$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9d7c116e-cc80-3f67-8154-24b5648ba633.roa File: 9d7c116e-cc80-3f67-8154-24b5648ba633.roa (raw, json) Hash identifier: kWrFR9yBwEG4afAty1jXsbB0AXoZgPKC1D/29uoYXJ8= Subject key identifier: D2:E1:6E:4D:A2:9F:DE:67:47:63:17:C2:D4:B7:EF:A4:17:36:13:95 Certificate issuer: /CN=1a78e5bb-4a68-4b2f-870c-a943f9a02622 Certificate serial: 010D0C9F4328584F1B62543217036BE61CD97280 Authority key identifier: 84:C9:F5:69:EE:B4:88:58:5A:E2:B8:AB:BE:00:30:E2:8B:2E:C7:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9d7c116e-cc80-3f67-8154-24b5648ba633.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 49915 IP address blocks: 23.153.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:54:32:17:03:6b:e6:1c:d9:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a78e5bb-4a68-4b2f-870c-a943f9a02622 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=24fcf721-6d4d-4ec5-a143-3bfcc0f6df89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:8b:e4:2d:46:90:cf:e9:f5:fb:1b:65:1e: 05:5a:13:03:c3:26:4c:d6:9c:7b:b7:a8:01:02:db: 20:23:92:2e:a4:ff:41:68:c3:e5:2f:81:08:74:7d: 85:00:06:a3:97:0c:c7:2d:cb:91:d1:3e:95:de:c8: b9:a2:2f:53:56:56:1f:6f:9e:c8:98:63:33:09:46: b3:07:33:dd:97:93:63:cc:76:96:08:12:d9:6f:75: fc:63:b8:9c:28:71:db:48:5e:4e:61:ef:70:f3:b3: 3c:b9:3f:5e:77:28:df:08:41:55:3b:1e:a6:3a:93: d3:c5:22:17:b1:1e:4d:e0:d5:9f:20:40:4d:e8:41: 2a:2b:4e:98:12:99:e1:bf:cc:01:7c:31:b7:c7:b7: b3:26:72:d9:8e:63:4f:e2:43:8c:23:97:20:77:8c: 9a:e5:0d:c8:2d:ac:2c:88:16:57:1e:43:88:0b:41: d8:82:9a:eb:2f:2f:f0:b8:c1:3b:bd:98:01:ed:23: 4f:60:13:33:97:25:67:07:62:58:26:5b:64:41:a4: aa:13:b2:4c:1d:01:e8:1d:ff:e2:3f:7c:2c:af:21: 3e:dc:a1:7a:e3:a2:4e:9c:7d:e8:45:75:24:17:1d: a2:ea:bb:d9:6f:17:b9:b9:fc:db:0e:b1:db:d2:c3: 68:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E1:6E:4D:A2:9F:DE:67:47:63:17:C2:D4:B7:EF:A4:17:36:13:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/9d7c116e-cc80-3f67-8154-24b5648ba633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622/1a78e5bb-4a68-4b2f-870c-a943f9a02622.crl X509v3 Authority Key Identifier: keyid:84:C9:F5:69:EE:B4:88:58:5A:E2:B8:AB:BE:00:30:E2:8B:2E:C7:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1a78e5bb-4a68-4b2f-870c-a943f9a02622.cer sbgp-ipAddrBlock: critical IPv4: 23.153.