$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa File: 3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa (raw, json) Hash identifier: cxudv/JXTARHKFYNoJQOiX/2tVku1dHhiUDpOAEoIKY= Subject key identifier: 4B:55:55:72:B7:8A:4E:35:12:5E:BF:B9:DF:F3:B9:32:53:8D:5E:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F963874AECBF0CA873F430580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 16625 IP address blocks: 23.66.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:74:ae:cb:f0:ca:87:3f:43:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=a9ba18a1-a902-4d33-991d-7ba9eb61f2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:33:74:31:56:28:65:d6:7f:34:d8:fb:a1: a7:0d:3d:9c:52:c9:bb:86:8e:d5:0a:eb:60:c7:01: c6:08:97:40:0a:a3:0f:6a:f8:05:a0:b0:67:55:02: b1:dc:81:62:76:e2:a2:e2:62:29:5d:0f:84:63:33: 30:36:61:f8:74:d0:27:97:f3:d8:93:99:49:80:01: 4a:17:89:13:9f:fc:49:88:fe:32:84:f2:10:2f:da: 84:d2:c8:3b:56:f8:e5:66:29:ba:e6:8a:7d:7e:fb: a4:4f:11:60:35:5e:2a:02:71:7d:bf:1d:ec:ce:1a: ad:f1:61:47:18:01:74:83:2a:c5:3f:ef:7b:c3:e6: 47:8b:97:5b:61:99:97:d1:a1:8d:12:c2:30:c2:75: fc:e1:a3:15:f8:93:82:84:55:37:c0:49:44:68:3a: 83:b4:a1:df:54:3b:ee:62:7b:d4:24:21:d2:08:ec: d7:69:b0:4e:a2:d0:af:5c:dc:42:58:84:24:6a:e1: 40:17:d5:d8:c8:d6:14:cc:5a:8b:a8:5c:34:64:e9: ff:72:fa:77:84:4e:ce:2f:83:65:db:f5:ac:96:a8: de:61:f3:5b:69:bf:9f:f1:43:76:09:9b:3f:9a:0e: 82:9e:b5:19:66:f9:a3:91:61:ae:ac:64:c7:c1:93: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:55:55:72:B7:8A:4E:35:12:5E:BF:B9:DF:F3:B9:32:53:8D:5E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9d:e9:18:dc:86:08:dc:ec:40:21:7b:09:9e:60:da:50:e4: d9:28:56:4b:17:76:73:0f:58:e6:3a:df:53:17:0e:92:9c:6f: 71:68:79:b1:ad:8c:0f:f1:27:23:39:69:bc:6a:80:82:ff:34: 37:f2:84:61:b0:69:6f:52:fe:37:07:7c:4d:11:2b:39:dc:e6: 23:6c:25:d7:e9:b2:ed:49:51:23:dd:19:62:04:12:35:36:1e: 5d:89:7d:81:40:1e:0e:d1:4d:c9:b1:43:6c:fb:3e:b5:3c:a4: 48:8f:94:f0:05:f4:00:7b:98:f1:ab:24:50:e6:ce:06:4f:04: da:95:c7:6f:1c:a6:5d:42:a9:23:b4:93:37:39:ca:3d:2b:2c: 4b:87:29:75:d1:6d:84:86:14:03:b9:bc:84:ac:51:26:2c:10: 51:7d:b8:1e:d3:53:0d:47:9f:35:45:9d:e2:46:8c:fb:d4:b8: bc:5b:21:c7:78:7d:15:4f:e3:80:74:32:48:a4:6c:90:8f:b9: 51:1a:76:d8:a0:c1:a9:2d:87:3b:49:68:fa:65:1b:db:19:da: b5:c4:ef:a5:a5:d3:f8:c0:39:62:04:a9:5a:bd:2d:a8:d1:42: 59:96:b4:7d:f2:6b:78:e6:36:fd:cd:a5:7d:d4:f3:d7:4a:ac: 00:6f:9c:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOHSuy/DKhz9DBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk YTliYTE4YTEtYTkwMi00ZDMzLTk5MWQtN2JhOWViNjFmMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ4zdDFWKGXWfzTY+6GnDT2cUsm7ho7VCutg xwHGCJdACqMPavgFoLBnVQKx3IFiduKi4mIpXQ+EYzMwNmH4dNAnl/PYk5lJgAFK F4kTn/xJiP4yhPIQL9qE0sg7VvjlZim65op9fvukTxFgNV4qAnF9vx3szhqt8WFH GAF0gyrFP+97w+ZHi5dbYZmX0aGNEsIwwnX84aMV+JOChFU3wElEaDqDtKHfVDvu YnvUJCHSCOzXabBOotCvXNxCWIQkauFAF9XYyNYUzFqLqFw0ZOn/cvp3hE7OL4Nl 2/WslqjeYfNbab+f8UN2CZs/mg6CnrUZZvmjkWGurGTHwZNwNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtVVXK3ik41El6/ud/zuTJTjV7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E2ZTcyNzYtZjgwNS0z MmYyLTlhZTAtODc3ZjE3ZTg2ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0KUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGd6Rjchgjc7EAhewmeYNpQ5NkoVksXdnMPWOY631MXDpKcb3FoebGt jA/xJyM5abxqgIL/NDfyhGGwaW9S/jcHfE0RKznc5iNsJdfpsu1JUSPdGWIEEjU2 Hl2JfYFAHg7RTcmxQ2z7PrU8pEiPlPAF9AB7mPGrJFDmzgZPBNqVx28cpl1CqSO0 kzc5yj0rLEuHKXXRbYSGFAO5vISsUSYsEFF9uB7TUw1HnzVFneJGjPvUuLxbIcd4 fRVP44B0MkikbJCPuVEadtigwakthztJaPplG9sZ2rXE76Wl0/jAOWIEqVq9LajR QlmWtH3ya3jmNv3NpX3U89dKrABvnP4= -----END CERTIFICATE-----Generated at Tue Oct 27 12:39:41 2026 by rpki-client