$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/ac515b81-2243-3d0a-a616-7683f4e16eb0.roa File: ac515b81-2243-3d0a-a616-7683f4e16eb0.roa (raw, json) Hash identifier: 0MIxbDTuiIodauq7airafbZBogRqIBm7J5xUzo5g7Gg= Subject key identifier: 14:74:92:AF:99:25:40:BC:51:E9:D9:85:7E:41:41:44:39:CA:99:08 Certificate issuer: /CN=438dc0e7-cfde-42a3-8d42-dbe8a5100cd9 Certificate serial: 010D0C9F4328584F093D1389AB29588CF003D960 Authority key identifier: 96:13:B9:CB:40:A9:91:8A:34:0B:1B:A1:DF:28:EE:59:CB:4E:95:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/ac515b81-2243-3d0a-a616-7683f4e16eb0.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 24062 IP address blocks: 23.156.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:13:89:ab:29:58:8c:f0:03:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=438dc0e7-cfde-42a3-8d42-dbe8a5100cd9 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=5a297039-2189-4eff-90cc-00eae79556bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5f:b7:66:31:a1:f3:1d:ed:05:2a:67:0e:39: 6c:6a:d3:87:b8:49:a5:1a:2d:90:ce:61:c1:03:08: 2c:d1:9c:86:74:fb:dd:7a:55:d0:4b:27:9a:e4:81: e0:f9:29:f7:cf:cb:46:02:b0:50:7f:65:09:ce:97: 56:a7:ae:cb:4c:fc:71:ff:58:1d:25:ff:5b:ce:6f: 7c:fa:07:f1:07:58:f4:3d:d3:07:a5:c4:12:6b:d8: fd:92:d3:e1:eb:d8:7c:08:6a:1a:f0:a3:f9:41:d4: 4e:6f:c6:f7:66:ce:de:e1:99:65:a1:66:b1:e3:3e: 94:19:e0:f3:4f:9b:82:ba:20:02:d6:22:46:7d:64: 9e:30:7a:f8:9c:20:b0:bc:55:01:c5:65:a8:2f:91: 3c:07:d1:20:2c:14:57:a2:bd:ca:1a:99:ff:77:f5: ef:a7:2d:39:e5:f5:33:c6:aa:91:fa:88:35:71:cf: d9:37:df:2c:b1:89:67:76:bb:75:49:68:e0:49:c6: 22:62:f7:47:8f:20:19:1b:7b:5b:e9:cd:20:97:5e: a1:48:94:75:40:34:bb:c6:20:9e:c2:25:79:bd:6e: be:b8:39:83:b9:d8:ed:fb:35:d0:ab:71:dd:7a:b5: 02:76:be:e5:59:b2:53:2c:5e:86:9c:c0:d9:e9:e5: 02:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:74:92:AF:99:25:40:BC:51:E9:D9:85:7E:41:41:44:39:CA:99:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/ac515b81-2243-3d0a-a616-7683f4e16eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.crl X509v3 Authority Key Identifier: keyid:96:13:B9:CB:40:A9:91:8A:34:0B:1B:A1:DF:28:EE:59:CB:4E:95:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.cer sbgp-ipAddrBlock: critical IPv4: 23.156.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:34:52:0d:2b:2a:13:45:69:22:e1:51:f3:0b:69:13:f1:a2: c2:61:2f:1d:ba:7c:be:b4:79:ee:e8:cd:35:db:57:e7:4b:5c: de:77:7f:d1:3d:d6:16:25:08:44:f7:85:c2:69:05:8c:35:7e: a3:8b:ce:d7:23:37:f6:37:ad:b0:eb:bc:86:f2:00:8e:ce:80: 37:40:66:f5:72:31:c6:6d:7b:0c:46:50:9b:29:df:57:01:d8: 0f:3c:fe:fa:94:d8:b0:a8:7d:9b:5f:0d:7e:88:c7:fe:bc:af: 9e:f1:e1:88:e2:37:6b:5b:bd:e5:08:9c:88:71:31:f3:20:41: dc:ef:c8:80:71:60:44:f5:e1:e9:80:16:b2:2e:a4:90:dd:e2: dc:bf:13:79:a3:20:43:5e:34:d1:0a:51:bf:a6:ee:c5:89:cf: 02:84:a1:4b:e7:10:26:04:e6:43:37:db:de:dd:f5:66:7b:fd: b8:ea:ff:3b:af:17:56:34:04:3c:46:86:05:38:c7:18:fe:50: 7a:e3:40:94:b3:8e:01:b2:9e:81:fe:97:94:1f:ec:76:48:b3: f8:27:7d:d3:1a:1b:a2:a3:00:70:35:c0:f5:4f:ca:fb:ab:cf: 3d:07:ad:25:b4:2a:12:67:f7:60:19:b2:f2:19:97:8d:7c:93: c6:b6:bc:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPROJqylYjPAD2WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDM4ZGMwZTctY2ZkZS00MmEzLThkNDItZGJlOGE1MTAw Y2Q5MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NWEyOTcwMzktMjE4OS00ZWZmLTkwY2MtMDBlYWU3OTU1NmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF+3ZjGh8x3tBSpnDjlsatOHuEmlGi2QzmHB Awgs0ZyGdPvdelXQSyea5IHg+Sn3z8tGArBQf2UJzpdWp67LTPxx/1gdJf9bzm98 +gfxB1j0PdMHpcQSa9j9ktPh69h8CGoa8KP5QdROb8b3Zs7e4ZlloWax4z6UGeDz T5uCuiAC1iJGfWSeMHr4nCCwvFUBxWWoL5E8B9EgLBRXor3KGpn/d/Xvpy055fUz xqqR+og1cc/ZN98ssYlndrt1SWjgScYiYvdHjyAZG3tb6c0gl16hSJR1QDS7xiCe wiV5vW6+uDmDudjt+zXQq3HderUCdr7lWbJTLF6GnMDZ6eUCDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR0kq+ZJUC8UenZhX5BQUQ5ypkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80Mzhk YzBlNy1jZmRlLTQyYTMtOGQ0Mi1kYmU4YTUxMDBjZDkvYWM1MTViODEtMjI0My0z ZDBhLWE2MTYtNzY4M2Y0ZTE2ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDM4ZGMwZTctY2ZkZS00MmEzLThk NDItZGJlOGE1MTAwY2Q5LzQzOGRjMGU3LWNmZGUtNDJhMy04ZDQyLWRiZThhNTEw MGNkOS5jcmwwHwYDVR0jBBgwFoAUlhO5y0CpkYo0Cxuh3yjuWctOlcEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MzhkYzBlNy1jZmRlLTQyYTMtOGQ0Mi1kYmU4 YTUxMDBjZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM0Ug0rKhNFaSLhUfMLaRPxosJhLx26fL60ee7ozTXbV+dLXN53f9E9 1hYlCET3hcJpBYw1fqOLztcjN/Y3rbDrvIbyAI7OgDdAZvVyMcZtewxGUJsp31cB 2A88/vqU2LCofZtfDX6Ix/68r57x4YjiN2tbveUInIhxMfMgQdzvyIBxYET14emA FrIupJDd4ty/E3mjIENeNNEKUb+m7sWJzwKEoUvnECYE5kM3297d9WZ7/bjq/zuv F1Y0BDxGhgU4xxj+UHrjQJSzjgGynoH+l5Qf7HZIs/gnfdMaG6KjAHA1wPVPyvur zz0HrSW0KhJn92AZsvIZl418k8a2vNc= -----END CERTIFICATE-----Generated at Fri Sep 4 23:25:04 2026 by rpki-client