$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa File: 9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa (raw, json) Hash identifier: 3mDtaCtx5iOq0C7nKfj+i68A0UB+Vzubt88Wx8LLDp0= Subject key identifier: F9:3A:16:32:44:46:D8:FF:09:F6:6B:DA:42:91:9E:19:51:CA:E0:1E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C8317EAFABB5D1BAEC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 9498 IP address blocks: 23.35.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c8:31:7e:af:ab:b5:d1:ba:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=2694fc16-e2af-4e01-8908-f5e56aeef343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:67:2f:87:d5:89:d1:5f:e9:53:85:3c:22: cd:e7:e3:18:f7:3b:68:cf:67:25:2d:3d:66:58:ab: 3b:b9:7e:05:c9:9a:92:08:0b:b2:87:81:8e:ab:06: 68:2f:62:ac:1c:3b:b9:b5:0d:cd:5a:fe:6f:82:9e: 40:67:85:43:eb:d7:cb:5d:54:11:c8:77:42:a8:da: 8a:95:ba:ed:59:66:ed:b4:e1:e8:16:17:3b:72:b4: 87:7a:d9:c6:ad:4f:d5:10:53:1d:22:49:1b:29:00: 3b:55:a1:69:de:20:39:78:74:7d:36:e3:b2:4f:14: 71:49:e3:58:df:e4:5b:33:7e:a7:a3:f1:6a:67:7d: 82:d1:74:22:bf:b5:98:85:6f:75:d9:aa:73:50:ef: ca:33:c6:06:8e:6f:fd:b6:6e:3e:26:68:73:ab:c8: 39:f2:e5:2b:e2:ff:3a:20:27:d8:11:f2:d9:f4:86: 78:b1:e3:79:db:44:b6:2c:a5:0f:c0:38:40:97:19: 31:bf:04:21:e5:83:82:72:14:ea:32:9e:3f:6b:db: 8b:00:e4:d4:f1:94:96:33:53:a4:45:b2:67:89:10: ca:c5:20:77:ed:96:c5:05:1b:f9:77:a4:74:f6:7e: 2b:6a:e3:8b:36:48:52:c7:a6:47:83:27:94:64:e1: 41:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3A:16:32:44:46:D8:FF:09:F6:6B:DA:42:91:9E:19:51:CA:E0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d9:53:bc:d5:6e:3c:05:ba:b3:5e:12:de:e1:16:61:89:d6: 1e:d8:cb:b5:68:94:1c:6b:db:81:54:4e:63:24:b7:72:30:95: 7b:60:03:77:86:bd:13:cd:83:bf:c6:8f:e8:d7:42:7b:53:7c: 16:33:59:8d:f0:be:03:98:44:72:17:99:10:3c:ff:c7:8c:46: 76:86:74:ed:96:2f:93:28:b3:66:09:1d:6a:03:6f:d0:97:1f: d9:a7:d9:53:20:f4:d7:2e:22:ea:d9:d3:e6:75:59:9b:50:0f: 3b:5e:1a:9a:77:40:bd:06:95:86:2e:21:95:86:14:a9:49:cc: 63:b1:4c:72:15:98:cc:14:b8:f5:6d:68:1d:5f:be:74:18:91: bc:28:56:ea:81:43:36:5d:27:56:f0:23:86:0a:8c:b8:ce:79: 8f:60:7d:9c:9e:ab:7e:0c:a4:81:86:69:aa:16:fa:87:ad:99: bd:93:95:25:35:ab:b3:c0:fe:11:b5:e6:7d:ba:72:ed:7a:49: 69:a6:e1:59:e6:25:06:d6:03:44:b9:23:4c:7a:da:a2:50:af: ed:6d:37:95:f2:76:eb:6d:cb:bc:b8:13:ba:aa:c5:fd:93:7c: 7e:5d:9f:a3:9e:19:fe:a9:63:54:0b:d6:a3:cc:5b:83:48:2a: e6:e6:19:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98gxfq+rtdG67AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjY5NGZjMTYtZTJhZi00ZTAxLTg5MDgtZjVlNTZhZWVmMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo21nL4fVidFf6VOFPCLN5+MY9ztoz2clLT1m WKs7uX4FyZqSCAuyh4GOqwZoL2KsHDu5tQ3NWv5vgp5AZ4VD69fLXVQRyHdCqNqK lbrtWWbttOHoFhc7crSHetnGrU/VEFMdIkkbKQA7VaFp3iA5eHR9NuOyTxRxSeNY 3+RbM36no/FqZ32C0XQiv7WYhW912apzUO/KM8YGjm/9tm4+Jmhzq8g58uUr4v86 ICfYEfLZ9IZ4seN520S2LKUPwDhAlxkxvwQh5YOCchTqMp4/a9uLAOTU8ZSWM1Ok RbJniRDKxSB37ZbFBRv5d6R09n4rauOLNkhSx6ZHgyeUZOFBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk6FjJERtj/CfZr2kKRnhlRyuAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTg2OWViNmEtZmEzNC0z YzI5LWI3ZTUtZTZjMGY1ZGU1NjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvZU7zVbjwFurNeEt7hFmGJ1h7Yy7VolBxr24FUTmMkt3IwlXtgA3eG vRPNg7/Gj+jXQntTfBYzWY3wvgOYRHIXmRA8/8eMRnaGdO2WL5Mos2YJHWoDb9CX H9mn2VMg9NcuIurZ0+Z1WZtQDzteGpp3QL0GlYYuIZWGFKlJzGOxTHIVmMwUuPVt aB1fvnQYkbwoVuqBQzZdJ1bwI4YKjLjOeY9gfZyeq34MpIGGaaoW+oetmb2TlSU1 q7PA/hG15n26cu16SWmm4VnmJQbWA0S5I0x62qJQr+1tN5Xydutty7y4E7qqxf2T fH5dn6OeGf6pY1QL1qPMW4NIKubmGZs= -----END CERTIFICATE-----Generated at Fri Sep 11 14:23:36 2026 by rpki-client