$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5838b467-10e6-3deb-b337-cc4822f6d39e.roa File: 5838b467-10e6-3deb-b337-cc4822f6d39e.roa (raw, json) Hash identifier: Z1SuNPu7yeaQ1YyDgqkL1vSFl6e4Cb+f+NvTW2U2Yfg= Subject key identifier: 3F:44:3C:E0:64:4E:21:1E:22:FE:96:D4:77:7A:B3:B1:DC:C6:1B:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7A5031EA1492489D8E186144 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5838b467-10e6-3deb-b337-cc4822f6d39e.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 0 IP address blocks: 23.4.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:31:ea:14:92:48:9d:8e:18:61:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=29acd36c-58a3-4de7-a764-d8a547f41da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:92:4e:05:75:72:0b:50:a9:69:50:3b:86: 05:6d:80:67:86:c7:57:1e:3b:9f:6f:96:12:bd:39: 83:5a:3a:04:27:28:1b:5d:ac:34:be:99:1c:9f:45: 5b:56:dd:f2:f7:7a:35:33:52:cf:7d:29:b2:28:cc: 97:a8:19:b7:fe:8c:b0:10:f5:e0:b7:3b:67:17:10: c3:f7:71:2e:6a:4f:ea:dd:8a:3e:2e:c5:71:51:a8: c0:c5:a3:b5:fb:be:12:5a:49:63:05:d8:fe:32:f8: 84:ae:da:a1:c6:c0:01:29:ef:52:94:bb:e9:17:a0: b2:48:93:de:1e:dc:fc:a1:e7:98:8d:a1:42:e4:08: 0e:f3:48:6e:b4:ea:90:52:6d:d1:09:ba:0a:13:bb: a6:d1:8b:e1:b1:de:02:d4:b7:12:20:1d:ff:ad:b4: c2:03:74:ab:ee:c7:74:f0:98:73:43:8e:db:ad:e6: c3:41:76:d0:17:48:b4:1c:cb:ed:68:26:06:1e:a3: f4:ef:4c:a8:78:f0:32:35:c1:4e:40:dd:e4:90:39: 87:52:8d:da:12:c4:74:54:89:26:f6:bf:2a:1d:cf: 50:e4:b3:c8:47:17:1c:26:fc:da:6f:08:cd:9a:a4: 5a:ee:96:94:de:2a:8d:ad:47:8d:3e:52:b5:4a:e0: 30:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:44:3C:E0:64:4E:21:1E:22:FE:96:D4:77:7A:B3:B1:DC:C6:1B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5838b467-10e6-3deb-b337-cc4822f6d39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0a:c0:d1:ea:ff:f0:56:8e:a6:60:b9:bf:5a:2b:c9:39:0c: f7:e6:7a:7c:8e:76:e9:a7:ef:15:d8:0a:9a:7b:55:60:51:c6: 72:b7:88:f6:cf:eb:50:8f:2a:12:0a:a1:95:c0:f7:5e:ff:ff: 7f:24:48:da:d9:f9:9d:a4:16:7b:1e:06:0b:40:55:d6:11:9a: f0:b2:d0:ed:0d:ab:5c:0b:d2:e5:97:61:cb:8a:36:95:88:7b: f7:2c:0b:ad:27:ec:0c:6d:47:bb:f7:5d:65:ac:d1:90:0c:3b: 77:be:fe:dd:0e:6b:33:07:5d:56:dd:c9:12:95:99:f7:fb:3e: c4:43:37:03:ce:fb:c0:71:ee:01:63:b4:aa:5b:a2:c9:8a:31: 55:c9:30:cd:3c:17:46:7f:16:b4:db:e5:22:bb:02:1e:51:b0: 13:49:7a:4e:7e:1e:d3:4f:2f:a3:d1:5d:17:99:34:c7:22:53: aa:cb:68:5c:fb:c5:1f:06:d3:34:d9:ce:92:00:b7:22:b7:3f: 75:06:9a:4f:e7:e7:80:fd:36:36:ba:0e:2b:56:cd:83:07:d2: 11:58:2b:d5:4e:32:92:78:c9:ef:56:5c:78:22:90:a0:f2:af: 8b:67:99:57:d4:40:37:f8:e1:03:70:16:05:69:f1:2b:da:f4: d6:70:ca:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UDHqFJJInY4YYUQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjlhY2QzNmMtNThhMy00ZGU3LWE3NjQtZDhhNTQ3ZjQxZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymiSTgV1cgtQqWlQO4YFbYBnhsdXHjufb5YS vTmDWjoEJygbXaw0vpkcn0VbVt3y93o1M1LPfSmyKMyXqBm3/oywEPXgtztnFxDD 93Euak/q3Yo+LsVxUajAxaO1+74SWkljBdj+MviErtqhxsABKe9SlLvpF6CySJPe Htz8oeeYjaFC5AgO80hutOqQUm3RCboKE7um0Yvhsd4C1LcSIB3/rbTCA3Sr7sd0 8JhzQ47brebDQXbQF0i0HMvtaCYGHqP070yoePAyNcFOQN3kkDmHUo3aEsR0VIkm 9r8qHc9Q5LPIRxccJvzabwjNmqRa7paU3iqNrUeNPlK1SuAwOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9EPOBkTiEeIv6W1Hd6s7Hcxhs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTgzOGI0NjctMTBlNi0z ZGViLWIzMzctY2M0ODIyZjZkMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8KwNHq//BWjqZgub9aK8k5DPfmenyOdumn7xXYCpp7VWBRxnK3iPbP 61CPKhIKoZXA917//38kSNrZ+Z2kFnseBgtAVdYRmvCy0O0Nq1wL0uWXYcuKNpWI e/csC60n7AxtR7v3XWWs0ZAMO3e+/t0OazMHXVbdyRKVmff7PsRDNwPO+8Bx7gFj tKpbosmKMVXJMM08F0Z/FrTb5SK7Ah5RsBNJek5+HtNPL6PRXReZNMciU6rLaFz7 xR8G0zTZzpIAtyK3P3UGmk/n54D9Nja6DitWzYMH0hFYK9VOMpJ4ye9WXHgikKDy r4tnmVfUQDf44QNwFgVp8Sva9NZwyt4= -----END CERTIFICATE-----Generated at Thu Oct 22 20:19:36 2026 by rpki-client