$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa File: 4332eacc-e724-3376-9a5d-fe44540381b1.roa (raw, json) Hash identifier: r94BI32ncQWDCaMJBHtL42ZPPcdgJUMQeJVaJOGWUCA= Subject key identifier: 74:45:92:4E:9A:A9:1A:69:02:71:6D:C8:B3:4F:B0:C2:6E:6B:DB:4D Certificate issuer: /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Certificate serial: 010D0C9F4328584F4F0812D394683528ECC3F8C0 Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 61112 IP address blocks: 23.158.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:12:d3:94:68:35:28:ec:c3:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=363a50cf-f60d-430b-aa2b-c660a614f83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:35:c1:0e:27:14:60:d7:d8:db:d0:b8:57:35: 85:55:9e:c5:5d:c1:f2:07:85:32:cb:d1:bc:7d:ed: 2a:23:e2:2c:ca:20:a0:27:e7:7e:19:1c:76:c4:59: 6c:02:1d:45:e5:1d:33:2b:35:2b:fc:fa:3d:e4:ba: 2d:5e:9a:6b:37:66:c3:a9:ee:ac:6d:13:a0:e3:54: 93:9c:be:12:89:6b:0a:83:25:f2:70:fb:d3:c0:4f: 1c:85:02:34:f8:24:27:12:64:5b:0e:f9:68:d1:c2: 32:c5:8c:fc:46:2e:2b:2d:f3:79:b8:18:d5:9b:2a: 44:51:cd:73:cf:d2:46:74:95:0b:58:9e:0b:5b:e9: dd:b7:b5:15:86:62:8a:35:4c:37:54:e0:ee:9c:6e: 3c:8d:bd:8a:f3:f4:a5:56:fe:32:84:94:9b:34:77: 03:1d:cf:3a:67:32:20:a9:a8:dc:8c:e7:25:2e:35: 75:bb:0f:23:e7:b3:3a:1b:9e:74:cc:e1:e2:af:e7: 52:07:33:be:08:59:53:46:e2:a1:5e:5c:32:a8:f8: 50:f0:fa:cb:b8:93:b6:cb:93:34:67:92:c5:76:75: 8c:8e:16:00:71:6b:46:e1:7d:cd:05:1b:d4:36:89: 72:20:e4:80:52:36:db:5d:69:9c:3a:fb:c5:da:b1: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:92:4E:9A:A9:1A:69:02:71:6D:C8:B3:4F:B0:C2:6E:6B:DB:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/4332eacc-e724-3376-9a5d-fe44540381b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl X509v3 Authority Key Identifier: keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ae:6b:fc:97:f2:63:63:e0:30:b6:96:7c:15:08:28:5b:b6: 6c:63:8a:55:3f:7d:0f:3a:d7:03:af:9b:df:5f:e4:4b:29:74: 7b:fe:5d:88:1f:05:b7:ad:7a:88:94:a6:36:25:53:a9:fd:7a: ba:b4:ca:f0:67:a4:1f:64:a0:bf:63:83:0e:8b:01:c6:1a:5a: 73:78:f8:2b:95:2f:bf:a6:82:12:fe:e2:c9:e0:08:40:56:4d: 02:e6:d2:55:6d:ca:85:d2:6c:4e:4a:93:11:20:2a:39:ae:a8: 2e:d7:6e:79:7a:5a:84:3f:dd:67:7c:b0:53:be:88:2a:75:b6: 87:43:67:d9:26:67:3e:89:4b:82:c1:28:48:26:ce:45:e2:5d: 96:48:40:19:e2:fc:65:ef:30:dd:09:81:35:f2:c5:81:c7:f1: dc:92:62:31:f8:06:7c:04:6e:eb:6d:21:86:96:7b:f4:dd:14: 0d:9f:f7:4c:98:06:7c:ce:df:86:1c:04:c2:89:6a:2f:63:eb: 37:f3:21:2d:c9:7b:9b:a5:d3:62:4a:90:3a:50:d5:ed:7e:f3: 91:bf:10:83:75:d8:2a:c0:ba:d1:aa:d5:9b:71:a1:28:55:35: 64:63:8e:2c:d6:5d:c0:f1:df:f8:3a:26:79:8b:31:fe:be:8a: d3:52:d3:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBLTlGg1KOzD+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2 YmY3MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MzYzYTUwY2YtZjYwZC00MzBiLWFhMmItYzY2MGE2MTRmODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zXBDicUYNfY29C4VzWFVZ7FXcHyB4Uyy9G8 fe0qI+IsyiCgJ+d+GRx2xFlsAh1F5R0zKzUr/Po95LotXpprN2bDqe6sbROg41ST nL4SiWsKgyXycPvTwE8chQI0+CQnEmRbDvlo0cIyxYz8Ri4rLfN5uBjVmypEUc1z z9JGdJULWJ4LW+ndt7UVhmKKNUw3VODunG48jb2K8/SlVv4yhJSbNHcDHc86ZzIg qajcjOclLjV1uw8j57M6G550zOHir+dSBzO+CFlTRuKhXlwyqPhQ8PrLuJO2y5M0 Z5LFdnWMjhYAcWtG4X3NBRvUNolyIOSAUjbbXWmcOvvF2rFXLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRFkk6aqRppAnFtyLNPsMJua9tNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4 ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvNDMzMmVhY2MtZTcyNC0z Mzc2LTlhNWQtZmU0NDU0MDM4MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1 ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2 NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4 ZTU2NjZiZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF56IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuua/yX8mNj4DC2lnwVCChbtmxjilU/fQ861wOvm99f5EspdHv+XYgf BbeteoiUpjYlU6n9erq0yvBnpB9koL9jgw6LAcYaWnN4+CuVL7+mghL+4sngCEBW TQLm0lVtyoXSbE5KkxEgKjmuqC7Xbnl6WoQ/3Wd8sFO+iCp1todDZ9kmZz6JS4LB KEgmzkXiXZZIQBni/GXvMN0JgTXyxYHH8dySYjH4BnwEbuttIYaWe/TdFA2f90yY BnzO34YcBMKJai9j6zfzIS3Je5ul02JKkDpQ1e1+85G/EIN12CrAutGq1ZtxoShV NWRjjizWXcDx3/g6JnmLMf6+itNS01o= -----END CERTIFICATE-----Generated at Thu Oct 8 10:59:48 2026 by rpki-client