$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/5d5fd8a2-dfab-3a73-ae80-47ea1bcbda64.roa File: 5d5fd8a2-dfab-3a73-ae80-47ea1bcbda64.roa (raw, json) Hash identifier: 57XHJ+DPSWzYiXxUAVU9jfYX2SzSPP0Hv0axqUweMCg= Subject key identifier: 40:02:86:C9:2A:6D:C9:63:37:FD:6E:82:F3:CB:E5:61:34:E9:31:46 Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584F0ED22AFEBC8779BD0DB71A80 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/5d5fd8a2-dfab-3a73-ae80-47ea1bcbda64.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 397268 IP address blocks: 23.172.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2a:fe:bc:87:79:bd:0d:b7:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=8f72c2c4-7423-40af-aefd-e127d4f80716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:fd:76:8f:94:ff:86:24:ac:78:b3:4b:62: 7c:b4:86:be:5f:b2:7e:05:84:ed:e7:a8:67:5c:28: 24:12:07:7f:14:74:8a:b2:e5:20:99:66:d2:a1:aa: 3a:b9:d0:3f:92:e0:67:5d:d4:d1:b5:78:2b:00:38: d6:41:99:ed:e0:b2:dc:76:ec:56:47:bb:e5:62:37: 9a:d1:56:2e:e9:ed:cd:af:bf:f8:86:dd:42:b6:cb: de:50:76:66:6a:77:c9:9b:5c:7f:34:71:b0:c1:28: 29:7f:0a:f0:f6:88:55:0c:8e:c7:09:98:26:a6:79: ba:39:ce:a7:4c:af:de:92:9c:2c:df:b9:45:17:25: 20:4e:5f:e1:32:6d:a8:9d:61:28:95:dc:d9:2c:a9: ab:a5:42:e8:59:21:b2:fd:55:a6:40:1f:67:ab:63: e3:a8:d6:27:18:26:02:dd:7c:d0:1f:83:54:49:cc: 32:cf:36:22:5d:bd:2d:75:90:51:5e:91:e8:8b:c6: c3:af:ea:70:c6:92:70:e9:4f:97:49:db:2d:d9:64: d6:c9:b7:82:fe:ec:aa:72:cd:90:69:2b:5b:5f:ce: e9:31:62:ca:80:31:4d:72:5f:27:d5:b8:b9:3e:e9: ec:22:5a:20:45:e5:7e:fa:6e:fc:41:73:95:db:34: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:02:86:C9:2A:6D:C9:63:37:FD:6E:82:F3:CB:E5:61:34:E9:31:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/5d5fd8a2-dfab-3a73-ae80-47ea1bcbda64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 23.172.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f8:f2:5c:06:91:ab:e8:5a:1b:4f:f8:38:5f:ba:90:b9:c1: 9c:f4:a0:1a:1a:cb:80:a2:07:a9:03:f7:57:b6:3c:6c:df:52: 65:7a:72:ee:6b:eb:67:2a:9d:b7:bc:73:2f:48:6d:92:4e:c0: 58:30:1b:9e:1c:3d:42:38:92:33:ee:a0:12:3c:bb:0f:d4:41: dd:90:d0:c6:f3:42:0f:be:e5:00:15:f4:08:6f:22:46:a4:b1: 77:03:39:72:db:32:26:a3:b9:72:9f:d0:84:a7:bc:9d:3f:e4: 9b:5a:b7:ef:86:87:fc:56:1f:f9:ed:e2:1f:73:41:f9:1c:85: c3:63:a1:d6:82:e2:71:b0:d2:93:42:a5:8a:12:55:81:65:c5: 8e:49:e1:b8:83:5f:01:cb:c5:6e:e7:f7:1b:b8:ab:30:c8:4d: 75:a6:90:97:c9:c2:de:3a:a9:fc:87:89:06:f3:5b:71:cc:4f: 06:b8:54:57:d3:d4:37:0d:4f:36:dd:a2:8a:58:0f:3e:61:c7: 41:be:09:07:dd:be:95:42:4a:1b:67:76:7d:fb:93:e5:d4:e4: 2e:8b:f8:19:04:e3:50:1f:cd:56:bf:75:dc:4f:1a:bd:7f:fe: bf:e1:98:00:ba:63:18:91:1c:06:3f:c8:36:c2:81:d3:c3:27: 23:0f:ac:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0ir+vId5vQ23GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk OGY3MmMyYzQtNzQyMy00MGFmLWFlZmQtZTEyN2Q0ZjgwNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi239do+U/4YkrHizS2J8tIa+X7J+BYTt56hn XCgkEgd/FHSKsuUgmWbSoao6udA/kuBnXdTRtXgrADjWQZnt4LLcduxWR7vlYjea 0VYu6e3Nr7/4ht1CtsveUHZmanfJm1x/NHGwwSgpfwrw9ohVDI7HCZgmpnm6Oc6n TK/ekpws37lFFyUgTl/hMm2onWEoldzZLKmrpULoWSGy/VWmQB9nq2PjqNYnGCYC 3XzQH4NUScwyzzYiXb0tdZBRXpHoi8bDr+pwxpJw6U+XSdst2WTWybeC/uyqcs2Q aStbX87pMWLKgDFNcl8n1bi5PunsIlogReV++m78QXOV2zRzSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAChskqbcljN/1ugvPL5WE06TFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvNWQ1ZmQ4YTItZGZhYi0z YTczLWFlODAtNDdlYTFiY2JkYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP48lwGkavoWhtP+DhfupC5wZz0oBoay4CiB6kD91e2PGzfUmV6cu5r 62cqnbe8cy9IbZJOwFgwG54cPUI4kjPuoBI8uw/UQd2Q0MbzQg++5QAV9AhvIkak sXcDOXLbMiajuXKf0ISnvJ0/5Jtat++Gh/xWH/nt4h9zQfkchcNjodaC4nGw0pNC pYoSVYFlxY5J4biDXwHLxW7n9xu4qzDITXWmkJfJwt46qfyHiQbzW3HMTwa4VFfT 1DcNTzbdoopYDz5hx0G+CQfdvpVCShtndn37k+XU5C6L+BkE41AfzVa/ddxPGr1/ /r/hmAC6YxiRHAY/yDbCgdPDJyMPrJQ= -----END CERTIFICATE-----Generated at Fri Sep 4 22:07:46 2026 by rpki-client