$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd7c2eae-33d9-3f43-a3a7-7954e87a5ad0.roa File: dd7c2eae-33d9-3f43-a3a7-7954e87a5ad0.roa (raw, json) Hash identifier: J2q5gkpFoaFS1MD5+XeQtEuQBMtfqGDtGRxVUKxgLO0= Subject key identifier: 98:D3:F4:AA:85:1A:C9:0B:3F:F7:DC:EE:70:72:96:AC:5E:39:56:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4AD7DF0FD96D894D3019A940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd7c2eae-33d9-3f43-a3a7-7954e87a5ad0.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 16625 IP address blocks: 23.1.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:df:0f:d9:6d:89:4d:30:19:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=d70d4246-fe3b-4e30-b29b-8d1513543a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:da:ac:06:d3:b1:bd:83:a8:00:78:af:da: 7f:a4:0c:06:7a:8d:d0:42:ca:82:44:f0:b8:4b:12: 5a:a2:8b:b2:28:7b:59:88:39:bc:ba:4b:5f:82:1a: 57:19:e6:46:f0:32:1d:34:ef:1a:de:b9:64:92:c7: 5f:a2:88:86:5d:2e:cf:ca:02:f8:2c:79:74:6a:ba: f6:28:76:4d:bf:cd:e7:7e:80:49:01:59:e1:ed:a5: 8f:a0:69:73:23:9c:16:e3:dd:56:f4:c4:5c:21:45: 61:15:28:2b:c7:2f:fc:73:cb:77:cd:44:9b:33:c6: 13:a5:50:de:04:50:af:de:ae:dd:69:59:e8:7b:0e: cf:e2:5b:13:14:8c:4d:22:5b:f1:ee:98:ab:a3:ed: e4:c6:12:cd:ce:da:d9:c4:16:60:c1:4e:c6:50:ba: 08:e2:32:d5:c0:bd:0a:81:c3:d7:45:45:2f:48:92: 3b:0a:7a:03:5d:87:e0:ea:d6:cf:4e:43:64:f2:e5: 1f:85:d7:01:b1:a5:b0:40:f5:d7:d4:a4:bb:d3:5a: 7c:a4:dd:89:1d:b4:1d:f7:56:41:2d:33:5a:16:e3: d6:71:73:89:a2:7b:e6:f0:e9:c9:5c:0d:4c:63:35: d9:45:9e:8c:17:63:9d:03:2a:68:42:95:ff:fc:15: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D3:F4:AA:85:1A:C9:0B:3F:F7:DC:EE:70:72:96:AC:5E:39:56:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd7c2eae-33d9-3f43-a3a7-7954e87a5ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:24:8a:94:d4:ac:6f:89:f9:05:f8:15:3c:61:6f:d2:40:8d: 93:bb:03:24:00:55:9a:05:cd:97:78:48:b0:2b:c6:54:da:cf: f8:25:67:b0:4a:18:c9:ab:e7:75:6d:08:cd:b7:21:4b:01:5b: 0e:83:55:a6:42:c0:2e:8a:ea:58:65:1b:88:d6:e9:16:ec:78: f8:68:98:81:a0:eb:16:b5:79:a4:d5:15:87:5b:fa:a6:42:2e: af:47:58:a8:e6:c9:ab:6e:7a:45:6c:0c:33:0e:19:d6:42:3a: 7d:14:84:f8:39:80:a2:45:55:cb:f5:8e:95:ae:3d:55:1c:41: 65:3c:46:27:c4:6b:ad:e7:9c:7d:4e:59:1e:b9:6e:ef:2f:d8: 02:d9:22:24:fa:70:a8:42:2b:8d:a3:64:28:80:a9:8a:1b:fa: 77:a0:36:56:b2:31:83:dd:d4:27:97:d7:f9:89:62:a5:a6:50: 61:0e:08:82:15:8a:c4:48:7b:6c:a9:4c:db:37:b9:e5:b2:e2: 54:93:48:59:f5:8d:eb:ab:87:1d:3f:4d:bc:1a:8f:ea:2e:cf: ed:02:59:9d:f9:2a:8d:a2:31:8a:0b:97:1f:be:c6:49:73:88: 77:63:84:23:17:97:4e:24:79:4a:5f:c8:fb:70:63:9c:44:7f: 03:12:5e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K198P2W2JTTAZqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk ZDcwZDQyNDYtZmUzYi00ZTMwLWIyOWItOGQxNTEzNTQzYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA153arAbTsb2DqAB4r9p/pAwGeo3QQsqCRPC4 SxJaoouyKHtZiDm8uktfghpXGeZG8DIdNO8a3rlkksdfooiGXS7PygL4LHl0arr2 KHZNv83nfoBJAVnh7aWPoGlzI5wW491W9MRcIUVhFSgrxy/8c8t3zUSbM8YTpVDe BFCv3q7daVnoew7P4lsTFIxNIlvx7piro+3kxhLNztrZxBZgwU7GULoI4jLVwL0K gcPXRUUvSJI7CnoDXYfg6tbPTkNk8uUfhdcBsaWwQPXX1KS701p8pN2JHbQd91ZB LTNaFuPWcXOJonvm8OnJXA1MYzXZRZ6MF2OdAypoQpX//BWWIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjT9KqFGskLP/fc7nBylqxeOVZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ3YzJlYWUtMzNkOS0z ZjQzLWEzYTctNzk1NGU4N2E1YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMkipTUrG+J+QX4FTxhb9JAjZO7AyQAVZoFzZd4SLArxlTaz/glZ7BK GMmr53VtCM23IUsBWw6DVaZCwC6K6lhlG4jW6RbsePhomIGg6xa1eaTVFYdb+qZC Lq9HWKjmyatuekVsDDMOGdZCOn0UhPg5gKJFVcv1jpWuPVUcQWU8RifEa63nnH1O WR65bu8v2ALZIiT6cKhCK42jZCiAqYob+negNlayMYPd1CeX1/mJYqWmUGEOCIIV isRIe2ypTNs3ueWy4lSTSFn1jeurhx0/Tbwaj+ouz+0CWZ35Ko2iMYoLlx++xklz iHdjhCMXl04keUpfyPtwY5xEfwMSXvE= -----END CERTIFICATE-----Generated at Tue Oct 6 16:02:31 2026 by rpki-client