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b0:98:82:9b:b0:08:f1:6f:81:54:c3:29:e1:6a:0c:eb:73: e6:91:41:42:86:94:11:f7:b7:4d:a7:4a:19:81:e3:cd:67:04: e7:74:05:25:a9:75:bd:bf:21:65:87:90:f5:59:a6:fd:f2:e2: 2b:be:b6:1d:de:bc:77:57:27:7d:e4:94:74:17:52:68:a9:f2: ae:77:6d:d3:97:e3:ad:db:8c:b6:dd:05:4a:c9:27:ef:35:0e: d1:93:a6:b0:79:84:d0:90:ca:b0:ef:58:88:83:1c:90:0f:c8: 9a:ac:bb:16:68:99:ca:66:00:a1:ae:9b:5c:26:4c:b2:f1:d6: 4e:16:fd:02:85:54:77:f8:74:93:82:1b:35:d1:da:b7:a5:2c: 0b:7b:d7:b3:b0:a9:a3:1e:b8:a6:10:c0:3f:10:2a:33:93:eb: 69:18:c3:ed:af:60:63:07:42:81:31:2a:83:49:c6:1e:7d:ea: b0:71:f5:25:0b:3b:00:58:85:ca:a9:c4:e8:8c:e1:84:83:b4: 85:53:b7:05:97:a6:25:73:fe:a4:cc:f3:81:39:22:97:df:36: f6:18:74:65:7a:a7:6b:0a:2e:2d:45:30:80:7e:b0:e1:3f:03: b6:ba:c6:91:54:fa:bc:66:93:93:8c:0e:67:c1:5c:d3:f3:7f: e6:a3:d1:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlQyFwNr5hzZcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3OGU1YmItNGE2OC00YjJmLTg3MGMtYTk0M2Y5YTAy NjIyMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MjRmY2Y3MjEtNmQ0ZC00ZWM1LWExNDMtM2JmY2MwZjZkZjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp62L5C1GkM/p9fsbZR4FWhMDwyZM1px7t6gB AtsgI5IupP9BaMPlL4EIdH2FAAajlwzHLcuR0T6V3si5oi9TVlYfb57ImGMzCUaz BzPdl5NjzHaWCBLZb3X8Y7icKHHbSF5OYe9w87M8uT9edyjfCEFVOx6mOpPTxSIX sR5N4NWfIEBN6EEqK06YEpnhv8wBfDG3x7ezJnLZjmNP4kOMI5cgd4ya5Q3ILaws iBZXHkOIC0HYgprrLy/wuME7vZgB7SNPYBMzlyVnB2JYJltkQaSqE7JMHQHoHf/i P3wsryE+3KF646JOnH3oRXUkFx2i6rvZbxe5ufzbDrHb0sNoowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLhbk2in95nR2MXwtS376QXNhOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xYTc4 ZTViYi00YTY4LTRiMmYtODcwYy1hOTQzZjlhMDI2MjIvOWQ3YzExNmUtY2M4MC0z ZjY3LTgxNTQtMjRiNTY0OGJhNjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWE3OGU1YmItNGE2OC00YjJmLTg3 MGMtYTk0M2Y5YTAyNjIyLzFhNzhlNWJiLTRhNjgtNGIyZi04NzBjLWE5NDNmOWEw MjYyMi5jcmwwHwYDVR0jBBgwFoAUhMn1ae60iFha4rirvgAw4osux84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xYTc4ZTViYi00YTY4LTRiMmYtODcwYy1hOTQz ZjlhMDI2MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqwmIKbsAjxb4FUwynhagzrc+aRQUKGlBH3t02nShmB481nBOd0BSWp db2/IWWHkPVZpv3y4iu+th3evHdXJ33klHQXUmip8q53bdOX463bjLbdBUrJJ+81 DtGTprB5hNCQyrDvWIiDHJAPyJqsuxZomcpmAKGum1wmTLLx1k4W/QKFVHf4dJOC GzXR2relLAt717OwqaMeuKYQwD8QKjOT62kYw+2vYGMHQoExKoNJxh596rBx9SUL OwBYhcqpxOiM4YSDtIVTtwWXpiVz/qTM84E5IpffNvYYdGV6p2sKLi1FMIB+sOE/ A7a6xpFU+rxmk5OMDmfBXNPzf+aj0bo= -----END CERTIFICATE-----Generated at Thu Sep 10 22:47:41 2026 by rpki-client