$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa File: 13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa (raw, json) Hash identifier: 5Ird8zuHsFMGMgQRgYn5ZsZPS5GqiVTxfQJzfzcHy3M= Subject key identifier: 5D:E5:52:69:8E:09:BE:92:C5:A7:EB:E2:C9:FD:E2:AC:68:E6:1F:AB Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584F51D2A449DD7D7F9DA9D29980 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 53388 IP address blocks: 23.128.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:a4:49:dd:7d:7f:9d:a9:d2:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=13d99d74-e869-4a02-9016-a14249bdaa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:8a:b6:b1:83:bf:bb:fb:08:9e:4b:29:5d: f2:10:e1:07:96:cf:ff:a4:ca:2c:c0:85:d0:85:08: a0:84:74:d8:57:6c:79:cd:d3:44:23:0f:ce:51:b1: df:05:c3:a8:9d:47:b2:a6:03:17:76:3d:40:0c:0f: 8c:fb:72:d6:be:6c:a9:0c:07:be:59:60:a8:a3:41: 53:8b:69:43:82:7e:07:29:f0:8a:16:64:f9:0b:56: 25:e5:1d:9c:bf:3e:f8:9d:e7:d3:e7:06:7d:da:44: b7:13:a2:00:a6:33:6b:5f:fa:49:4d:4a:41:c0:55: d1:64:b5:8d:b2:35:2c:cf:b5:99:41:a0:d3:82:b3: b8:c9:e9:ed:be:b9:72:03:eb:46:13:14:28:33:2f: 85:c3:f3:10:98:ca:64:09:c0:b2:06:7f:01:68:ca: 74:01:ee:90:57:bd:df:22:c5:d6:18:4c:d3:ca:e4: 65:5b:c9:84:1a:84:66:84:ea:44:6a:74:af:4b:78: 14:49:62:f6:64:c7:d7:a7:6f:8b:d8:e7:a8:5f:5e: 05:f7:d2:fa:2c:5a:1e:8f:38:3f:51:eb:44:4f:07: 62:71:a1:f4:b5:9e:1d:03:2e:e8:88:97:1d:d5:22: 7e:c9:d9:73:07:99:c8:bd:f3:50:b0:57:ce:57:61: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E5:52:69:8E:09:BE:92:C5:A7:EB:E2:C9:FD:E2:AC:68:E6:1F:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 23.128.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:88:c3:8f:d4:a2:ed:c7:a5:14:f8:7b:01:dc:f5:26:5a:a8: 8f:6d:91:44:d9:c0:00:76:04:ee:8d:27:3b:a2:4a:84:72:44: cc:e4:13:7a:16:45:ba:1a:70:11:60:92:c2:25:71:b3:2f:64: 1a:0d:4d:54:e8:dd:d2:74:55:91:19:5c:ce:b5:84:35:89:79: 15:30:ed:96:5a:74:50:ac:a5:4a:45:f0:bc:b3:1d:20:0b:e6: fe:1e:fd:37:82:52:e2:f7:bc:c1:56:26:08:08:c7:1f:25:d0: 7b:65:f8:79:ac:1f:c6:73:1d:fd:70:90:87:9b:3d:c4:08:25: 17:ea:bb:5f:b3:8a:a4:b1:3f:27:05:aa:57:94:e1:fb:16:d2: 6e:47:2f:ce:97:db:db:81:71:0b:20:8c:4f:72:89:cd:60:da: 8d:ff:4b:c1:75:a7:88:a9:8a:7d:91:69:2e:7b:17:07:a6:fc: 5c:9b:8b:53:33:66:97:6a:e0:56:9b:1e:1c:ff:3e:bd:1a:93: f7:3a:2d:d7:4c:cf:fd:5f:d2:f9:39:cc:b7:69:01:35:89:9e: 90:3f:27:24:eb:94:b8:0e:bf:fd:a9:32:71:a7:de:9b:40:ef: 7f:07:3c:4a:16:ed:ba:fb:06:bd:3b:07:73:69:2a:27:5a:aa: c1:1a:23:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qRJ3X1/nanSmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MTNkOTlkNzQtZTg2OS00YTAyLTkwMTYtYTE0MjQ5YmRhYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/+KtrGDv7v7CJ5LKV3yEOEHls//pMoswIXQ hQighHTYV2x5zdNEIw/OUbHfBcOonUeypgMXdj1ADA+M+3LWvmypDAe+WWCoo0FT i2lDgn4HKfCKFmT5C1Yl5R2cvz74nefT5wZ92kS3E6IApjNrX/pJTUpBwFXRZLWN sjUsz7WZQaDTgrO4yentvrlyA+tGExQoMy+Fw/MQmMpkCcCyBn8BaMp0Ae6QV73f IsXWGEzTyuRlW8mEGoRmhOpEanSvS3gUSWL2ZMfXp2+L2OeoX14F99L6LFoejzg/ UetETwdicaH0tZ4dAy7oiJcd1SJ+ydlzB5nIvfNQsFfOV2HIFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3lUmmOCb6Sxafr4sn94qxo5h+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvMTNiMDVhOTUtNTVkZC0z M2U4LWJhYWYtYmNjZGMwNDMyYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOIw4/Uou3HpRT4ewHc9SZaqI9tkUTZwAB2BO6NJzuiSoRyRMzkE3oW RboacBFgksIlcbMvZBoNTVTo3dJ0VZEZXM61hDWJeRUw7ZZadFCspUpF8LyzHSAL 5v4e/TeCUuL3vMFWJggIxx8l0Htl+HmsH8ZzHf1wkIebPcQIJRfqu1+ziqSxPycF qleU4fsW0m5HL86X29uBcQsgjE9yic1g2o3/S8F1p4ipin2RaS57Fwem/Fybi1Mz Zpdq4FabHhz/Pr0ak/c6LddMz/1f0vk5zLdpATWJnpA/JyTrlLgOv/2pMnGn3ptA 738HPEoW7br7Br07B3NpKidaqsEaI+g= -----END CERTIFICATE-----Generated at Thu Oct 1 15:27:47 2026 by rpki-client