$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/23a1bef9-898c-3452-9847-5c0ef1350886.roa File: 23a1bef9-898c-3452-9847-5c0ef1350886.roa (raw, json) Hash identifier: HNh4VC+wOO05I7IxVMipTDQm4MhaXWlQdyZ7jJ76eGU= Subject key identifier: 88:DA:73:03:E0:E3:56:96:63:CE:E1:20:D8:C0:F0:30:B0:96:4F:77 Certificate issuer: /CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Certificate serial: 010D0C9F4328584EB5C5146E15537D0B059AA520 Authority key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/23a1bef9-898c-3452-9847-5c0ef1350886.roa Signing time: Mon 03 Aug 2026 03:26:55 +0000 ROA not before: Mon 03 Aug 2026 03:26:55 +0000 ROA not after: Sun 01 Nov 2026 03:26:55 +0000 asID: 138997 IP address blocks: 169.128.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:c5:14:6e:15:53:7d:0b:05:9a:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Validity Not Before: Aug 3 03:26:55 2026 GMT Not After : Nov 1 03:26:55 2026 GMT Subject: CN=9bc8aeb5-1632-4a72-9cdf-8135a0e01ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:f9:ca:80:bf:bd:ea:4c:d5:fb:b8:3a:d7: 84:71:6f:78:55:37:36:f1:df:79:ed:87:1b:62:d2: 47:36:2a:09:ca:86:a6:6e:de:c8:c9:48:8b:fb:61: 1f:0b:50:54:72:b3:bf:39:12:a6:51:ad:62:98:d7: 0b:94:12:08:66:bd:f2:38:49:bb:14:f9:92:f4:ca: 80:2e:80:b0:5f:61:49:b0:f7:46:b3:70:62:75:c2: da:04:4a:d5:bd:3f:cc:0f:17:66:08:6b:9e:73:94: 26:cf:94:51:5f:b0:8c:14:95:58:63:9e:a4:ab:2e: da:bb:d3:5e:04:51:01:32:cc:d7:54:b1:fa:b6:83: 02:74:4f:b5:dc:77:f1:e3:90:ac:3f:b6:d4:e4:93: 40:e2:45:4c:b7:3f:fc:2c:4c:d3:15:95:41:c7:a1: 0f:20:5a:77:84:e3:e2:3e:a7:1b:1c:64:0b:cf:10: 5e:57:7d:ba:44:18:7f:3c:46:a6:b9:f4:d5:de:05: f4:8d:18:07:ad:43:94:a8:35:e3:14:91:31:63:f1: c4:97:a5:42:79:aa:83:44:92:f9:25:0a:61:53:96: 6a:6e:32:dd:62:e0:f9:34:2b:55:45:0f:92:fe:8f: 9b:4c:90:0a:79:1a:51:65:2e:59:85:6f:4c:34:8f: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DA:73:03:E0:E3:56:96:63:CE:E1:20:D8:C0:F0:30:B0:96:4F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/23a1bef9-898c-3452-9847-5c0ef1350886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.crl X509v3 Authority Key Identifier: keyid:8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer sbgp-ipAddrBlock: critical IPv4: 169.128.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c4:31:15:aa:7f:bf:91:97:69:d7:68:cf:29:ba:02:76:ee: a4:61:60:75:7d:77:e8:7b:00:47:25:fe:8f:6f:e1:66:38:a1: 63:c0:29:8a:de:68:92:96:26:bd:08:41:cf:08:ad:25:9b:ea: 40:ee:df:73:c7:34:e5:ba:dd:49:f4:70:a8:bb:a8:ad:3c:1c: c0:e1:fd:36:23:a1:f2:ed:06:e9:6d:e5:0c:a6:fd:0b:97:40: 39:79:16:e7:65:49:87:92:8e:5d:b5:1c:99:90:f5:d4:e2:3e: a3:f6:48:a3:99:9f:09:cd:0a:12:1c:ab:2b:36:cd:4f:81:23: 2f:e0:4c:40:db:18:83:93:20:bf:52:28:63:df:1f:6f:13:be: c5:bd:c6:4f:ff:c8:cc:90:95:9d:3a:c6:e6:63:39:17:7c:14: 7d:67:3b:8d:b2:e4:2c:3d:f7:4f:21:35:f9:62:be:c4:03:53: 12:bb:2c:50:04:78:c7:88:fd:f5:1f:9e:85:bb:bb:ba:0d:36: 57:0b:a7:6c:5b:76:9a:68:36:58:12:fb:bf:a4:80:4c:1d:da: a7:76:16:b7:3a:2b:99:4c:f4:eb:4f:8b:3f:97:82:d9:87:ce: 14:2e:48:43:c2:aa:39:a3:25:86:13:39:be:cc:4e:d4:42:db: 29:2e:06:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61xRRuFVN9CwWapSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIy NmRjMB4XDTI2MDgwMzAzMjY1NVoXDTI2MTEwMTAzMjY1NVowLzEtMCsGA1UEAxMk OWJjOGFlYjUtMTYzMi00YTcyLTljZGYtODEzNWEwZTAxYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi035yoC/vepM1fu4OteEcW94VTc28d957Ycb YtJHNioJyoambt7IyUiL+2EfC1BUcrO/ORKmUa1imNcLlBIIZr3yOEm7FPmS9MqA LoCwX2FJsPdGs3BidcLaBErVvT/MDxdmCGuec5Qmz5RRX7CMFJVYY56kqy7au9Ne BFEBMszXVLH6toMCdE+13Hfx45CsP7bU5JNA4kVMtz/8LEzTFZVBx6EPIFp3hOPi PqcbHGQLzxBeV326RBh/PEamufTV3gX0jRgHrUOUqDXjFJExY/HEl6VCeaqDRJL5 JQphU5ZqbjLdYuD5NCtVRQ+S/o+bTJAKeRpRZS5ZhW9MNI9I6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjacwPg41aWY87hINjA8DCwlk93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2 YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvMjNhMWJlZjktODk4Yy0z NDUyLTk4NDctNWMwZWYxMzUwODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWU1NmJkOTEtY2M4ZC00YTczLTk1 OTctMTdhYjk0MGIyNmRjLzllNTZiZDkxLWNjOGQtNGE3My05NTk3LTE3YWI5NDBi MjZkYy5jcmwwHwYDVR0jBBgwFoAUio2Alw6T0Y5mK3tGsC7iQEVsiO4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2Fi OTQwYjI2ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYA2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbEMRWqf7+Rl2nXaM8pugJ27qRhYHV9d+h7AEcl/o9v4WY4oWPAKYre aJKWJr0IQc8IrSWb6kDu33PHNOW63Un0cKi7qK08HMDh/TYjofLtBult5Qym/QuX QDl5FudlSYeSjl21HJmQ9dTiPqP2SKOZnwnNChIcqys2zU+BIy/gTEDbGIOTIL9S KGPfH28TvsW9xk//yMyQlZ06xuZjORd8FH1nO42y5Cw9908hNflivsQDUxK7LFAE eMeI/fUfnoW7u7oNNlcLp2xbdppoNlgS+7+kgEwd2qd2Frc6K5lM9OtPiz+XgtmH zhQuSEPCqjmjJYYTOb7MTtRC2ykuBkc= -----END CERTIFICATE-----Generated at Sat Sep 5 03:23:25 2026 by rpki-client