$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/501a9a83-de77-30ea-8275-0f5a1b60dc6a.roa File: 501a9a83-de77-30ea-8275-0f5a1b60dc6a.roa (raw, json) Hash identifier: aOBtIWGMiszoZeH+X1Fulym6NcBPh3dB0GGy5RBd+UA= Subject key identifier: 99:72:47:0A:63:C8:D6:B0:EF:AC:92:E0:44:D7:74:83:A5:32:9A:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB2F72BE671B248FBDF4F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/501a9a83-de77-30ea-8275-0f5a1b60dc6a.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 16625 IP address blocks: 23.14.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f7:2b:e6:71:b2:48:fb:df:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=69b2bfe4-b197-47bd-b900-33af624edc96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e6:1f:3d:10:25:1a:31:86:d3:ed:bb:ee:30: 7a:9a:8c:27:63:e8:58:a5:9a:d0:7a:6d:9f:39:b8: c6:c0:38:d4:1e:74:a0:1d:0c:45:9f:88:5d:da:c5: 3f:83:c9:70:7d:a6:db:f7:ff:d6:94:0f:56:27:0c: bd:37:95:fe:77:0a:0a:d8:1e:5d:09:53:9b:db:26: ae:15:4f:0b:bb:78:a4:72:e2:7a:69:d7:cc:6f:1e: 8f:b9:4b:65:c1:f2:64:32:9b:37:ab:2c:c1:45:c3: ce:7e:94:43:7d:6d:9d:e1:23:3f:0a:3b:5e:2f:a3: 7d:f2:f6:ee:4d:ff:43:d0:a6:97:55:2f:1d:a6:ff: 18:5d:5e:24:25:79:6f:a6:87:16:0e:30:3c:19:48: 0e:98:c3:c4:15:58:73:12:4b:f3:31:39:e6:14:80: d3:a4:fb:40:0a:51:89:fe:f6:15:5a:81:b2:59:ea: 72:91:f5:83:7d:e1:06:fe:ff:2f:54:f0:92:de:de: a7:57:10:29:92:0c:08:6d:36:9d:f5:94:f1:79:8a: 69:e8:80:b8:05:26:8a:7b:91:6b:84:af:b4:47:f0: d8:63:88:e5:33:a2:22:ca:27:ea:f6:96:d3:7a:94: a7:64:60:c7:33:7f:07:ec:95:eb:73:73:77:33:eb: 78:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:72:47:0A:63:C8:D6:B0:EF:AC:92:E0:44:D7:74:83:A5:32:9A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/501a9a83-de77-30ea-8275-0f5a1b60dc6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.14.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6d:39:69:95:45:80:75:4b:4e:f9:f2:77:0d:b3:0a:ab:48: da:de:58:b1:32:cd:19:b5:14:13:c2:5d:c5:6f:d1:b9:b5:f8: dd:73:db:b8:c4:48:bf:a5:85:9d:99:50:16:14:3e:84:fe:10: 38:73:84:f6:ca:b0:b4:6c:05:47:b1:ad:a1:6a:d5:93:9a:f3: a4:2c:32:45:75:9d:77:d3:63:df:e8:60:9b:23:cb:b2:27:d2: b2:69:a0:8e:0a:20:ec:f9:59:26:51:fd:24:c2:b5:42:fd:a2: 23:a9:8e:83:e5:aa:8d:08:2e:d9:ac:0e:a6:83:90:77:a1:33: 67:1f:b9:78:d2:9e:a1:10:1d:65:72:e7:e5:43:7e:0d:80:80: dc:1f:d0:a3:88:1d:b0:ac:52:23:9e:76:a7:8c:1e:39:39:b6: b7:3f:2d:74:d3:37:8f:fe:1b:56:b0:8f:f0:2d:16:41:4e:e3: 39:f1:54:37:b4:a9:0f:72:9b:e2:88:ed:04:c0:7b:e4:6e:2d: 11:c5:3a:ac:14:ed:22:e5:0a:b7:70:bc:36:09:03:19:d4:3b: 4f:84:25:9f:c1:cf:d3:5d:e1:24:01:95:30:47:c2:61:99:4b: 11:22:e7:54:6d:76:18:16:f1:4d:e1:0d:dd:7e:b8:d7:eb:b5: 8a:23:e0:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97svcr5nGySPvfT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NjliMmJmZTQtYjE5Ny00N2JkLWI5MDAtMzNhZjYyNGVkYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuYfPRAlGjGG0+277jB6mownY+hYpZrQem2f ObjGwDjUHnSgHQxFn4hd2sU/g8lwfabb9//WlA9WJwy9N5X+dwoK2B5dCVOb2yau FU8Lu3ikcuJ6adfMbx6PuUtlwfJkMps3qyzBRcPOfpRDfW2d4SM/CjteL6N98vbu Tf9D0KaXVS8dpv8YXV4kJXlvpocWDjA8GUgOmMPEFVhzEkvzMTnmFIDTpPtAClGJ /vYVWoGyWepykfWDfeEG/v8vVPCS3t6nVxApkgwIbTad9ZTxeYpp6IC4BSaKe5Fr hK+0R/DYY4jlM6Iiyifq9pbTepSnZGDHM38H7JXrc3N3M+t4/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlyRwpjyNaw76yS4ETXdIOlMppVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTAxYTlhODMtZGU3Ny0z MGVhLTgyNzUtMGY1YTFiNjBkYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFw5cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHptOWmVRYB1S0758ncNswqrSNreWLEyzRm1FBPCXcVv0bm1+N1z27jE SL+lhZ2ZUBYUPoT+EDhzhPbKsLRsBUexraFq1ZOa86QsMkV1nXfTY9/oYJsjy7In 0rJpoI4KIOz5WSZR/STCtUL9oiOpjoPlqo0ILtmsDqaDkHehM2cfuXjSnqEQHWVy 5+VDfg2AgNwf0KOIHbCsUiOedqeMHjk5trc/LXTTN4/+G1awj/AtFkFO4znxVDe0 qQ9ym+KI7QTAe+RuLRHFOqwU7SLlCrdwvDYJAxnUO0+EJZ/Bz9Nd4SQBlTBHwmGZ SxEi51RtdhgW8U3hDd1+uNfrtYoj4EE= -----END CERTIFICATE-----Generated at Sun Oct 25 18:40:26 2026 by rpki-client