9:ee:c1:e3:45:18:9f:5b: eb:b1:1f:54:90:0a:43:77:2b:a3:d0:1c:86:de:60:72:34:53: cc:04:13:75:35:a1:92:d0:20:3f:aa:e8:42:d4:a5:3f:04:23: ff:f5:4b:cd:c0:c4:98:ee:83:fa:14:c9:42:e2:88:6f:c8:56: 22:3a:50:99:40:1f:72:4e:55:d3:de:10:c0:82:72:b1:61:d7: 88:8a:f3:c5:78:ef:62:c0:39:99:f6:71:ee:61:6b:bd:93:ae: 0d:23:08:bd:83:31:12:e5:88:28:fd:1d:f4:19:ba:b6:35:5a: 31:a8:b4:8f:89:0d:e7:61:a2:dc:3d:ff:27:64:01:a6:cc:cd: b0:ac:cf:12:c1:45:1e:be:15:c1:01:76:9d:b7:ea:e5:a3:60: 64:5a:8f:3c:0e:f8:65:06:f3:2e:bd:22:16:85:09:a7:2a:d5: f9:d8:c3:b9:11:d9:60:72:6b:67:d0:eb:7b:d4:bc:9d:d5:e7: d4:fc:98:a3:9a:74:13:b4:58:e1:8e:32:a2:03:42:d1:8f:d9: 47:2f:33:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjFJqKxmaPB1O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ODJjMTFjZTUtYzYzYy00MjZmLWE4ZDQtMzAxZDNhMDExYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2M0lSXh7zHHu0POS975gTceN0NWjvDFmh42 TVxU+dWWw7l1iQluR1L4op2GV6f/7HmwLjW1JK0es+NcrTxilyFelo5V99cPIuaK xtcKKIu5J+swZhYFrvUIkQh6G0+UUABe0Sjs3roBty6qsVAKJUS4bTS5jqB3AQiI 8xLvBAWfhP2kIU7PIj3l9uTFpc6NPB9MD5/JTrMZddvWmuQEJ164moWne5hUudT5 3RJAucPpi5IXecZTbv9Z1dfYyBnyOOIzQ1kQLcuDU1xNQXtGpN+tiK+hMUasaYx3 HF5Ac8sjv5KZOUzUwXKziEDb6c1/YSSVOmCyQb3HAFxu+lrZfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuV5Dhk+UySLSV22K16KPWFq6NaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YxYWZjMmItN2E0Ni0z ZTFjLThmNzMtYTAxYmUzOGRmNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq6G2nkSRsIwYxSTVgRuwGJ64PF14YP0xhOGiNXlWIi78gMv9V9jLtj HGNtAAjp7sHjRRifW+uxH1SQCkN3K6PQHIbeYHI0U8wEE3U1oZLQID+q6ELUpT8E I//1S83AxJjug/oUyULiiG/IViI6UJlAH3JOVdPeEMCCcrFh14iK88V472LAOZn2 ce5ha72Trg0jCL2DMRLliCj9HfQZurY1WjGotI+JDedhotw9/ydkAabMzbCszxLB RR6+FcEBdp236uWjYGRajzwO+GUG8y69IhaFCacq1fnYw7kR2WBya2fQ63vUvJ3V 59T8mKOadBO0WOGOMqIDQtGP2UcvM+M= -----END CERTIFICATE-----Generated at Sat Sep 5 06:31:59 2026 by rpki-client