$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbfbf758-32cc-3df7-9006-a5e1cc323083.roa File: bbfbf758-32cc-3df7-9006-a5e1cc323083.roa (raw, json) Hash identifier: O8M6NQGVTe0kVj3cjN54G6nHqVYZT+a9MpWa1m6X/E0= Subject key identifier: 5E:FD:99:52:8E:56:D4:54:E0:9B:B1:4A:76:E8:FF:CB:D5:69:A7:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F576802BF0BF0818393254B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbfbf758-32cc-3df7-9006-a5e1cc323083.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.39.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:02:bf:0b:f0:81:83:93:25:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=14ffc866-c3b3-4091-b9a7-d1596d39afa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:c8:eb:af:f2:6e:fe:1b:f0:63:f4:31:a9: f5:91:5c:d9:e6:30:e8:e9:fe:da:a4:f9:eb:e9:9f: 29:fd:31:bc:c3:c2:e2:0b:ad:59:9b:f4:fd:78:bb: fa:4a:e4:e6:04:29:f6:30:dc:c0:07:78:a2:fc:c0: ad:88:e9:f9:fe:98:9a:1c:d8:7d:05:3b:58:5c:85: 57:37:af:46:e5:75:fe:1b:95:74:83:67:5f:be:82: 0c:53:c9:4d:28:5a:5f:a1:07:61:6a:42:ff:ed:0d: f0:b9:ca:0a:c3:00:73:f8:6a:44:b4:db:3b:b4:1d: 52:7c:7a:b9:c8:be:91:e6:b4:31:fb:e0:e1:58:0e: ad:24:af:d7:9f:eb:cc:2b:ab:aa:5a:77:92:6e:a7: 6e:d3:3d:ba:a7:51:08:2a:7b:cb:91:bd:ea:67:3b: cd:aa:a1:9e:eb:07:47:da:57:4f:60:3f:bb:74:b8: fb:ad:d6:78:5d:0a:88:4d:27:3f:b0:aa:64:e5:79: a2:5a:7c:eb:db:e1:03:8c:fc:1d:ee:44:ee:41:8b: 77:97:d7:b6:30:1c:08:48:ee:d1:cd:94:16:8e:d9: 5c:0e:00:2c:8b:71:84:f1:60:32:1e:9d:09:34:07: 0b:fe:00:17:b4:55:cb:ac:d5:03:45:91:05:70:28: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FD:99:52:8E:56:D4:54:E0:9B:B1:4A:76:E8:FF:CB:D5:69:A7:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbfbf758-32cc-3df7-9006-a5e1cc323083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:cb:b4:7a:00:36:92:ae:6a:93:12:f7:dd:60:e9:23:2b:d1: 30:d7:23:89:0e:04:d4:f8:06:51:a7:0e:6f:d8:08:99:37:9e: 16:91:be:af:d3:2e:57:17:e3:f4:04:bb:de:0e:8a:93:d9:f3: 85:a3:98:89:3b:63:62:67:06:5b:9f:7a:a5:4c:be:96:8b:6c: d7:a0:5c:dd:90:89:90:ea:8b:34:de:f8:3e:1a:54:73:cc:7f: 98:a2:f7:e5:bf:97:d3:2e:77:72:90:4c:7f:90:bc:ab:fd:38: d8:46:d7:85:5d:5e:e1:43:81:35:7c:92:e9:46:1f:46:7e:60: 19:1a:7c:59:5e:2d:6e:5a:68:5a:67:82:89:5d:49:ea:c0:ec: 60:6d:6d:d7:87:52:45:f4:96:58:76:26:95:f4:9e:02:c6:6c: f7:ca:be:45:3f:f5:d6:1d:0f:b3:a0:b6:57:c5:2e:9e:ee:90: ef:7a:1c:ca:e8:ea:b4:67:44:bc:28:b0:f3:36:95:cb:2c:6e: 3a:25:dc:9b:91:9c:f9:5b:8f:a1:87:77:54:f3:9a:1f:32:01: 37:7c:be:e8:21:95:eb:a9:ee:46:eb:bc:10:6f:f7:35:fd:6b: 64:c6:6c:30:51:17:55:a1:d2:d8:a9:8a:83:16:28:3b:95:e5: 06:8b:9a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAK/C/CBg5MlSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MTRmZmM4NjYtYzNiMy00MDkxLWI5YTctZDE1OTZkMzlhZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP/I66/ybv4b8GP0Man1kVzZ5jDo6f7apPnr 6Z8p/TG8w8LiC61Zm/T9eLv6SuTmBCn2MNzAB3ii/MCtiOn5/piaHNh9BTtYXIVX N69G5XX+G5V0g2dfvoIMU8lNKFpfoQdhakL/7Q3wucoKwwBz+GpEtNs7tB1SfHq5 yL6R5rQx++DhWA6tJK/Xn+vMK6uqWneSbqdu0z26p1EIKnvLkb3qZzvNqqGe6wdH 2ldPYD+7dLj7rdZ4XQqITSc/sKpk5XmiWnzr2+EDjPwd7kTuQYt3l9e2MBwISO7R zZQWjtlcDgAsi3GE8WAyHp0JNAcL/gAXtFXLrNUDRZEFcCgVZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF79mVKOVtRU4JuxSnbo/8vVaadoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmJmYmY3NTgtMzJjYy0z ZGY3LTkwMDYtYTVlMWNjMzIzMDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfLtHoANpKuapMS991g6SMr0TDXI4kOBNT4BlGnDm/YCJk3nhaRvq/T LlcX4/QEu94OipPZ84WjmIk7Y2JnBlufeqVMvpaLbNegXN2QiZDqizTe+D4aVHPM f5ii9+W/l9Mud3KQTH+QvKv9ONhG14VdXuFDgTV8kulGH0Z+YBkafFleLW5aaFpn goldSerA7GBtbdeHUkX0llh2JpX0ngLGbPfKvkU/9dYdD7OgtlfFLp7ukO96HMro 6rRnRLwosPM2lcssbjol3JuRnPlbj6GHd1Tzmh8yATd8vughleup7kbrvBBv9zX9 a2TGbDBRF1Wh0tipioMWKDuV5QaLmr0= -----END CERTIFICATE-----Generated at Tue Oct 6 18:05:11 2026 by rpki-client