$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/9f06f1a5-6150-3c67-95d4-3a177b3a22e5.roa File: 9f06f1a5-6150-3c67-95d4-3a177b3a22e5.roa (raw, json) Hash identifier: Sf/XadzQvSoInGz5v6C6UBn0gmkLsytgNUEFW/xHWh4= Subject key identifier: A1:E8:40:5B:DA:02:CA:05:B2:F1:F1:B6:B2:87:39:13:2A:2A:D0:C7 Certificate issuer: /CN=4e92ac73-1d76-496f-82fd-a279a12fe831 Certificate serial: 010D0C9F4328584F1F9249F8EB02C118246B7500 Authority key identifier: 6F:3D:6A:33:1D:E7:7B:BB:D9:E2:BC:4A:D4:EF:06:F8:56:26:71:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/9f06f1a5-6150-3c67-95d4-3a177b3a22e5.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 214483 IP address blocks: 23.152.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/4e92ac73-1d76-496f-82fd-a279a12fe831.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/4e92ac73-1d76-496f-82fd-a279a12fe831.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:49:f8:eb:02:c1:18:24:6b:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e92ac73-1d76-496f-82fd-a279a12fe831 Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=f2c3eac8-f121-446c-89ef-2c7a2acc3a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:4c:21:f1:14:ea:78:2b:8a:c7:c0:0e:66: cb:8f:0f:db:92:a4:5a:e8:fb:b5:2b:83:7a:4d:e1: 9e:24:b5:f3:ec:2f:ba:ae:20:f6:04:e3:9e:3d:3e: 74:bf:78:c3:14:a9:42:3c:fa:c4:da:79:34:62:53: 59:42:9c:23:eb:67:dc:55:62:8c:2c:ff:39:3c:85: cf:1d:c1:c9:40:0a:d7:41:60:48:e6:32:cb:3d:03: 9b:94:ae:31:f8:d1:1c:b3:f5:62:ff:d6:8b:6a:c2: 49:5c:3d:a1:48:ad:9a:09:13:36:90:13:7f:e5:21: 5c:56:fd:b0:c9:13:ef:00:a9:4c:66:5f:7c:47:49: cd:fd:dd:81:3e:cc:eb:9c:9d:3f:00:58:af:25:0b: 0b:4d:14:7b:f8:5c:9e:ad:ec:1a:a1:e9:8e:08:ed: bd:b3:be:27:7b:78:44:65:2c:dc:e8:0d:e2:c3:6d: e5:c0:5f:2f:eb:4d:5c:3e:8b:fb:41:98:31:ca:7b: 44:6d:10:11:46:5f:90:f6:fc:fe:ce:3a:7f:f2:55: 30:3d:dc:b5:b9:c2:78:0c:09:e7:0b:b0:31:58:bc: fc:be:d9:3d:e7:e7:3d:4a:00:fe:7f:8d:cb:69:7c: 45:c0:bd:c2:c8:e8:cb:27:15:70:f0:ca:2d:bb:78: 5c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:40:5B:DA:02:CA:05:B2:F1:F1:B6:B2:87:39:13:2A:2A:D0:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/9f06f1a5-6150-3c67-95d4-3a177b3a22e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831/4e92ac73-1d76-496f-82fd-a279a12fe831.crl X509v3 Authority Key Identifier: keyid:6F:3D:6A:33:1D:E7:7B:BB:D9:E2:BC:4A:D4:EF:06:F8:56:26:71:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4e92ac73-1d76-496f-82fd-a279a12fe831.cer sbgp-ipAddrBlock: critical IPv4: 23.152.