$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/e9c0da0f-1b1d-3e96-9287-df27af9e32aa.roa File: e9c0da0f-1b1d-3e96-9287-df27af9e32aa.roa (raw, json) Hash identifier: wV5m3+crf4f13P0KAkSV/tZYnPDgCiQaAek5Jdd1Z5Y= Subject key identifier: 16:41:D9:E8:87:44:A2:9F:A7:E9:5B:59:DC:27:A3:7C:71:21:1F:07 Certificate issuer: /CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3 Certificate serial: 010D0C9F4328584F20F7C283900E711B0BA66770 Authority key identifier: 58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/e9c0da0f-1b1d-3e96-9287-df27af9e32aa.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 16276 IP address blocks: 23.156.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c2:83:90:0e:71:1b:0b:a6:67:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e47881-5c64-4fc0-bf03-5a39d0827bc3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=8aa32139-3cc2-4556-b507-bfa7bb227f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:39:cf:f9:aa:ce:b8:42:ce:16:54:02:52: 10:5a:2b:84:ca:fe:51:b9:d1:c2:97:bc:e9:6b:29: 94:69:26:df:76:07:ce:0c:98:0a:52:a7:b3:f8:f7: 2d:84:b9:1a:46:9b:32:eb:6a:da:c4:c8:b5:de:e2: 9b:82:56:99:99:81:0e:40:fa:7c:2b:66:f4:86:7f: 09:ad:36:df:6d:fe:85:da:66:aa:f9:69:3b:01:d1: 93:54:80:fa:0f:c9:be:75:3c:71:4e:85:93:6e:9f: 88:d7:2d:dd:7d:4b:4b:5c:be:47:85:4e:42:ba:53: 5e:52:f2:f4:52:fa:01:5a:57:a9:a5:9c:63:46:79: d0:6c:84:ce:35:4b:2a:68:b3:88:9a:29:4a:19:15: 9f:c4:52:e3:be:be:1e:f0:5f:a4:42:c3:46:5d:a6: 08:58:50:49:d0:eb:99:1a:96:47:23:6a:79:41:20: b7:f8:64:7a:ff:7b:fe:33:a0:f2:f9:a6:05:3a:e9: 6e:39:1d:c0:03:7d:49:9b:b7:e1:8d:25:56:f4:b5: a9:80:19:04:9b:e5:01:98:03:b5:d2:79:b5:b4:79: e7:ef:75:eb:d8:ea:59:a1:49:18:ab:d4:be:5d:42: e2:95:87:fe:c1:8f:57:47:cb:f2:cc:3b:d3:dd:ee: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:41:D9:E8:87:44:A2:9F:A7:E9:5B:59:DC:27:A3:7C:71:21:1F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/e9c0da0f-1b1d-3e96-9287-df27af9e32aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3/48e47881-5c64-4fc0-bf03-5a39d0827bc3.crl X509v3 Authority Key Identifier: keyid:58:E2:76:96:3A:69:A8:A5:67:AB:AA:BE:E5:89:74:43:84:C6:F3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48e47881-5c64-4fc0-bf03-5a39d0827bc3.cer sbgp-ipAddrBlock: critical IPv4: 23.156.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:48:71:01:ce:c2:3b:9a:06:4f:8b:c4:f1:a8:7c:18:01:fd: cc:e5:4d:c8:c1:8e:1c:12:1f:d7:e4:ca:9f:15:88:55:90:9d: 38:b0:26:c8:a4:9f:78:ee:5d:d4:6f:82:bb:ac:8e:dd:72:80: 2e:b7:27:37:f8:66:cd:17:b6:c7:87:df:8c:7f:e2:29:c2:aa: 0f:e4:4e:4b:a5:c6:ec:48:77:01:13:1a:21:c9:48:b3:89:d1: 48:5d:87:67:0f:71:23:bc:ed:f0:50:cf:1f:cf:df:29:b1:7d: 4b:2f:a0:44:64:b2:c4:90:71:70:ad:2a:c9:3b:9c:ab:43:c0: 11:f0:ad:8d:d9:14:54:5d:c2:9e:19:92:08:d8:7d:af:be:0a: be:5f:a7:e8:46:20:bf:25:0b:c2:6f:5d:3e:a8:14:dd:53:b8: de:46:4e:bf:1d:1c:b2:e4:92:5d:15:54:25:96:5f:97:83:28: 84:bf:2e:e3:b6:2e:e8:bf:d2:01:ca:93:5c:65:e5:dd:bc:6b: d2:6d:d6:c5:e5:39:55:6a:8c:4c:02:16:e6:c3:57:e6:45:02: 55:09:cb:43:78:e8:03:1f:fd:7a:21:e0:b4:7e:40:ff:3c:00: 5e:a6:9b:e4:3d:c2:42:43:f6:3c:e6:67:1a:65:e5:94:8c:c6: fb:9b:ee:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98KDkA5xGwumZ3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDhlNDc4ODEtNWM2NC00ZmMwLWJmMDMtNWEzOWQwODI3 YmMzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGFhMzIxMzktM2NjMi00NTU2LWI1MDctYmZhN2JiMjI3ZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/w5z/mqzrhCzhZUAlIQWiuEyv5RudHCl7zp aymUaSbfdgfODJgKUqez+PcthLkaRpsy62raxMi13uKbglaZmYEOQPp8K2b0hn8J rTbfbf6F2maq+Wk7AdGTVID6D8m+dTxxToWTbp+I1y3dfUtLXL5HhU5CulNeUvL0 UvoBWleppZxjRnnQbITONUsqaLOImilKGRWfxFLjvr4e8F+kQsNGXaYIWFBJ0OuZ GpZHI2p5QSC3+GR6/3v+M6Dy+aYFOuluOR3AA31Jm7fhjSVW9LWpgBkEm+UBmAO1 0nm1tHnn73Xr2OpZoUkYq9S+XULilYf+wY9XR8vyzDvT3e5A8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZB2eiHRKKfp+lbWdwno3xxIR8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80OGU0 Nzg4MS01YzY0LTRmYzAtYmYwMy01YTM5ZDA4MjdiYzMvZTljMGRhMGYtMWIxZC0z ZTk2LTkyODctZGYyN2FmOWUzMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDhlNDc4ODEtNWM2NC00ZmMwLWJm MDMtNWEzOWQwODI3YmMzLzQ4ZTQ3ODgxLTVjNjQtNGZjMC1iZjAzLTVhMzlkMDgy N2JjMy5jcmwwHwYDVR0jBBgwFoAUWOJ2ljppqKVnq6q+5Yl0Q4TG80YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80OGU0Nzg4MS01YzY0LTRmYzAtYmYwMy01YTM5 ZDA4MjdiYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5wZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBIcQHOwjuaBk+LxPGofBgB/czlTcjBjhwSH9fkyp8ViFWQnTiwJsik n3juXdRvgrusjt1ygC63Jzf4Zs0XtseH34x/4inCqg/kTkulxuxIdwETGiHJSLOJ 0Uhdh2cPcSO87fBQzx/P3ymxfUsvoERkssSQcXCtKsk7nKtDwBHwrY3ZFFRdwp4Z kgjYfa++Cr5fp+hGIL8lC8JvXT6oFN1TuN5GTr8dHLLkkl0VVCWWX5eDKIS/LuO2 Lui/0gHKk1xl5d28a9Jt1sXlOVVqjEwCFubDV+ZFAlUJy0N46AMf/Xoh4LR+QP88 AF6mm+Q9wkJD9jzmZxpl5ZSMxvub7qw= -----END CERTIFICATE-----Generated at Fri Sep 11 15:35:12 2026 by rpki-client