$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bb1c4dc-bd04-3699-84a2-ea113487ac4a.roa File: 3bb1c4dc-bd04-3699-84a2-ea113487ac4a.roa (raw, json) Hash identifier: Ss8HKeexHKELIzMnzg2e7WCZJhbUEiCnZjdHMTP7wD8= Subject key identifier: 82:BC:EF:81:65:9A:88:C1:AD:91:D2:1D:63:48:F5:CF:BB:6C:CE:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F480D4D191B4CA94FB2DD7700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bb1c4dc-bd04-3699-84a2-ea113487ac4a.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.53.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:4d:19:1b:4c:a9:4f:b2:dd:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=e8cb45e7-9578-4229-a6be-4683033ceca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:93:ed:b1:e7:25:62:45:ce:c8:90:d0:6e: 16:72:2d:54:3a:a7:f2:ba:ec:79:c3:eb:28:2c:76: 9e:5d:01:72:c6:de:22:00:14:3b:6d:c9:80:0c:93: 41:19:ad:b5:e7:0a:59:6e:4d:e7:ed:03:5f:f2:bf: 89:1d:d3:6b:9a:cd:05:ee:77:cc:6e:26:d3:de:fb: f4:8c:a6:02:ed:d9:cd:ad:a8:b1:98:8b:7f:08:96: 0a:08:49:86:fe:6b:6e:30:8b:f6:a9:c2:65:e8:7a: bb:73:c0:fe:4a:6d:a4:eb:b7:36:39:b4:e2:03:3d: a1:94:15:7f:0a:1e:43:9f:34:f4:95:70:0c:2e:64: 64:72:0a:63:19:87:15:6b:0d:8d:68:aa:70:ae:11: ec:78:6a:2e:1c:64:d0:57:df:63:10:f8:8b:21:f4: 3a:85:c3:90:f9:fb:3c:9b:db:c8:9e:c9:a4:83:b5: 09:15:35:8d:45:0f:59:ac:7a:13:a2:e4:25:1b:49: b8:6d:23:8a:b6:06:f6:24:fe:35:00:e6:21:62:15: 79:2e:6c:77:bb:60:66:23:23:0a:37:53:b8:de:ec: 87:bd:c7:5c:4b:4e:9b:14:e5:1a:06:35:a7:22:19: a6:7a:63:f2:34:00:4e:a4:3c:1e:5d:d0:e8:33:d5: fc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BC:EF:81:65:9A:88:C1:AD:91:D2:1D:63:48:F5:CF:BB:6C:CE:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bb1c4dc-bd04-3699-84a2-ea113487ac4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:68:23:75:74:0a:55:dd:c3:11:92:cc:8f:eb:1f:4e:fd:23: a5:4a:01:15:04:70:f6:e7:74:be:4b:af:38:c7:72:88:03:66: 33:59:0a:c5:65:6a:f8:94:f6:0c:5c:30:02:54:c5:16:cd:81: 6a:dc:e4:92:89:61:65:cc:4a:9e:b1:08:0f:d5:59:3a:04:9e: 47:2a:97:9b:34:23:b5:15:57:ad:75:6a:0c:5c:ec:11:b4:93: 7f:d9:c4:48:b7:d7:d4:bf:4b:1a:21:8a:42:c6:56:35:ad:1e: 2e:6d:a3:e5:39:16:27:cf:db:11:42:52:89:b0:31:51:f9:9d: d7:95:1d:ed:c1:bd:78:07:a6:53:9f:81:ad:af:2d:50:30:98: da:40:6d:ee:fa:ba:cb:53:10:ec:f5:a7:80:71:c0:71:59:de: d0:75:1c:38:5d:23:c6:fb:5f:84:89:79:e9:f8:d1:b1:34:96: b5:b5:89:0d:d4:5d:0d:46:80:f5:f7:11:ed:c2:b6:39:df:af: e9:dd:61:4f:cb:fa:a3:7f:f7:52:0e:16:a2:fe:d2:ba:82:70: b8:6b:c5:86:e9:4d:e8:5f:07:f8:57:eb:41:ef:ed:5e:5f:b5: ed:1a:0e:03:84:e4:14:6b:b1:44:ae:b2:11:24:44:9b:b4:61: dd:ad:05:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDU0ZG0ypT7LddwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZThjYjQ1ZTctOTU3OC00MjI5LWE2YmUtNDY4MzAzM2NlY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1mT7bHnJWJFzsiQ0G4Wci1UOqfyuux5w+so LHaeXQFyxt4iABQ7bcmADJNBGa215wpZbk3n7QNf8r+JHdNrms0F7nfMbibT3vv0 jKYC7dnNraixmIt/CJYKCEmG/mtuMIv2qcJl6Hq7c8D+Sm2k67c2ObTiAz2hlBV/ Ch5DnzT0lXAMLmRkcgpjGYcVaw2NaKpwrhHseGouHGTQV99jEPiLIfQ6hcOQ+fs8 m9vInsmkg7UJFTWNRQ9ZrHoTouQlG0m4bSOKtgb2JP41AOYhYhV5Lmx3u2BmIyMK N1O43uyHvcdcS06bFOUaBjWnIhmmemPyNABOpDweXdDoM9X8WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK874FlmojBrZHSHWNI9c+7bM5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JiMWM0ZGMtYmQwNC0z Njk5LTg0YTItZWExMTM0ODdhYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBoI3V0ClXdwxGSzI/rH079I6VKARUEcPbndL5LrzjHcogDZjNZCsVl aviU9gxcMAJUxRbNgWrc5JKJYWXMSp6xCA/VWToEnkcql5s0I7UVV611agxc7BG0 k3/ZxEi319S/SxohikLGVjWtHi5to+U5FifP2xFCUomwMVH5ndeVHe3BvXgHplOf ga2vLVAwmNpAbe76ustTEOz1p4BxwHFZ3tB1HDhdI8b7X4SJeen40bE0lrW1iQ3U XQ1GgPX3Ee3Ctjnfr+ndYU/L+qN/91IOFqL+0rqCcLhrxYbpTehfB/hX60Hv7V5f te0aDgOE5BRrsUSushEkRJu0Yd2tBdk= -----END CERTIFICATE-----Generated at Sat Oct 24 18:52:59 2026 by rpki-client