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8e:31:98:f3:18:8d:ef:de:51:c5:30:77:49:68:8b:b8:ba: 2b:1d:c6:cd:4b:04:3e:43:8c:27:76:86:5b:82:eb:57:4c:d6: 38:39:5e:65:0f:24:23:5c:c1:92:4f:9d:11:c4:b2:e6:80:71: d0:87:5e:d0:eb:2c:9c:4f:85:ad:ef:28:e5:0c:9c:f7:99:fa: b5:46:e9:76:18:ec:40:66:28:0f:23:c6:ed:3c:97:e6:a7:5a: 6a:69:59:de:50:95:90:cb:dc:c8:91:71:f0:43:96:b0:b9:7b: 53:67:91:3d:64:18:e2:0e:68:16:f8:49:e4:4e:87:db:a1:a5: a9:00:24:a1:b7:6b:26:16:c5:f2:96:08:ff:d1:ea:cf:81:11: b9:97:48:84:19:8f:34:10:10:a1:cd:fa:ac:6d:59:86:17:51: f8:2d:54:ed:06:79:6c:22:a7:8b:46:5a:2b:9e:b3:ff:90:b9: 7d:a9:88:4a:93:3b:9c:c9:3b:02:89:71:74:16:96:07:74:8e: 03:d9:a6:24:e9:36:66:64:d5:ae:8a:07:da:42:5d:b7:d5:d0: f2:4f:88:94:ee:af:f5:5e:e6:31:a1:8c:08:86:c0:8c:63:49: 03:6d:fa:f5:e1:a1:59:3f:77:c4:e3:65:d5:50:60:54:38:5e: 05:8a:c3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkn46wLBGCRrdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5MmFjNzMtMWQ3Ni00OTZmLTgyZmQtYTI3OWExMmZl ODMxMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk ZjJjM2VhYzgtZjEyMS00NDZjLTg5ZWYtMmM3YTJhY2MzYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu25MIfEU6ngrisfADmbLjw/bkqRa6Pu1K4N6 TeGeJLXz7C+6riD2BOOePT50v3jDFKlCPPrE2nk0YlNZQpwj62fcVWKMLP85PIXP HcHJQArXQWBI5jLLPQOblK4x+NEcs/Vi/9aLasJJXD2hSK2aCRM2kBN/5SFcVv2w yRPvAKlMZl98R0nN/d2BPszrnJ0/AFivJQsLTRR7+FyerewaoemOCO29s74ne3hE ZSzc6A3iw23lwF8v601cPov7QZgxyntEbRARRl+Q9vz+zjp/8lUwPdy1ucJ4DAnn C7AxWLz8vtk95+c9SgD+f43LaXxFwL3CyOjLJxVw8Motu3hcEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHoQFvaAsoFsvHxtrKHORMqKtDHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80ZTky YWM3My0xZDc2LTQ5NmYtODJmZC1hMjc5YTEyZmU4MzEvOWYwNmYxYTUtNjE1MC0z YzY3LTk1ZDQtM2ExNzdiM2EyMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGU5MmFjNzMtMWQ3Ni00OTZmLTgy ZmQtYTI3OWExMmZlODMxLzRlOTJhYzczLTFkNzYtNDk2Zi04MmZkLWEyNzlhMTJm ZTgzMS5jcmwwHwYDVR0jBBgwFoAUbz1qMx3ne7vZ4rxK1O8G+FYmcWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80ZTkyYWM3My0xZDc2LTQ5NmYtODJmZC1hMjc5 YTEyZmU4MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5g0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmOMZjzGI3v3lHFMHdJaIu4uisdxs1LBD5DjCd2hluC61dM1jg5XmUP JCNcwZJPnRHEsuaAcdCHXtDrLJxPha3vKOUMnPeZ+rVG6XYY7EBmKA8jxu08l+an WmppWd5QlZDL3MiRcfBDlrC5e1NnkT1kGOIOaBb4SeROh9uhpakAJKG3ayYWxfKW CP/R6s+BEbmXSIQZjzQQEKHN+qxtWYYXUfgtVO0GeWwip4tGWiues/+QuX2piEqT O5zJOwKJcXQWlgd0jgPZpiTpNmZk1a6KB9pCXbfV0PJPiJTur/Ve5jGhjAiGwIxj SQNt+vXhoVk/d8TjZdVQYFQ4XgWKw50= -----END CERTIFICATE-----Generated at Fri Sep 11 05:09:12 2026 by rpki-client