$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28d8d1b5-7b7d-3cd4-9c59-c1a4efeca64c.roa File: 28d8d1b5-7b7d-3cd4-9c59-c1a4efeca64c.roa (raw, json) Hash identifier: djXIxNoxCMN1fORBqecSVGiq/EWUP21fBy0EYjRNGm4= Subject key identifier: C4:F9:30:EC:C0:F8:5D:EF:43:FF:D6:51:C4:5D:23:0E:E9:CD:88:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F6BD1C85C0F4FFF5A63DD1C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28d8d1b5-7b7d-3cd4-9c59-c1a4efeca64c.roa Signing time: Wed 07 Oct 2026 08:29:38 +0000 ROA not before: Wed 07 Oct 2026 08:29:38 +0000 ROA not after: Tue 05 Jan 2027 09:29:38 +0000 asID: 16625 IP address blocks: 23.4.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6b:d1:c8:5c:0f:4f:ff:5a:63:dd:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 08:29:38 2026 GMT Not After : Jan 5 09:29:38 2027 GMT Subject: CN=81a3ea1b-5900-4bc9-a197-ac7930bd41cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:5e:67:40:4f:fd:5a:70:9f:71:68:89:3c: 48:15:c5:e6:0c:f4:85:31:74:e3:d4:e7:8b:8a:35: 34:21:41:a4:65:72:8d:3c:a7:54:bb:67:22:ad:f2: 2d:1c:68:55:17:6a:05:80:ad:17:b4:16:d7:45:38: 62:38:dd:a0:4a:5f:78:11:5a:d0:1e:30:c6:71:e7: 9b:cb:39:4d:92:70:42:e1:92:80:e7:2d:d9:80:58: c9:17:d9:68:f7:52:16:75:52:7b:ee:18:d6:82:db: 36:56:ff:86:08:6d:22:7b:72:8b:8a:ef:62:23:b9: 1b:49:32:2a:3b:66:8a:fc:5f:9e:40:e5:dc:7d:89: ec:cf:69:80:a9:6e:5a:a9:5a:96:05:dd:56:c8:ce: 4d:69:63:a1:3e:15:f6:4b:cb:30:a3:1d:a2:9b:2e: ba:fb:6a:18:ce:a0:c4:0d:95:f6:9a:4c:73:86:40: 23:31:b2:b3:96:c5:63:1e:8e:d4:c5:03:94:30:46: ec:c0:8c:d2:cd:e1:e7:13:9f:e7:ad:5c:53:b6:4b: d1:75:cd:eb:ba:e3:3e:21:e8:83:07:31:c5:bb:b2: cb:d6:11:15:2d:52:cd:cd:9c:71:40:be:83:65:4b: 1d:5d:01:ed:19:cb:8a:08:8d:e9:5b:f8:86:cd:63: 35:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F9:30:EC:C0:F8:5D:EF:43:FF:D6:51:C4:5D:23:0E:E9:CD:88:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28d8d1b5-7b7d-3cd4-9c59-c1a4efeca64c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a0:ca:15:99:32:ef:34:78:d0:a9:01:0c:c2:7f:7c:7d:b0: 20:b6:13:bb:d7:d2:31:79:a5:97:53:1c:52:63:dd:48:dc:00: fa:46:90:f3:bc:9e:c7:5d:b9:71:15:f2:07:85:40:eb:c8:0c: 53:2f:ad:5c:8c:c4:0e:a0:1f:a2:81:e2:75:c1:7c:8b:0f:48: 28:cc:a6:87:11:b0:1b:e6:d5:95:43:d8:f5:8e:ab:2f:60:af: a8:50:dc:89:c3:0a:9d:10:72:48:50:54:d5:de:51:09:a5:19: 14:5c:2a:2e:3d:f1:09:5a:6b:53:85:05:d5:e4:83:f1:a0:99: 0c:73:bf:61:c1:9d:d8:f4:62:80:75:94:57:44:77:5f:90:79: 71:6c:67:cc:dc:c8:8b:ec:b3:ea:5c:f0:83:b0:6d:69:94:03: c7:95:f3:29:b4:78:bb:04:99:41:2d:78:b7:05:06:5c:04:70: 96:b8:1c:cd:e9:96:e9:eb:aa:ec:86:a2:90:25:4d:3b:fc:0a: 79:a5:db:06:7d:8d:3a:fe:14:d1:c6:12:49:93:e1:72:20:c5: 57:fa:1b:4f:ca:bd:f5:95:d6:d8:5e:bd:40:6b:c6:e9:ac:9b: 0b:f4:2b:37:13:be:5c:a3:5c:df:b9:be:8f:71:af:c4:48:87: f5:df:f9:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9r0chcD0//WmPdHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNzA4MjkzOFoXDTI3MDEwNTA5MjkzOFowLzEtMCsGA1UEAxMk ODFhM2VhMWItNTkwMC00YmM5LWExOTctYWM3OTMwYmQ0MWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSFeZ0BP/Vpwn3FoiTxIFcXmDPSFMXTj1OeL ijU0IUGkZXKNPKdUu2cirfItHGhVF2oFgK0XtBbXRThiON2gSl94EVrQHjDGceeb yzlNknBC4ZKA5y3ZgFjJF9lo91IWdVJ77hjWgts2Vv+GCG0ie3KLiu9iI7kbSTIq O2aK/F+eQOXcfYnsz2mAqW5aqVqWBd1WyM5NaWOhPhX2S8swox2imy66+2oYzqDE DZX2mkxzhkAjMbKzlsVjHo7UxQOUMEbswIzSzeHnE5/nrVxTtkvRdc3ruuM+IeiD BzHFu7LL1hEVLVLNzZxxQL6DZUsdXQHtGcuKCI3pW/iGzWM1KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT5MOzA+F3vQ//WUcRdIw7pzYimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhkOGQxYjUtN2I3ZC0z Y2Q0LTljNTktYzFhNGVmZWNhNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFwQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSgyhWZMu80eNCpAQzCf3x9sCC2E7vX0jF5pZdTHFJj3UjcAPpGkPO8 nsdduXEV8geFQOvIDFMvrVyMxA6gH6KB4nXBfIsPSCjMpocRsBvm1ZVD2PWOqy9g r6hQ3InDCp0QckhQVNXeUQmlGRRcKi498Qlaa1OFBdXkg/GgmQxzv2HBndj0YoB1 lFdEd1+QeXFsZ8zcyIvss+pc8IOwbWmUA8eV8ym0eLsEmUEteLcFBlwEcJa4HM3p lunrquyGopAlTTv8Cnml2wZ9jTr+FNHGEkmT4XIgxVf6G0/KvfWV1thevUBrxums mwv0KzcTvlyjXN+5vo9xr8RIh/Xf+Tw= -----END CERTIFICATE-----Generated at Wed Oct 21 15:22:11 2026 by rpki-client