$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa File: 5025a268-fe54-38c3-b693-a58aa12b8433.roa (raw, json) Hash identifier: KkXhL4HcS+L8k3My+r5UBPOBe5cLbVNeR4nRtSMVyt0= Subject key identifier: BE:3B:D3:0D:19:4C:E0:F4:45:C7:A6:83:8E:01:9B:9F:D0:B1:A6:9B Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F43DD59B0E7B9D1E5310D11C0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22652 IP address blocks: 173.231.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:59:b0:e7:b9:d1:e5:31:0d:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=c78edb25-e009-413d-9076-e5429c6c8d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:e1:85:3f:e8:91:2b:f1:0d:22:4a:d0:b0: 45:05:50:2b:90:ec:64:1d:38:3c:83:b3:87:a7:04: 43:5b:b4:1c:47:81:92:7b:11:42:cc:6c:c6:47:a1: ef:17:3a:ab:04:d7:c2:66:4b:16:be:85:de:4a:f4: 37:76:8c:96:07:8c:8b:f1:fd:2d:a4:ec:4b:ff:92: 4f:1b:90:8e:90:ca:96:40:d8:cf:a4:14:1e:5c:1b: 72:9b:40:e2:b0:c9:18:ab:08:7d:c3:22:3b:bf:9e: 2f:08:de:3b:06:5d:1c:f5:05:af:11:a9:84:2a:fb: 96:cd:3c:87:c4:3b:0c:c8:83:08:76:c9:29:3b:da: e3:48:60:be:07:cb:23:1c:b5:08:ae:05:cd:8a:27: 7d:ea:e6:3d:56:93:73:c5:55:9e:37:3e:b6:17:b0: 60:d4:2d:df:83:c9:5d:a1:41:ec:ac:d5:f4:b5:b3: b0:3c:65:f3:df:90:62:d5:09:c3:4e:bd:38:9d:04: 37:48:fd:71:c2:e2:6e:b9:95:45:2a:57:56:82:ec: c7:71:ee:1e:cd:15:21:9b:68:c5:af:88:0a:2e:fc: ef:38:3e:a3:7a:71:66:4f:17:10:ba:da:cc:18:37: 8c:e9:f2:8f:12:eb:07:8b:4d:0f:77:37:70:04:0a: 30:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3B:D3:0D:19:4C:E0:F4:45:C7:A6:83:8E:01:9B:9F:D0:B1:A6:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:93:3d:d1:7a:ad:94:e2:12:b5:db:56:eb:6a:61:61:03:4b: 3a:db:87:74:78:47:10:6c:c0:d7:4b:1f:2a:ca:60:2d:db:80: bc:c6:5e:4c:bc:c9:fd:68:c7:eb:ff:ca:53:0f:b1:51:91:18: 2e:3e:ef:14:de:b5:91:85:1b:4d:ec:b0:65:7d:c5:60:9b:c0: aa:73:5e:b9:c5:d6:b9:ae:51:51:32:e5:0f:85:54:2b:31:29: e3:61:c8:92:e8:e6:bc:d9:89:2b:38:b6:12:24:ad:79:89:e0: 69:88:25:af:bf:be:b3:6f:c5:aa:3b:bc:3f:03:c9:c1:96:d5: cd:d4:7f:40:fd:76:58:1e:4e:53:b3:91:a6:0d:d3:d3:49:f9: 36:1d:1e:8b:77:4a:33:c4:8b:77:23:61:ff:00:a9:5b:b2:ee: 49:62:bf:11:81:99:62:fc:92:4b:1c:7f:96:b5:e0:38:63:9b: d9:65:82:40:a1:7f:4c:ee:5b:ba:f1:0e:ed:a8:1c:5f:d7:ee: d7:42:7e:fd:48:70:50:f2:29:46:8a:61:dc:a3:b3:d9:4d:58: 63:6e:9d:76:98:fc:0e:20:06:5c:8d:f1:09:2c:69:e2:77:c2: 05:13:85:b3:e6:c0:7e:ea:28:f8:c0:bd:48:aa:8c:12:11:b1: 79:38:00:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3Vmw57nR5TENEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk Yzc4ZWRiMjUtZTAwOS00MTNkLTkwNzYtZTU0MjljNmM4ZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QnhhT/okSvxDSJK0LBFBVArkOxkHTg8g7OH pwRDW7QcR4GSexFCzGzGR6HvFzqrBNfCZksWvoXeSvQ3doyWB4yL8f0tpOxL/5JP G5COkMqWQNjPpBQeXBtym0DisMkYqwh9wyI7v54vCN47Bl0c9QWvEamEKvuWzTyH xDsMyIMIdskpO9rjSGC+B8sjHLUIrgXNiid96uY9VpNzxVWeNz62F7Bg1C3fg8ld oUHsrNX0tbOwPGXz35Bi1QnDTr04nQQ3SP1xwuJuuZVFKldWguzHce4ezRUhm2jF r4gKLvzvOD6jenFmTxcQutrMGDeM6fKPEusHi00PdzdwBAow9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL470w0ZTOD0Rcemg44Bm5/QsaabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNTAyNWEyNjgtZmU1NC0z OGMzLWI2OTMtYTU4YWExMmI4NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAred1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGTPdF6rZTiErXbVutqYWEDSzrbh3R4RxBswNdLHyrKYC3bgLzGXky8 yf1ox+v/ylMPsVGRGC4+7xTetZGFG03ssGV9xWCbwKpzXrnF1rmuUVEy5Q+FVCsx KeNhyJLo5rzZiSs4thIkrXmJ4GmIJa+/vrNvxao7vD8DycGW1c3Uf0D9dlgeTlOz kaYN09NJ+TYdHot3SjPEi3cjYf8AqVuy7klivxGBmWL8kkscf5a14Dhjm9llgkCh f0zuW7rxDu2oHF/X7tdCfv1IcFDyKUaKYdyjs9lNWGNunXaY/A4gBlyN8QksaeJ3 wgUThbPmwH7qKPjAvUiqjBIRsXk4AHI= -----END CERTIFICATE-----Generated at Thu Sep 24 10:11:59 2026 by rpki-client