$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/ecbcca25-7e0e-38ab-8329-82e97195bb3e.roa File: ecbcca25-7e0e-38ab-8329-82e97195bb3e.roa (raw, json) Hash identifier: 1aIgRkm8zEJoxjKbNOoYJ9sHcfjJ3uOk0K5ackZRy14= Subject key identifier: 4A:25:05:F7:13:48:22:DF:C3:91:1E:14:31:54:AE:42:46:FB:28:6D Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Certificate serial: 010D0C9F4328584F0ED22C5BDB062A88682C4140 Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/ecbcca25-7e0e-38ab-8329-82e97195bb3e.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 397285 IP address blocks: 23.172.192.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2c:5b:db:06:2a:88:68:2c:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=5cb5bc5f-34d5-4605-98a2-bd6a006ee485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:40:b6:7d:ca:c8:7b:00:a9:9e:e5:09:2a: 8c:78:7f:e6:d8:e8:5d:c4:6c:bb:0d:35:ce:15:98: 2b:94:03:0c:7b:0f:23:9c:6b:f4:9a:c0:dd:bd:b5: 45:2f:b2:98:8c:c3:f0:5b:18:6f:4a:89:98:4f:58: 1a:d8:e3:0a:88:5b:c5:c0:04:64:e4:29:5c:81:d7: a4:82:22:cc:f2:ba:d9:9c:73:c7:24:89:9a:90:af: 6a:e3:73:65:19:93:40:9e:34:4d:e2:74:ba:ea:1c: a2:60:77:b4:7f:93:b8:95:86:4c:05:42:1c:03:61: 6e:7a:51:11:71:d6:07:4e:84:f3:b2:c7:3d:04:6f: 94:50:02:49:47:78:af:65:a2:40:6a:64:65:57:7f: 1a:39:e7:36:2e:dd:fa:11:c2:0e:87:76:7b:cc:8f: 28:12:a7:3a:05:1e:0a:a3:eb:68:7c:a5:45:29:9b: d8:1d:2c:7f:98:00:74:62:0d:c1:8b:8b:29:f4:bf: 8e:bd:85:aa:41:73:7a:39:a9:49:e7:b2:2e:33:0e: 71:36:c3:51:21:f5:47:83:5d:63:94:5d:16:8b:43: b9:2d:1c:05:5b:2f:ce:7d:9d:e9:ec:9e:d1:7c:d4: 06:66:f5:f3:72:d5:16:21:25:18:a0:3f:53:19:ea: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:25:05:F7:13:48:22:DF:C3:91:1E:14:31:54:AE:42:46:FB:28:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/ecbcca25-7e0e-38ab-8329-82e97195bb3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl X509v3 Authority Key Identifier: keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer sbgp-ipAddrBlock: critical IPv4: 23.172.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ed:d4:95:87:33:0e:8f:bc:29:a0:d7:6f:bc:29:1d:04:a4: cb:8b:16:0f:c8:49:32:ff:81:d1:89:5c:8e:62:72:34:f3:3c: 33:ab:f0:f8:43:05:bb:ea:2a:79:30:be:fb:c9:27:25:5d:99: c2:32:76:58:e1:93:a5:be:e9:29:11:b0:63:ff:f0:5c:09:c6: 6a:ab:db:dc:85:d9:d3:dc:d7:c1:9f:a1:47:4a:f5:5b:ad:5e: e3:43:fe:d9:ce:22:a2:88:02:98:64:f9:7a:98:cf:0a:5b:1d: a8:f7:4f:47:a2:e3:44:0c:69:63:94:15:0b:29:2c:a3:e7:3b: ef:b3:c9:f7:25:bc:6f:46:bf:50:1f:3d:73:69:00:d1:e8:0b: 94:8b:be:26:0e:c9:20:64:da:3d:5a:fe:1e:52:4e:64:27:ab: 19:3c:bc:0b:4f:53:fc:aa:d3:41:21:78:78:e5:b7:f9:96:d2: 33:77:4e:a8:32:0b:36:ea:7f:02:bf:01:72:c7:f9:f1:23:02: 91:f6:4b:a4:1a:9a:a1:3e:0c:5b:00:70:6b:3c:fa:1d:ac:36: b6:97:9d:ee:8e:ff:a4:14:db:f7:fd:5a:e2:c8:4a:64:ee:a9: 7c:fc:b1:28:a4:f8:73:24:d1:40:3d:28:cb:ae:9b:41:c4:51: 03:38:8f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0ixb2wYqiGgsQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhMTUxODMtMmMyMy00ZDBhLTlhYWEtZmVlNDdmN2E2 MWYxMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk NWNiNWJjNWYtMzRkNS00NjA1LTk4YTItYmQ2YTAwNmVlNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyApAtn3KyHsAqZ7lCSqMeH/m2OhdxGy7DTXO FZgrlAMMew8jnGv0msDdvbVFL7KYjMPwWxhvSomYT1ga2OMKiFvFwARk5Clcgdek giLM8rrZnHPHJImakK9q43NlGZNAnjRN4nS66hyiYHe0f5O4lYZMBUIcA2FuelER cdYHToTzssc9BG+UUAJJR3ivZaJAamRlV38aOec2Lt36EcIOh3Z7zI8oEqc6BR4K o+tofKVFKZvYHSx/mAB0Yg3Bi4sp9L+OvYWqQXN6OalJ57IuMw5xNsNRIfVHg11j lF0Wi0O5LRwFWy/OfZ3p7J7RfNQGZvXzctUWISUYoD9TGerXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEolBfcTSCLfw5EeFDFUrkJG+yhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNmEx NTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0N2Y3YTYxZjEvZWNiY2NhMjUtN2UwZS0z OGFiLTgzMjktODJlOTcxOTViYjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjZhMTUxODMtMmMyMy00ZDBhLTlh YWEtZmVlNDdmN2E2MWYxL2Y2YTE1MTgzLTJjMjMtNGQwYS05YWFhLWZlZTQ3Zjdh NjFmMS5jcmwwHwYDVR0jBBgwFoAUXn1mq2g8dHRGhTS6+1CkL33PqZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNmExNTE4My0yYzIzLTRkMGEtOWFhYS1mZWU0 N2Y3YTYxZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDt1JWHMw6PvCmg12+8KR0EpMuLFg/ISTL/gdGJXI5icjTzPDOr8PhD BbvqKnkwvvvJJyVdmcIydljhk6W+6SkRsGP/8FwJxmqr29yF2dPc18GfoUdK9Vut XuND/tnOIqKIAphk+XqYzwpbHaj3T0ei40QMaWOUFQspLKPnO++zyfclvG9Gv1Af PXNpANHoC5SLviYOySBk2j1a/h5STmQnqxk8vAtPU/yq00EheHjlt/mW0jN3Tqgy CzbqfwK/AXLH+fEjApH2S6QamqE+DFsAcGs8+h2sNraXne6O/6QU2/f9WuLISmTu qXz8sSik+HMk0UA9KMuum0HEUQM4j+s= -----END CERTIFICATE-----Generated at Sat Sep 5 00:43:55 2026 by rpki-client