$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8946a42-f418-3ed9-b783-720e163153db.roa File: a8946a42-f418-3ed9-b783-720e163153db.roa (raw, json) Hash identifier: 9GZ6A0vmrS6OM7NB/0DPQae8SPKvsKDdXiY3WV77VzM= Subject key identifier: 8D:D7:C7:B2:4F:8A:04:16:CE:6F:F9:B3:69:5A:30:31:95:C2:FE:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3A17D7F330ECEF93DA10A400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8946a42-f418-3ed9-b783-720e163153db.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.219.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d7:f3:30:ec:ef:93:da:10:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=90bfa8cc-09e8-49e9-86c4-fa9d956b6bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:f5:6e:7a:41:ee:03:3c:45:2d:e5:e3:f4: 23:ce:eb:05:1f:46:2a:64:ab:46:f4:6e:ac:ec:2b: 8f:91:10:dc:08:42:38:40:90:4b:71:cf:6f:96:31: 92:47:87:f6:58:61:4a:13:ce:69:28:0c:3f:e0:59: e6:a4:b4:b8:07:d1:36:38:fc:eb:2b:39:4b:7c:9c: 00:fd:3b:39:8c:86:9d:f4:25:02:aa:80:a3:1f:e8: 0e:ae:42:36:01:ec:2a:d5:2d:c4:80:2a:57:bf:ae: 09:73:dd:a3:75:7b:45:9c:27:fe:42:a7:6b:33:8c: 1f:5c:53:16:29:e2:72:fa:9f:47:5e:1a:a7:60:e9: 9f:bc:db:8e:56:44:1f:ed:be:32:39:a3:1c:76:fc: 4a:99:48:36:62:92:27:17:ce:f5:3a:61:3e:cc:d4: b7:7a:22:08:7f:b2:78:90:b6:82:76:70:a2:07:bb: 9b:35:37:fb:b9:42:9b:58:e5:9e:d2:3c:1c:93:f6: 23:0c:63:d7:0e:34:43:a8:c9:19:9f:e6:bf:1f:89: 3d:df:c0:0b:1d:59:84:68:18:f6:53:9e:e9:ca:7e: d4:09:d6:2e:60:c6:ec:b4:64:ca:55:4d:d7:c0:7d: 6c:95:e5:6a:26:31:2f:4a:fa:0d:74:e8:b1:8c:19: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D7:C7:B2:4F:8A:04:16:CE:6F:F9:B3:69:5A:30:31:95:C2:FE:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8946a42-f418-3ed9-b783-720e163153db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7b:91:fe:37:0d:65:82:f8:f4:8d:e5:64:99:1a:46:f8:22: 37:07:23:2a:b0:bc:51:13:00:71:5d:97:2e:25:3b:51:ba:1f: b4:21:39:94:9d:06:c0:f6:41:f6:b0:95:70:80:76:b6:ce:e6: da:b2:50:fb:cf:72:a7:bb:e7:f5:15:f6:a4:2b:c5:42:bd:f6: f6:71:ba:64:61:01:89:89:23:1a:92:57:54:c2:d2:25:96:41: a3:b8:2e:b5:5c:ec:1f:16:b1:cb:07:7e:0e:83:98:6d:93:41: 7f:a1:0b:7e:c6:f9:58:c3:e0:fd:8f:5c:f4:b8:23:59:14:a3: 56:22:01:66:e3:d3:50:31:ce:25:40:58:16:4d:b5:1c:3d:2a: 92:75:1b:8d:e1:57:c5:45:13:ca:05:1a:8a:5a:1e:7c:10:2b: 5d:0a:07:4e:0a:c6:ad:99:df:4f:1f:e2:c6:52:fd:7e:35:f5: 4e:20:cf:aa:4a:2a:53:11:7e:ba:2b:52:ab:22:2b:c5:76:27: ad:cc:bc:fc:68:95:e6:fd:0e:f5:4e:45:22:60:15:1a:ae:37: 2a:8a:a0:27:dd:72:88:43:d0:12:5a:5f:1f:9a:bc:24:79:41: c5:88:f6:18:f7:e7:65:cd:76:95:c2:2f:d7:56:98:c3:de:14: 73:61:dc:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9fzMOzvk9oQpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk OTBiZmE4Y2MtMDllOC00OWU5LTg2YzQtZmE5ZDk1NmI2YmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwP1bnpB7gM8RS3l4/QjzusFH0YqZKtG9G6s 7CuPkRDcCEI4QJBLcc9vljGSR4f2WGFKE85pKAw/4FnmpLS4B9E2OPzrKzlLfJwA /Ts5jIad9CUCqoCjH+gOrkI2Aewq1S3EgCpXv64Jc92jdXtFnCf+QqdrM4wfXFMW KeJy+p9HXhqnYOmfvNuOVkQf7b4yOaMcdvxKmUg2YpInF871OmE+zNS3eiIIf7J4 kLaCdnCiB7ubNTf7uUKbWOWe0jwck/YjDGPXDjRDqMkZn+a/H4k938ALHVmEaBj2 U57pyn7UCdYuYMbstGTKVU3XwH1sleVqJjEvSvoNdOixjBldnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3Xx7JPigQWzm/5s2laMDGVwv7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg5NDZhNDItZjQxOC0z ZWQ5LWI3ODMtNzIwZTE2MzE1M2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9uKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD97kf43DWWC+PSN5WSZGkb4IjcHIyqwvFETAHFdly4lO1G6H7QhOZSd BsD2QfawlXCAdrbO5tqyUPvPcqe75/UV9qQrxUK99vZxumRhAYmJIxqSV1TC0iWW QaO4LrVc7B8WscsHfg6DmG2TQX+hC37G+VjD4P2PXPS4I1kUo1YiAWbj01AxziVA WBZNtRw9KpJ1G43hV8VFE8oFGopaHnwQK10KB04Kxq2Z308f4sZS/X419U4gz6pK KlMRfrorUqsiK8V2J63MvPxoleb9DvVORSJgFRquNyqKoCfdcohD0BJaXx+avCR5 QcWI9hj352XNdpXCL9dWmMPeFHNh3CQ= -----END CERTIFICATE-----Generated at Fri Oct 9 04:44:36 2026 by rpki-client